asp.net pdf reader : Adjust size of pdf in preview control software platform web page windows wpf web browser j-sa-sslvpn-7.1-adminguide44-part764

SASeriesApplianceintermediatesbothforwardandbackwardsproxies,butonly
enablessinglesign-ontotrustedproxies.
LaunchJSAM—(Resourcepoliciesonly)LaunchJSAMpoliciesspecifyURLsforwhich
theSASeriesApplianceautomaticallylaunchesJ-SAMontheclient.Thisfeatureis
usefulifyouenableapplicationsthatrequireJ-SAMbutdonotwanttorequireusers
torunJ-SAMunnecessarily.
Protocol—(Resourcepoliciesonly)ProtocolresourcepoliciesenableordisableHTTP
1.1protocolsupportontheSASeriesAppliance..
Options—(Resourcepoliciesonly)YoucanenableIPbasedmatchingforhostnames
aswellascase-sensitivematchingforpathandquerystringsinWebresourcesthrough
resourcepolicyoptions.
WebrewritingisastandardfeatureonallSecureAccessappliancesexcepttheSA700
SeriesAppliance.IfyouareusinganSA700SeriesAppliance,youmustinstallaCore
ClientlessAccessupgradelicenseinordertoaccessbaselineWebrewritingfeatures.
Note,however,thatthefollowingadvancedWebrewritingfeaturesarenotavailableon
theSA700SeriesAppliance,evenifyouhavetheCoreClientlessAccessupgradelicense:
RemoteSSO
WSAM&JSAMrewritingpolicies(availablethroughWebapplicationresourceprofiles)
Non-JavaICArewritingoptions(availablethroughCitrixtemplates)
Related
Documentation
Tasksummary:ConfiguringtheWebRewritingFeatureonpage406
WritingaWebAccessResourcePolicyonpage434
DefiningaSingleSign-OnAutopolicyonpage413
DefiningaCachingAutopolicyonpage416
WritingaJavaAccessControlResourcePolicyonpage450
DefiningaRewritingAutopolicyonpage420
DefiningaWebCompressionAutopolicyonpage424
WritingaWebProxyResourcePolicyonpage467
AutomaticallyLaunchingJSAMonpage537
WritingAnHTTP1.1ProtocolResourcePolicyonpage468
DefiningResourcePolicies:GeneralOptionsonpage471
405
Copyright©2012,JuniperNetworks,Inc.
Chapter20:WebRewriting
Adjust size of pdf in preview - Compress reduce PDF size in C#.net, ASP.NET, MVC, Ajax, WinForms, WPF
C# Code & .NET API to Compress & Decompress PDF Document
pdf compressor; change file size of pdf document
Adjust size of pdf in preview - VB.NET PDF File Compress Library: Compress reduce PDF size in vb.net, ASP.NET, MVC, Ajax, WinForms, WPF
VB.NET PDF Document Compression and Decompression Control SDK
best compression pdf; adjust pdf page size
Tasksummary:ConfiguringtheWebRewritingFeature
NOTE: Whenintermediatingcontentthroughthecontentintermediation
engine,werecommendthattheGMTtimeonboththeSASeriesAppliance
andthebackendwebapplicationserverbethesame.Thispreventsany
prematureexpirationofcookiesiftheSASeriesAppliancetimeislaterthan
thewebapplicationservertime.
ToconfiguretheWebrewritingfeature:
1.
CreateresourceprofilesthatenableaccesstoWebsites,createsupportingautopolicies
(suchassinglesign-onandJavaaccesscontrolpolicies)asnecessary,include
bookmarksthatlinktotheWebsites,andassignthepoliciesandbookmarkstouser
rolesusingsettingsintheWebApplicationsResourceProfilespage(Users>Resource
Profiles>Web)oftheadminconsole.
WerecommendthatyouuseresourceprofilestoconfigureWebrewriting(asdescribed
above).However,ifyoudonotwanttouseresourceprofiles,youcanconfigureWeb
rewritingusingroleandresourcepolicysettingsinthefollowingpagesoftheadmin
consoleinstead:
a.
CreateresourcepoliciesthatenableaccesstoWebsitesusingsettingsintheUsers
>ResourcePolicies>Web>WebACLpageoftheadminconsole.
b.
Asnecessary,createsupportingresourcepolicies(suchassinglesign-onandJava
accesscontrolpolicies)usingsettingsintheUsers>ResourcePolicies>Select
PolicyTypepagesoftheadminconsole.
c.
DeterminewhichuserrolesmayaccesstheWebsitesthatyouwanttointermediate,
andthenenableWebaccessforthoserolesthroughtheUsers>UserRoles>
SelectRole>General>Overviewpageoftheadminconsole.
d.
CreatebookmarkstoyourWebsitesusingsettingsintheUsers>UserRoles>
SelectRole>Web>Bookmarkspageoftheadminconsole.
e.
Asnecessary,enableWebgeneraloptionsthatcorrespondtothetypesofWeb
contentyouareintermediating(suchasJava)usingsettingsintheUsers>User
Roles>SelectRole>Web>Optionspageoftheadminconsole.
2.
AfterenablingaccesstoWebapplicationsorsitesusingWebrewritingresourceprofiles
orrolesandresourcepolicies,youcanmodifygeneralroleandresourceoptionsinthe
followingpagesoftheadminconsole:
a.
(Optional)SetadditionalWebbrowsingoptions(suchasallowinguserstocreate
theirownbookmarksorenablinghostnamemasking)Users>UserRoles>Select
Role>Web>Optionspageoftheadminconsole.
Copyright©2012,JuniperNetworks,Inc.
406
JunosPulseSecureAccessServiceAdministrationGuide
VB Imaging - VB Codabar Generator
image, New PointF(100F, 100F)) docx.Save("C:\\Sample_Barcode.pdf"). VB Code to Adjust Codabar Parameters. set barcode data // Codabar barcode size related barcode
change file size of pdf; pdf file size limit
VB.NET Image: Web Image and Document Viewer Creation & Design
configure the VB.NET image viewer or adjust its properties with mouse click and reset the size of the a powerful toolkit to print bitonal images, PDF, and so on
pdf change font size; change font size pdf form reader
NOTE: Evenifyouenablehostnamemasking,linkscorrespondingto
protocolsnotrewrittenbytheSASeriesAppliancearenotobfuscated.
Forexample,ftp://xyz.juniper.netand
file://fileshare.juniper.net/filenamearenotobfuscated.Bynot
obfuscatingthehostname,userscanstillaccesstheseresources.
b.
(Optional)SetadditionalWeboptionsforindividualresources(suchasenabling
theSASeriesAppliancetomatchIPaddressestohostnames)usingsettingsin
theUsers>ResourcePolicies>Web>Optionspageoftheadminconsole.
NOTE: CertainWebrewritingfeatures(suchaspassthroughproxyand
SSOtoNTLMresources)requireadditionalconfiguration.Formore
information,seetheappropriateconfigurationinstructions.
Related
Documentation
WritingaWebAccessResourcePolicyonpage434
DefiningaSingleSign-OnAutopolicyonpage413
DefiningaCachingAutopolicyonpage416
WritingaJavaAccessControlResourcePolicyonpage450
DefiningaRewritingAutopolicyonpage420
DefiningaWebCompressionAutopolicyonpage424
WritingaWebProxyResourcePolicyonpage467
AutomaticallyLaunchingJSAMonpage537
WritingAnHTTP1.1ProtocolResourcePolicyonpage468
DefiningResourcePolicies:GeneralOptionsonpage471
RemoteSSOOverview
TheRemoteSingleSign-On(SSO)featureenablesyoutospecifytheURLsign-inpage
ofanapplicationtowhichyouwanttheSASeriesAppliancetopostauser’scredentials,
minimizingtheneedforuserstore-entertheircredentialswhenaccessingmultiple
back-endapplications.Youmayalsospecifyadditionalformsvaluesandcustomheaders
(includingcookies)toposttoanapplication’ssign-inform.
RemoteSSOconfigurationconsistsofspecifyingWebresourcepolicies:
FormPOSTpolicy—ThistypeofRemoteSSOpolicyspecifiesthesign-inpageURLof
anapplicationtowhichyouwanttopostSASeriesAppliancedataandthedatato
post.Thisdatacanincludetheuser’sprimaryorsecondarySASeriesAppliance
usernameandpasswordaswellassystemdatastoredbysystemvariables.Youcan
alsospecifywhetherornotuserscanmodifythisinformation.
407
Copyright©2012,JuniperNetworks,Inc.
Chapter20:WebRewriting
C# Image: View & Operate Web Page Using .NET Doc Image Web Viewer
multiple document and image formats, like PDF and TIFF; Adjust the page order of source document file using mouse NET users to choose best viewing size as they
pdf custom paper size; adjust size of pdf
Generate and draw Data Matrix for Java
all 2D barcodes like QR Code, Data Matrix and PDF 417 in text in Java Class barcode.setData("Java Data Matrix"); //Adjust Data Matrix size with barcode
change font size in pdf; change paper size in pdf document
Headers/Cookiespolicy—ThistypeofRemoteSSOpolicyspecifiesresources,suchas
customizedapplications,towhichyoucansendcustomheadersandcookies.
Ifauser’sSASeriescredentialsdifferfromthoserequiredbytheback-endapplication,
theusercanalternativelyaccesstheapplication:
Bysigninginmanually—Theusercanquicklyaccesstheback-endapplicationby
enteringhiscredentialsmanuallyintotheapplication’ssign-inpage.Theusermayalso
permanentlystorehiscredentialsandotherrequiredinformationintheSASeries
AppliancethroughthePreferencespageasdescribedbelow,butisnotrequiredto
enterinformationinthispage.
SpecifyingtherequiredcredentialsontheSASeriesAppliance—Theusermustprovide
theSASeriesAppliancewithhiscorrectapplicationcredentialsbysettingthemthrough
thePreferencespage.Onceset,theusermustsignoutandsignbackintosavehis
credentialsontheSASeriesAppliance.Then,thenexttimetheuserclickstheRemote
SSObookmarktosignintotheapplication,theSASeriesAppliancesendstheupdated
credentials.
NOTE: UsetheRemoteSSOfeaturetopassdatatoapplicationswith
staticPOSTactionsintheirHTMLforms.ItisnotpracticaltouseRemote
SSOwithapplicationsthatemployfrequentlychangingURLPOSTactions,
time-basedexpirations,orPOSTactionsthataregeneratedatthetime
theformisgenerated.
Related
Documentation
SystemVariablesandExamplesonpage1012
MultipleSign-InCredentialsExecutiononpage257
WritingaRemoteSSOFormPOSTResourcePolicyonpage443
WritingaRemoteSSOHeaders/CookiesResourcePolicyonpage445
PassthroughProxyOverview
ThepassthroughproxyfeatureenablesyoutospecifyWebapplicationsforwhichthe
SASeriesApplianceperformsminimalintermediation.Unliketraditionalreverseproxy
functionality,whichalsorewritesonlyselectivepartsofaserverresponsebutrequires
networkchangesaswellascomplexconfiguration,thisfeatureonlyrequiresthatyou
specifyapplicationserversandthewayinwhichtheSASeriesAppliancereceivesclient
requeststothoseapplicationservers:
ViaanSASeriesApplianceport—Whenspecifyinganapplicationforthepassthrough
proxytointermediate,youspecifyaportonwhichtheSASeriesAppliancelistensfor
clientrequeststotheapplicationserver.WhentheSASeriesAppliancereceivesa
clientrequestfortheapplicationserver,itforwardstherequesttothespecified
applicationserverport.Whenyouchoosethisoption,youmustopentraffictothe
specifiedSASeriesApplianceportonyourcorporatefirewall.
Copyright©2012,JuniperNetworks,Inc.
408
JunosPulseSecureAccessServiceAdministrationGuide
Tutorial Guide for Java Barcode Generation Component in details
Package for the purpose type with linear, QR Code, PDF 417 or image text in Java Class barcode.setData("BARCODE-JAVA"); //Adjust Code 39 size with barcode
reduce pdf file size; best way to compress pdf files
VB.NET Word: Create VB.NET Word Document Viewer in Web, Windows
Professional VB.NET Word document viewing component with quick thumbnail preview support; If needed, you can try VB.NET PDF document file viewer SDK, and VB.NET
best pdf compression tool; change font size in fillable pdf form
Viavirtualhostname—Whenspecifyinganapplicationforthepassthroughproxyto
intermediate,youspecifyanaliasfortheapplicationserverhostname.Youneedto
addanentryforthisaliasinyourexternalDNSserverthatresolvestotheSASeries
Appliance.WhentheSASeriesAppliancereceivesaclientrequestforthealias,it
forwardstherequesttotheportyouspecifyfortheapplicationserver.
Thisoptionisusefulifyourcompanyhasrestrictivepoliciesaboutopeningfirewall
portstoeitherinternalserversorserversintheDMZ.Whenusingthisoption,we
recommendthateachhostnamealiascontainsthesamedomainsubstringasyour
SASeriesAppliancehostnameandthatyouuploadawildcardservercertificateto
theSASeriesApplianceintheformat:*.domain.com.
Forexample,ifyourSASeriesApplianceisiveserver.yourcompany.com,thenahost
namealiasshouldbeintheformatappserver.yourcompany.comandthewildcard
certificateformatwouldbe*.yourcompany.com.Ifyoudonotuseawildcardcertificate,
thenaclient’sbrowserissuesacertificatenamecheckwarningwhenauserbrowses
toanapplicationserver,becausetheapplicationserverhostnamealiasdoesnotmatch
thecertificatedomainname.Thisbehaviordoesnotpreventauserfromaccessing
theapplicationserver,however.
NOTE: Whenyouconfigurepassthroughproxytoworkinvirtualhostname
mode,usersmustusetheSASeriesAppliancehostnamethatyouspecify
throughtheSystem>Network>Overviewpageoftheadminconsolewhen
signingintotheSASeriesAppliance.Theycannotaccessusepassthrough
proxyiftheysignintotheSASeriesApplianceusingitsIPaddress.
JustaswiththeContentIntermediationEngine,thepassthroughproxyoptionoffers
increasedsecurityrelativetotheSecureApplicationManager,becausewhenenabled
foranapplication,theSASeriesApplianceallowstheclienttosendonlylayer-7traffic
directedtofixedapplicationportstotheenterprisenetwork.Usethisoptiontoenable
theSASeriesAppliancetosupportapplicationswithcomponentsthatareincompatible
withtheContentIntermediationEngine,suchasJavaappletsinOraclee-businesssuite
applicationsorappletsthatruninanunsupportedJavaVirtualMachine(JVM).
Notethefollowing:
PassthroughproxyURLsmustbehostnames.Pathsofhostnamesarenotsupported.
JuniperNetworksstronglyrecommendsthatyounotmixpassthroughproxyPortmode
andpassthroughproxyHostmode.
Thepassthroughproxyoptionworksonlyforapplicationsthatlistenonfixedports
andwheretheclientdoesnotmakedirectsocketconnections.
TousepassthroughproxywithOracleE-Businessapplications,youmustinstallareal
certificateontheSASeriesApplianceandyoumustconfigureOracleFormstousethe
FormsListenerServletmode.
ThefollowingadvancedfeaturesoftheSASeriesApplianceframedtoolbararenot
availableinpassthroughproxy:bookmarkcurrentpage,displaytheoriginalURL,display
thefavoritebookmarks.
409
Copyright©2012,JuniperNetworks,Inc.
Chapter20:WebRewriting
Related
Documentation
TaskSummary:ConfiguringPassthroughProxy
ExamplesofUsingPassthroughProxy
CreatingaPassthroughProxyResourcePolicyonpage455
CreatingaCustomWebApplicationResourceProfile
AcustomWebapplicationresourceprofileisaresourceprofilethatcontrolsaccessto
aWebapplication,Webserver,orHTMLpage.
TocreateacustomWebapplicationresourceprofile:
1.
Intheadminconsole,selectUsers>ResourceProfiles>Web.
2.
ClickNewProfile.
3.
FromtheTypelist,chooseCustom.
4.
Enterauniquenameandoptionallyadescriptionfortheresourceprofile.
5.
IntheBaseURLfield,entertheURLoftheWebapplicationorpageforwhichyou
wanttocontrolaccessusingtheformat:[protocol://]host[:port][/path].(TheSA
SeriesApplianceusesthespecifiedURLtodefinethedefaultbookmarkfortheresource
profile.)
6.
IntheAutopolicy:WebAccessControlsection,createapolicythatallowsordenies
usersaccesstotheresourcespecifiedintheBaseURLfield.(Bydefault,theSASeries
ApplianceautomaticallycreatesapolicyforyouthatenablesaccesstotheWeb
resourceandallofitssub-directories.)
7.
(Optional)ClickShowALLautopolicytypestocreateadditionalautopoliciesthat
fine-tuneaccesstotheresource.Then,createtheautopoliciesusinginstructionsin
thefollowingsections:
8.
ClickSaveandContinue.
9.
IntheRolestab,selecttherolestowhichtheresourceprofileappliesandclickAdd.
Theselectedrolesinherittheautopoliciesandbookmarkscreatedbytheresource
profile.Ifitisnotalreadyenabled,theSASeriesAppliancealsoautomaticallyenables
theWeboptionintheUsers>UserRoles>SelectRole>General>Overviewpage
oftheadminconsoleforalloftherolesyouselect.
10.
ClickSaveChanges.
11.
(Optional)IntheBookmarkstab,modifythedefaultbookmarkcreatedbytheSA
SeriesApplianceand/orcreatenewones.(Bydefault,theSASeriesAppliancecreates
abookmarktothebaseURLdefinedintheBaseURLfieldanddisplaysittoallusers
assignedtotherolespecifiedintheRolestab.)
DefiningBaseURLs
WhencreatingaWebresourceprofile,youmustusethefollowingformatwhendefining
baseURLs:
Copyright©2012,JuniperNetworks,Inc.
410
JunosPulseSecureAccessServiceAdministrationGuide
[protocol://]host[:port][/path]
Withinthisformat,thecomponentsare:
Protocol(required)—Possiblevalues:http://andhttps://.Notethatyoucannotuse
specialcharacterswithintheprotocol.
Host(required)—Possiblevalues:
DNSHostname—Forexample:www.juniper.com
IPaddress—YoumustentertheIPaddressintheformat:a.b.c.d.Forexample:
10.11.149.2.YoucannotusespecialcharactersintheIPaddress.
Ports(optional)—Youmustusethedelimiter“:”whenspecifyingaport.Forexample:
10.11.149.2/255.255.255.0:*
Path(optional)—WhenspecifyingapathforabaseURL,theSASeriesAppliancedoes
notallowspecialcharacters.Ifyouspecifyapath,youmustusethe“/”delimiter.For
example,http://www.juniper.net/sales.
DefiningWebResources
WhencreatingaWebresourceprofile,youmustusethefollowingformatwhendefining
resourcesforautopolicies:
[protocol://]host[:ports][/path]
Withinthisformat,thefourcomponentsare:
Protocol(required)—Possiblevalues:http://andhttps://.Notethatyoucannotuse
specialcharacterswithintheprotocol.
Host(required)—Possiblevalues:
DNSHostname—Forexample:www.juniper.com
Youmayusethefollowingspecialcharactersallowedinthehostname:
Table20:DNShostnamespecialcharacters
MatchesALLcharacters.
*
Matchesanycharacterexceptdot(.)
%
Matchesexactlyonecharacter
?
IPaddress/Netmask—YoumustentertheIPaddressintheformat:a.b.c.d
Youmayuseoneoftwoformatsforthenetmask:
Prefix:Highorderbits
IP:a.b.c.d
Forexample:10.11.149.2/24or10.11.149.2/255.255.255.0
411
Copyright©2012,JuniperNetworks,Inc.
Chapter20:WebRewriting
YoucannotusespecialcharactersintheIPaddressornetmask.
Ports(optional)—Youmustusethedelimiter“:”whenspecifyingaport.Forexample:
10.11.149.2/255.255.255.0:*
Table21:Portpossiblevalues
MatchesALLports;youcannotuseanyotherspecialcharacters
*
Acomma-delimitedlistofsingleports.Validportnumbersare[1-65535].
port[,port]*
Arangeofports,fromport1toport2,inclusive.
[port1]-[port2]
NOTE: Youcanmixportlistsandportranges,suchas:80,443,8080-8090
Iftheportismissing,thenthedefaultport80isassignedforhttp,443forhttps.
Path(optional)—WhenspecifyingapathforaWebaccesscontrolautopolicy,you
mayusea*character,meaningALLpathsmatch.(TheSASeriesAppliancedoesnot
supportanyotherspecialcharacters.)Ifyouspecifyapath,youmustusethe“/”
delimiter.Forexample:
http://www.juniper.net/sales
http://www.juniper.net:80/*
https://www.juniper.net:443/intranet/*
Related
Documentation
ResourceProfilesonpage113
AboutHostedJavaAppletTemplatesonpage369
AboutCitrixTemplatesonpage383
CreatingResourceProfilesUsingtheLotusiNotesTemplateonpage393
CreatingResourceProfilesUsingtheMicrosoftOWATemplateonpage397
CreatingResourceProfilesUsingtheMicrosoftSharepointTemplateonpage401
DefiningaWebAccessControlAutopolicyonpage413
DefiningaSingleSign-OnAutopolicyonpage413
DefiningaRewritingAutopolicyonpage420
DefiningaWebCompressionAutopolicyonpage424
DefiningaJavaAccessControlAutopolicyonpage418
DefiningaCachingAutopolicyonpage416
Copyright©2012,JuniperNetworks,Inc.
412
JunosPulseSecureAccessServiceAdministrationGuide
DefiningaWebAccessControlAutopolicy
WebaccesspoliciescontrolwhichWebresourcesuserscanaccessinordertoconnect
totheInternet,intranet,orextranet.WhendefiningacustomWebresourceprofile,you
mustenableacorrespondingWebaccesscontrolautopolicythatenablesaccesstothe
profile’sprimaryresource.TheSASeriesAppliancesimplifiestheprocessforyouby
automaticallycreatinganautopolicythatallowsaccesstotheWebresourceandallof
itssub-directories.
Ifnecessary,youmaychoosetomodifythisdefaultautopolicyorcreatesupplementary
Webaccesscontrolautopoliciesthatcontrolaccesstoadditionalresources.Forinstance,
yourITdepartmentmayuseoneservertostoreWebpagesforyourcompanyintranet
(http://intranetserver.com)andanotherservertostoretheimagesthattheWebpages
reference(http://imagesserver.com).Inthiscase,youcancreatetwoWebaccesscontrol
autopoliciesthatenableaccesstobothserverssothatyouruserscanaccessbothyour
Webpagesandthecorrespondingimages.
TocreateanewWebaccesscontrolautopolicy:
1.
CreateacustomWebapplicationresourceprofile.
2.
Ifavailable,clicktheShowALLautopolicytypesbuttontodisplaytheautopolicy
configurationoptions.
3.
Ifitisnotalreadyenabled,selecttheAutopolicy:WebAccessControlcheckbox.
4.
IntheResourcefield,specifytheWebserverorHTMLpagetowhichyouwantto
controlaccessusingtheformat:[protocol://]host[:ports][/path].
5.
FromtheActionlist,chooseAllowtoenableaccesstothespecifiedresourceorDeny
toblockaccesstothespecifiedresource.
6.
ClickAdd.
7.
ClickSaveChanges.
Related
Documentation
CreatingaCustomWebApplicationResourceProfileonpage410
ConfiguringGeneralRoleOptionsonpage97
DefiningaSingleSign-OnAutopolicy
Singlesign-onpoliciesenableyoutoautomaticallypassusercredentialstotheWeb
applicationspecifiedinyourpolicy.Singlesign-onautopoliciesalsointermediatethe
datathatyoupass.
Tocreateasinglesign-on(SSO)autopolicy:
1.
CreateaWebresourceprofile.
2.
Ifavailable,clicktheShowALLautopolicytypesbuttontodisplaytheautopolicy
configurationoptions.
413
Copyright©2012,JuniperNetworks,Inc.
Chapter20:WebRewriting
3.
SelecttheAutopolicy:SingleSign-Oncheckbox.
4.
Selectasinglesign-onmethodandconfigurethecorrespondingSSOoptions:
NOTE: SSOoptionsrequireyoutoselectcredentials.Ifyouhavenot
alreadydoneso,definethecredentialsusingtheResourcePolicies>Web
>GeneralpagepriortodefiningyourSSOautopolicy.
DisableSSO—Disablessinglesign-on.
BasicAuth—EnablestheSASeriesAppliancetointermediatethe
challenge/responsesequenceduringbasicauthenticationandusethecredentials
itcollectstosignintoaprotectedresourcewithinthesameIntranetzone.This
optiondoesnotapplytoCitrixresourceprofiles.
NTLM—EnablestheSASeriesAppliancetointermediatethechallenge/response
sequenceduringNTLMauthenticationandusethecredentialsitcollectstosign
intoaprotectedresourcewithinthesameIntranetzone.Thisoptiondoesnotapply
toCitrixresourceprofiles.
NOTE: WebrewritingandfilebrowsingbothsupportNTLMv1andNTLM
v2.
Kerberos—EnablestheSASeriesAppliancetointermediatethechallenge/response
sequenceduringKerberosauthenticationandusethecredentialsitcollectstosign
intoaprotectedresourcewithinthesameIntranetzone.
ConstrainedDelegation—EnablesauthenticationofusersbyKerberosaftertheir
identityhasbeenverifiedusinganon-Kerberosauthenticationmethod.Forexample,
supposeauserauthenticateswithRADIUSandenterstheirpasscode(typicallyPIN
andtokencode).Whenaccessingaservice,theusermaybechallengedagain
becausethePINisnotrecognized.Withconstraineddelegation,theadministrator
setsuppasswordsforconstraineddelegationusers.Theusersdonotneedtoknow
thispassword.WhenaccessingthesameHTTPservice,theSASeriesAppliance
nowfetchestheticketonbehalfoftheuserwithoutchallengingtheuser.
RemoteSSO—EnablestheSASeriesAppliancetopostthedatathatyouspecify
(includingSASeriesApplianceusernames,passwords,andsystemdatastoredby
variables)toWebapplications.Thisoptionalsoenablesyouspecifycustomheaders
andcookiestoposttoWebapplications.
5.
ClickSaveChanges.
SpecifyingBasicAuthentication,NTLMorKerberosSSOAutopolicyOptions
Toconfigurebasicauthentication,NTLMorKerberosSSOautopolicyoptions:
1.
CreateanSSOautopolicyandchooseBasicAuth,NTLMorKerberos.
2.
IntheResourcefield,specifytheresourcestowhichthispolicyapplies.
Copyright©2012,JuniperNetworks,Inc.
414
JunosPulseSecureAccessServiceAdministrationGuide
Documents you may be interested
Documents you may be interested