Solved

User Access on Juniper SSL

Posted on 2014-10-02
4
792 Views
Last Modified: 2014-10-08
Hello,

I need to modify user access on Juniper SSL VPN. I looked in User Realm, but cannot see where I can enable access to a shared folder.

Any suggestions?
0
Comment
Question by:exhuser
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 37

Expert Comment

by:bbao
ID: 40359339
after establishing a VPN connection over IP, NetBIOS should be also enabled for SMB based file sharing.
0
 
LVL 64

Expert Comment

by:btan
ID: 40359355
this may be relevant to mapped to user specific access of the filserver as resource

http://forums.juniper.net/t5/SSL-VPN/File-server-access-through-SSL-VPN/td-p/33329
A typical resource profile would be something like:
\\servername\<username> where username is the variable that will allow the SA box to substitue their login username in its place and show just that associated directory.

Don't configure in SSL VPN. Configure it in Windows Server. Make it so only admins and individual user has permission to the folder. It won't show up for the user in the VPN file browser if they have no permissions.
 Are you using Active Directory? If so, configure the user's home drive as \\servername\share\%username%
 Also, you can map the role in VPN with attribute "homeDirectory" is \\servername\*
0
 

Author Comment

by:exhuser
ID: 40360346
I guess my question would be on how to use the Juniper interface to enable the user to access a particular folder?
0
 
LVL 64

Accepted Solution

by:
btan earned 500 total points
ID: 40360714
Then maybe the below kb worth checking out further under Resource Policies
Web Resource Policies—The Web resource policies specify the Web resources to which users may or may not browse. They also contain additional specifications such as header caching requirements, servers to which java applets can connect, code-signing certificates that the Secure Access Service should use to sign java applets, resources that the Secure Access Service should and should not rewrite, applications for which the Secure Access Service performs minimal intermediation, and single sign-on options.

File Resource Policies—The file resource policies specify the Windows, UNIX, and NFS file resources to which users may or may not browse. hey also contain additional specifications such as file resources for which users need to provide additional credentials.
http://www.juniper.net/techpubs/en_US/sa8.0/topics/concept/secure-access-resource-policies-overview.html

Configuring Windows File Bookmark that maps to a user's LDAP home directory
http://kb.juniper.net/InfoCenter/index?page=content&id=KB17793

Configuration Example - How to access remote protected resources distributed over multiple zones by using Dynamic VPN http://kb.juniper.net/InfoCenter/index?page=content&id=KB23954&actp=RSS

Configure access to Windows file servers through resource profiles
http://www.juniper.net/techpubs/en_US/sa8.0/topics/task/operational/secure-access-file-rewrite-sso-resource-policy.html

Configuring File Resource Profile Bookmarks
(reference a file shortcut, note that the Secure Access Service only displays bookmarks with shortcuts to files or folders on a network share) http://www.juniper.net/techpubs/en_US/sa8.0/topics/task/configuration/secure-access-file-rewrite-file-bookmarks-configuring.html
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Juniper VPN devices are a popular alternative to using Cisco products. Last year I needed to set up an international site-to-site VPN over the Internet, but the client had high security requirements -- FIPS 140. What and Why of FIPS 140 Federa…
A 2007 NCSA Cyber Security survey revealed that a mere 4% of the population has a full understanding of firewalls. As business owner, you should be part of that 4% that has a full understanding.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question