Figure 80: Configure External User Groups For Sales And Marketing; Figure 81: Configure Group Expression For Sales And Marketing - Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual

Network and Security Manager Administration Guide
412
For NOT expressions, use Operand 1 to select the user object, group, or expression
that cannot be present for a successful match. Because the operation is exclusion,
you do not need to configure Operand 2.
For AND expressions, use Operand 1 and Operand 2 to select the two user objects,
groups, or expressions that must be present for a successful match.
For OR expressions, use Operand 1 and Operand 2 to select the two user objects,
groups, or expressions, one of which must be present for a successful match.
Click OK. The group expression object appears in the Object Manager.
5.
After you have created a group expression object, you can use that object in the
Authentication rule options.
In this example, you configure a group expression to authenticate all users that belong
to your Sales group and your Marketing group, then add the expression to a security policy
that provides access to your protected networks.
First, create two external user group objects: one to represent the Sales users and the
1.
other to represent the Marketing users.

Figure 80: Configure External User Groups for Sales and Marketing

Next, create a group expression object that references both the Sales and Marketing
2.
groups.

Figure 81: Configure Group Expression for Sales and Marketing

Finally, add the group expression object to your firewall rule in the Authentication rule
3.
option.
Copyright © 2010, Juniper Networks, Inc.