Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 219

Copyright © 2010, Juniper Networks, Inc.
Table 52: Authentication Realm Policies Configuration Details (continued)
Option Function
Options for Restricts the Secure Access
secondary device and resource access by
authentication password-length to the
server secondary authentication
server when administrators or
users try to sign in to an Secure
Access device. The user must
enter a password whose length
meets the minimum
password-length requirement
specified for the realm.
Secondary Specifies password length
password restrictions.
minimum
length
(character)
Authentication Policies > Host Checker tab
Evaluate ALL Evaluates all the policies
policies without enforcing the policy on
the client and allows user
access.
Enforce ALL Enforces all the policies on the
policies client for the user to log in to
the specified realm.
Evaluate Evaluates the selected policies
selected without enforcing the policy on
policies the client and allows user
access.
Enforce Enforces the policies on the
selected client for the user to log in to
policies the specified realm.
Evaluate logic Does not require users to meet
all of the requirements in all of
the selected policies. Instead,
the user can access the realm
if he meets the requirements
of any one of the selected Host
Checker policies.
Authentication Policies > Cache Cleaner tab
Chapter 12: Configuring Authentication Realms
Your Action
Select one of the following options from the
drop-down list:
Allow all users (passwords of any
length)—Does not apply password length
restrictions to users signing in to the Secure
Access device.
Only allow users that have passwords of a
minimum length—Requires the user to enter
a password with a minimum length of the
number specified.
Enter the number.
Select Authentication Policies > Host
Checker >Evaluate ALL policies to enable
this feature.
Select Authentication Policies > Host
Checker >Enforce ALL policies to enable this
feature.
Select the policy, and then click Add.
Select a policy, and then click Add.
Select one of the following options from the
drop-down list:
allow access to realm if any ONE of the
selected Require & Enforce policies
succeed—User can access the realm if he
meets the requirements of any one of the
selected Host Checker policies.
Allow access only if all of the Require &
Enforce policies succeed—User can access
the realm only if he meets all of the
requirements in all of the selected policies.
201