Configuring If-Map Client Settings On The Secure Access Device; Configuring If-Map Client Settings On The Secure Access Device (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual

Configuring Secure Access Devices Guide
Related
Documentation

Configuring IF-MAP Client Settings on the Secure Access Device (NSM Procedure)

284
To configure IF-MAP server settings on the Secure Access device that will be the IF-MAP
server:
In the NSM navigation tree, select Device Manager > Devices. Click the Configuration
1.
tab. In the configuration tree, select System > IF–MAP Federation > Overview.
Click the Device Tree tab, and then double-click the Secure Access device for which
2.
you want to configure IF-MAP server settings.
From the IF-MAP Configuration list, select IF-MAP Server.
3.
Click the OK button to save the changes.
4.
From the This Server tab, select Clients and Replicas and click the New button.
5.
Enter a name and an optional description for this client.
6.
From the Type list, select Client.
7.
Type one or more IP addresses of the client. If the client is multihomed, for best results
8.
list all of its physical network interfaces. If the client is an Infranet Controller or Secure
Access cluster, list the internal and external network interfaces of all nodes. It is
necessary to enter all of the IP addresses for all of the interfaces because equipment
failures may cause traffic between the IF-MAP client and the IF-MAP server to be
rerouted through a different network interface. Listing all of the IP addresses maximizes
the probability that IF-MAP Federation still works in the event of a failure.
Under Authentication Type, select the Client Authentication Method: Basic or
9.
Certificate.
If you select Basic, enter a username and password. The same information should
be added to the IF-MAP server.
If you select Certificate, choose which CA to use to verify the certificate for this
client. Optionally, specify certificate attributes or restrictions to require values for
certain client certificate attributes.
Click OK to save the IF-MAP client instance on the IF-MAP server.
10.
Configuring IF-MAP Client Settings on the Secure Access Device (NSM Procedure) on
page 284
Configuring IF-MAP Session Export Policy on the Secure Access Device (NSM Procedure)
on page 285
You must identify the IF-MAP server to each Infranet Controller and SA appliance IF-MAP
client. To add the server, you specify the IF-MAP URL of the server and how to authenticate
to the server. Match the URL and security settings to equal those on the IF-MAP server(s)
to which the IF-MAP client will connect.
Copyright © 2010, Juniper Networks, Inc.