Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 136

Configuring Secure Access Devices Guide
118
Table 26: Configuring Custom Web Applications Resource Profile
Details (continued)
Option
Block cookies from being sent
to the browser
Host-Header forwarding
Autopolicy: Rewriting Options > No rewriting (use JSAM) > JSAM Parameters
Server Hostname or IP
Server Port
Localhost IP
Client Port
Launch JSAM
Autopolicy: Rewriting Options > No rewriting (use JSAM) > Allowed WSAM Servers
Network Destination
Autopolicy: Rewriting Options > No rewriting tab
Function
Allows Secure Access device
to block cookies destined for
the client's browser. The
Secure Access device stores
the cookies locally and sends
them to applications whenever
they are requested.
Allows Secure Access device
to pass the hostname as part
of the host header instead of
the actual host identifier.
Specifies the DNS name of the
application server or the server
IP address.
Specifies the port on which the
remote server listens for client
connections.
Specifies a static loopback
address. If you do not provide
a static IP loopback address,
the Secure Access device
assigns an IP loopback
address dynamically.
Specifies the port on which
JSAM should listen for client
application connections.
Automatically starts JSAM
when the Secure Access
device encounters the base
URL.
Specifies resources for which
WSAM secures client/server
traffic between the client and
the Secure Access device. By
default, the Secure Access
device extracts the correct
server from the Web access
control policy. You may choose
to use this server as-is, modify
it, and/or add new servers to
the list.
Copyright © 2010, Juniper Networks, Inc.
Your Action
Select the Block cookies from
being sent to the browser
check box to enable this
option.
Select Host-Header
forwarding to enable this
option.
Enter the DNS name of the
application server or the server
IP address.
Enter the port.
Enter the IP address.
Enter the port.
Select the Launch JSAM check
box to enable this option.
Enter the hostname (the wild
cards '*' or '?' are accepted)
or an IP/netmask pair. Specify
multiple ports for a host as
separate entries.