Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 72

NSM Infranet Controller Configuration Guide
54
Table 9: Administrator Role Configuration Details (continued)
Option Function
Roaming Roaming sessions allow
session users to work across source
IP addresses. This is useful
for mobile users with
dynamically assigned IP
addresses, as it allows them
to sign in from their desk and
continue working.
Default Options for Delegated Admins >UI Options tab
Logo image Displays the logo in the
Current appearance box only
after you save your changes.
Background Updates the current
color appearance of the box.
Navigation Displays hierarchical
Menus navigation menus.
Your Action
Select Enabled to enable roaming user
sessions for users mapped to this group. A
roaming user session works across source IP
addresses, which allows mobile
administrators (laptop users) with dynamic
IP addresses to sign in to the Infranet
Controller from one location and continue
working from another. Disable this feature to
prevent users from accessing a previously
established session from a new source IP
address. This helps protect against an attack
spoofing a user's session, provided the hacker
was able to obtain a valid user's session
cookie.
Select Limit to subnet to limit the roaming
session to the local subnet specified in the
Netmask field. Administrators may sign in
from one IP address and continue using their
sessions with another IP address as long as
the new IP address is within the same subnet.
Select Disabled to disable roaming sessions
for administrators mapped to this role.
Administrators who sign in from one IP
address may not continue an active Infranet
Controller session from another IP address;
administrator sessions are tied to the initial
source IP address.
Click the Browse button and locate your custom
image file.
Type the hexadecimal number for the
background color or click the Color Palette icon
and pick the desired color.
Select Auto-enabled to determine whether
the administrator is signed in from a
supported platform and enables or disables
the hierarchical menus accordingly.
Select Enabled to enable hierarchical menus,
regardless of your platform. If the
administrator is signed in from an
unsupported platform, they may not be able
to use the hierarchical menus, even though
they are enabled.
Select Disabled to disable hierarchical
menus for all members of the role.
Copyright © 2010, Juniper Networks, Inc.