Configuring If-Map Session Import Policy On The Infranet Controller - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual

NSM Infranet Controller Configuration Guide
Related
Documentation
Configuring IF-MAP Session Import Policy on the Infranet Controller (NSM Procedure)
112
Table 34: IF–MAP Session-Export Policy Configuration Details (continued)
Option Function
Set IF-MAP Specifies a passed Host
Device Checker policy on the
Attributes Infranet Controller or SA
appliance.
Configuring IF-MAP Client Settings on the Infranet Controller (NSM Procedure) on
page 108
Configuring IF-MAP Server Settings on the Infranet Controller (NSM Procedure) on
page 107
Configuring IF-MAP Session Import Policy on the Infranet Controller (NSM Procedure)
on page 112
Configuring IF-MAP Server Replicas (NSM Procedure) on page 114
The session-export policies that you create allow IF-MAP data that represents a session
to be stored on the IF-MAP server. Session-import policies specify how the Infranet
Controller derives a set of roles and a username from the IF-MAP data in the IF-MAP
server. Session-import policies establish rules for importing user sessions from a different
Infranet Controller or SA appliance. Import policies allow you to match authenticated
users with corresponding roles on the target device. For example, you might configure
an import policy to specify that when IF-MAP data for a session includes the "Contractor"
capability, the imported session should have the "limited" role. Session-import policies
allow the Infranet Controller to properly assign roles based on information that the IF-MAP
server provides.
You configure session-import policies on IF-MAP client Infranet Controllers that are
connected to an Infranet Enforcer in front of protected resources.
To configure a session-import policy:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the Infranet Controller for which you
2.
want to configure a session-import policy.
Click the Configuration tab. In the configuration tree, select System > IF–MAP
3.
Federation > Session-Import Policies.
Your Action
Select this action and the following options
appear.
Copy Host Checker policy names—Select this
option to copy the name of each Host Checker
policy that passed for the session to a device
attribute.
Set device attributes specified below—Select
this option to set the specified device
attributes. The Device Attributes option
appears. From Device Attributes, click New and
enter a specified device attribute.
Copyright © 2010, Juniper Networks, Inc.