Configuring The Remote Integrity Measurement Verifier Server; Configuring The Remote Integrity Measurement Verifier Server (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual

Configuring Secure Access Devices Guide

Configuring the Remote Integrity Measurement Verifier Server (NSM Procedure)

240
The Trusted Network Connect (TNC) standard enables the enforcement of security
requirements for endpoints connecting to networks. The client-side components of the
TNC are the IMCs and the TNC-client (TNCC). The TNCC compiles the IMC measurements
and sends them to the server. At the server, there is a corresponding set of components:
the TNC-server (TNCS) and the IMVs. The TNCS manages the messages between the
IMVs and the IMCs and sends the recommendations, based on the IMVs, to the policy
engine.
To configure the remote IMV server so that the Secure Access device can communicate
with it:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the Secure Access device for which
2.
you want to configure the remote IMV server.
Click the Configuration tab. In the configuration tree, select Authentication > Endpoint
3.
Security > Host Checker.
Add or modify settings as specified in Table 66 on page 240.
4.
Click one:
5.
OK—Saves the changes.
Cancel—Cancels the modifications.
Table 66: Configuring the Remote IMV Server Details
Option Function
Remote IMV > Remote IMV Servers
Name Specifies the name for the server.
Description Describes about the server.
Host Specifies the hostname.
Port Specifies the port number that the
Secure Access device uses to
communicate with the remote IMV
server.
Shared secret Specifies the shared secret
information.
Your Action
Enter the name for the remote IMV
server.
Enter a brief description about the
server.
Enter either the IP address or
hostname as defined in the server
certificate.
Enter a unique port number.
NOTE: Ensure that no other service is
using this port number. The default
port number is the same as the default
https port number.
Enter the same shared secret used in
the client information entry on the
remote IMV server.
Copyright © 2010, Juniper Networks, Inc.