Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 83

Copyright © 2010, Juniper Networks, Inc.
To configure Infranet Controller certificate access restrictions:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device tree tab, and then double-click the Infranet Controller device for
2.
which you want to configure certificate access restrictions.
Click the Configuration tab. In the configuration tree, select the level at which you
3.
want to implement certificate access restrictions:
Realm level—Select:
Administrators > Admin Realms >Select Realm > Authentication Policies >
Certificate to configure certificate access restrictions for admin realms.
Users > User Realms >Select Realm > Authentication Policies > Certificate to
configure certificate access restrictions for user realms.
Role level—Select:
Administrators > Admin Roles > Select Role > General > Restrictions >
Certificate Restrictions to configure certificate access restrictions for admin
roles.
Users > User Roles > Select Role > General > Restrictions > Certificate
Restrictions to configure certificate access restrictions for user roles.
Add or modify settings as specified in Table 13 on page 65.
4.
Click one:
5.
OK—Saves the changes.
Cancel—Cancels the modifications.
Table 13: Certificate Access Restrictions Configuring Details
Option Function
Allow Restricts Infranet Controller
and resource access by
requiring client-side
certificates.
Certificate Specifies the certificate field
Field information for the field/value
pair.
Chapter 7: Configuring Security Requirements for Administrators and Users
Your Action
Select All users to allow users to access the
Infranet Controller or resources from any
machine.
Select Users with a trusted client certificate
to allow users to access the Infranet Controller
from a machine with a trusted client
certificate.
Select All users, remember certificate while
user is signed in to remember all the users'
certificate while they are signed in.
NOTE: This option is applicable for admin and
user realms.
Enter the certificate field information.
65