Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 166

Configuring Secure Access Devices Guide
Related
Documentation
148
Table 35: Configuring Telnet and Secure Shell Resource Policy
Details (continued)
Option Function
Action Specifies the action you want to
perform if the user request matches
a resource in the Resource list
(optional).
New Specifies the resource to which the
Resources detailed rule applies.
Conditions Specifies one or more expressions to
evaluate to perform the action.
Options tab
IP based Allows the Secure Access device to
matching for look up the IP address corresponding
Hostname to each hostname specified in a
based policy Telnet/SSH resource policy. When a
resources user tries to access a server by
specifying an IP address rather than
the hostname, the Secure Access
device compares the IP to its cached
list of IP addresses to determine if a
hostname matches an IP address. If
there is a match, then the Secure
Access device accepts the match as
a policy match and applies the action
specified for the resource policy.
Configuring a Terminal Service Resource Policy (NSM Procedure) on page 149
Configuring Web Rewriting Resource Policies (NSM Procedure) on page 151
Your Action
Select one of the following options from
the drop-down list:
Allow—Allows the user to access the
resource.
Deny—Denies the user to access the
resource.
Specify one of the following options:
The same or a partial list of the
resources specified on the General tab.
A specific path or file on the server(s)
specified on the General tab, using
wildcards when appropriate.
A file type, preceded by a path if
appropriate or just specify
*/*.file_extension to indicate files with
the specified extension within any path
on the server(s) specified on the General
tab.
Specify one of the following options:
Boolean expressions: Using system
variables, write one or more Boolean
expressions using the NOT, OR, or AND
operators.
Custom expressions: Using the custom
expression syntax, write one or more
custom expressions.
Select Options > IP based matching for
Hostname based policy resources to
enable this feature.
Copyright © 2010, Juniper Networks, Inc.