Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 157

Copyright © 2010, Juniper Networks, Inc.
Table 45: Infranet Controller eTrust SiteMinder Configuration
Details (continued)
Option
Protected Resource
Users authenticate using
tokens or one-time
passwords
Siteminder Settings > SMSESSION Cookie Settings tab
Cookie Domain
IVE Cookie Domain
Protocol
Chapter 13: Configuring Authentication Servers
Function Your Action
Specifies a default Enter a URL.
protected resource. If you
NOTE: You must enter a forward slash
do not create sign-in
(/) at the beginning of the resource
policies for SiteMinder, the
(for example, "
Infranet Controller uses
this default URL to set the
user's protection level for
the session. The Infranet
Controller also uses this
default URL if you select
the Automatic Sign-In
option.
Specifies that the user Select the check box.
authentication is done
using tokens or one-time
passwords.
Specifies the cookie Enter a URL for the cookie domain.
domain of the Infranet
NOTE:
Controller.
Specifies the internet Enter a URL.
domain(s) to which the
Infranet Controller sends
the SMSESSION cookie
using the same guidelines
outlined for the Cookie
Domain box.
Specifies that you to send Select the Protocol from the drop
cookies either securely or down list:
nonsecurely.
/ive-authentication
Multiple domains should use a
leading period and be comma
separated. For example:
. sales.myorg.com ,
marketing.myorg.com
. .
Domain names are case-sensitive.
You cannot use wildcard characters.
For example, if you define
". juniper.net ", the user must access
the Infranet Controller as
http://Infranet
"
Controller.juniper.net
" to ensure
that the SMSESSION cookie is sent
back to the Infranet Controller.
HTTPS— Sends cookies securely if
other Web agents are set up to
accept secure cookies.
HTTP—Sends cookies nonsecurely.
").
139