Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 67

Copyright © 2010, Juniper Networks, Inc.
Table 9: Administrator Role Configuration Details (continued)
Option Function
Admin Role > General > Restrictions > Source IP Restrictions tab
Allow Specifies from which IP
addresses users can access
an Infranet Controller sign-in
page, be mapped to a role, or
access a resource.
Source IP Specifies the source IP
Address addresses.
Source IP Specifies the IP netmask.
Netmask
Access Specifies whether to allow or
deny access.
Admin Role > General > Restrictions > Browser Restrictions tab
Allow Specifies from which web
browsers users can access
an Infranet Controller sign-in
page or be mapped to a role.
User agent Specifies the format.
pattern
Action Specifies whether to allow or
deny access.
Admin Role > General > Restrictions >Certificate Restrictions tab
Chapter 6: Configuring User Roles and Administrator Roles
Your Action
Select Users from any IP address to enable
users to sign into the Infranet Controller from
any IP address in order to satisfy the access
management requirement.
Select Users from IP addresses which pass
the specifies matching policies to allow you
to specify user access to the listed IP
addresses.
Enter the IP address.
Enter the IP netmask.
Select Allow to allow the user to use the IP.
Select Deny to prevent users from using the
IP.
Select Browsers with any user-agent to
allow users to access the Infranet Controller
or resources using any of the supported Web
browsers.
Select Browsers whose user-agent pass the
matching policies defined below to allow
you to define browser access control rules.
Enter a string in the format
*<browser_string>*
where start (*) is an optional character used to
match any character and <browser_string>is a
case-sensitive pattern that must match a
substring in the user-agent header sent by the
browser.
NOTE: You cannot include escape characters
(\) in browser restrictions.
Select Allow access to allow users to use a
browser that has a user-agent header
containing the<browser_string> substring.
Select Deny access to prevent users from
using a browser that has a user-agent header
containing the <browser_string> substring.
49