Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 217

Copyright © 2010, Juniper Networks, Inc.
Table 52: Authentication Realm Policies Configuration Details (continued)
Option Function
Access Allows or denies users to sign
in from the specified IP
address.
Authentication Policies > Browser tab
Allow Controls from which Web
browsers users/admins can
access the sign-in page of the
Secure Access device, be
mapped to a role, or access a
resource. You are prompted
with a sign-in attempt failed
error message when you try to
sign in to the device using an
unsupported browser.
User agent Specifies the user agent
pattern pattern.
Action Allows or denies users to use a
browser that has a user-agent
header containing the
<browser-string>substring.
Authentication Policies > Certificate tab
Chapter 12: Configuring Authentication Realms
Your Action
Select one of the following options from the
drop-down list:
Allow—Allows users to sign in from the
specified IP address.
Deny—Prevents users from signing in from
the specified IP address.
Select one of the following options from the
drop-down list:
Browsers with any user-agent—Allows you
to sign into the device from any browser and
the device submits the user credentials to the
authentication server.
Browsers whose user-agents pass the
matching policies defined below—Allows
you to sign in from a browser whose
user-agent string meets the specified pattern
requirements for the selected authentication
realm.
Enter a string in the format
*<browser_string>*
NOTE: This option is enabled only when you
select Browsers whose user-agents pass the
matching policies defined below from the
Allow drop-down list and then by clicking
New.
Select one of the following options from the
drop-down list:
Allow—Allows users to use a browser that
has a user-agent header containing the
<browser_string> substring.
Deny—Prevents users from using a browser
that has a user-agent header containing the
<browser_string> substring.
NOTE: This option is enabled only when you
select Browsers whose user-agents pass the
matching policies defined below from the
Allow drop-down list and then by clicking
New.
199