Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 59

Copyright © 2010, Juniper Networks, Inc.
Table 10: Session Options Configuration details (continued)
Option
Enable session timeout
warning
Display sign-in page on max
session time out
Roaming session
Chapter 6: Configuring User Roles and Administrator Roles
Function
Enables users to take the
appropriate action when they
are close to exceeding their
session limits or idle timeouts,
helping them to save any
in-progress form data that
would otherwise be lost. Users
approaching the idle timeout
limit are prompted to
reactivate their session. Users
approaching the session time
limit are prompted to save
data.
Displays a new browser sign-in
page to the end user when
their session times out.
This option appears only when
you select Enable session
timeout warning.
Allows users to enable, limit,
or disable the roaming session.
A roaming user session works
across source IP addresses,
which allows mobile users
(laptop users) with dynamic
IP addresses to sign in to the
Secure Access device from
one location and continue
working from another. Disable
this feature to prevent users
from accessing a previously
established session from a
new source IP address. This
helps protect against an
attack spoofing a user's
session, provided the hacker
was able to obtain a valid
user's session cookie.
Users may sign in from one IP
address and continue using
their sessions with another IP
address as long as the new IP
address is within the same
subnet.
Users who sign in from one IP
address may not continue an
active Secure Access device
session from another IP
address; user sessions are tied
to the initial source IP address.
Your Action
Select Enable session timeout
warning to notify
nonadministrative users when
they are about to reach a
session or idle timeout limit.
Select Display sign-in page on
max session time out.
Select a roaming session
option from the drop-down list:
Enabled—Enables roaming
user sessions for users
mapped to this role.
Limit to subnet—Limits the
roaming session to the local
subnet specified in the
Netmask box.
Disabled—Disables roaming
user sessions for users
mapped to this role.
41