Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 201

Copyright © 2010, Juniper Networks, Inc.
Table 45: Secure Access eTrust SiteMinder Advanced Configuration
Details (continued)
Option
Siteminder Settings > Advanced tab
Enable Session Grace Period
Validate cookie every
(seconds)
Ignore Query Data
Accounting Port
Chapter 11: Configuring Authentication and Directory Servers
Function
Eliminates the overhead of
verifying a user's SMSESSION
cookie each time the user
requests the same resource by
indicating that the Secure
Access device should consider
the cookie valid for a certain
period of time.
If you do not select this option,
the Secure Access device
checks the user's SMSESSION
cookie on each request.
Specifies the time period for
the Secure Access device to
eliminate the overhead of
verifying a user's SMSESSION
cookie each time the user
requests the same resource by
indicating that the Secure
Access device should consider
the cookie valid for a certain
period of time.
Specifies that the Secure
Access device does not cache
the query parameter in its
URLs. Therefore, if a user
requests the same resource as
is specified in the cached URL,
the request should not fail.
Specifies that the value
entered in this field must
match the accounting port
value entered through the
Policy Server Management
Console in the web UI. By
default, this field matches the
policy server's default setting
of 44441.
Your Action
Select Siteminder Settings >
Advanced > Enable Session
Grace Period to enable this
feature.
You can eliminate the
overhead of verifying a user's
SMSESSION cookie each time
the user requests the same
resource by indicating that the
Secure Access device should
consider the cookie valid for a
certain period of time. During
that period, the Secure Access
device assumes that its
cached cookie is valid rather
than revalidating it against the
policy server. Note that the
value entered here does not
affect session or idle timeout
checking.
Enter the time period in
seconds.
Select the Ignore Query Data
option to enable this feature.
Enter the value.
183