• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 847
  • Last Modified:

User Access on Juniper SSL


I need to modify user access on Juniper SSL VPN. I looked in User Realm, but cannot see where I can enable access to a shared folder.

Any suggestions?
  • 2
1 Solution
bbaoIT ConsultantCommented:
after establishing a VPN connection over IP, NetBIOS should be also enabled for SMB based file sharing.
btanExec ConsultantCommented:
this may be relevant to mapped to user specific access of the filserver as resource

A typical resource profile would be something like:
\\servername\<username> where username is the variable that will allow the SA box to substitue their login username in its place and show just that associated directory.

Don't configure in SSL VPN. Configure it in Windows Server. Make it so only admins and individual user has permission to the folder. It won't show up for the user in the VPN file browser if they have no permissions.
 Are you using Active Directory? If so, configure the user's home drive as \\servername\share\%username%
 Also, you can map the role in VPN with attribute "homeDirectory" is \\servername\*
exhuserAuthor Commented:
I guess my question would be on how to use the Juniper interface to enable the user to access a particular folder?
btanExec ConsultantCommented:
Then maybe the below kb worth checking out further under Resource Policies
Web Resource Policies—The Web resource policies specify the Web resources to which users may or may not browse. They also contain additional specifications such as header caching requirements, servers to which java applets can connect, code-signing certificates that the Secure Access Service should use to sign java applets, resources that the Secure Access Service should and should not rewrite, applications for which the Secure Access Service performs minimal intermediation, and single sign-on options.

File Resource Policies—The file resource policies specify the Windows, UNIX, and NFS file resources to which users may or may not browse. hey also contain additional specifications such as file resources for which users need to provide additional credentials.

Configuring Windows File Bookmark that maps to a user's LDAP home directory

Configuration Example - How to access remote protected resources distributed over multiple zones by using Dynamic VPN http://kb.juniper.net/InfoCenter/index?page=content&id=KB23954&actp=RSS

Configure access to Windows file servers through resource profiles

Configuring File Resource Profile Bookmarks
(reference a file shortcut, note that the Secure Access Service only displays bookmarks with shortcuts to files or folders on a network share) http://www.juniper.net/techpubs/en_US/sa8.0/topics/task/configuration/secure-access-file-rewrite-file-bookmarks-configuring.html

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now