Configuring File Rewriting Resource Profiles (NSM Procedure)

A file resource profile controls access to resources on Windows server shares.

To configure a file rewriting resource profile:

  1. In the NSM navigation tree, select Device Manager > Devices. Click the Device Tree tab, and then double-click the Secure Access device for which you want to configure user roles.
  2. Click the Configuration tab, and select Users > Resource Profiles > Windows File Browsing to create a resource profile to control access to Windows server shares.
  3. Add or modify settings as specified in Table 27.
  4. Click the New button, the New dialog box appears.
  5. Click one:
    • OK—Saves the changes.
    • Cancel—Cancels the modifications.

Table 27: Configuring File Rewriting Resource Profiles Details

OptionFunctionYour Action
Settings tab

Name

Specifies the name of the resource profile.

Enter the name.

Description

Describes the resource profile.

Enter the description.

Server/share

Specifies the resource to which you want to control access.

Enter the server name or IP address, share name, and optionally the path that you want to control access. When entering the resource, use the format: \\server[\share[\path]].

Autopolicy:Windows File Access Control

Name

Specifies the name of the policy that allows or denies users access to the resource.

Enter the name.

Action

Allows or denies user access to resource.

Select Allow or Deny from the Action drop–down list.

Read-only

Allows users to view but not edit the specified resource.

Select the Read-only check box to enable this option.

Resources

Specifies the resource name for which this policy applies.

Enter the resource name.

Autopolicy:Windows File Compression

Name

Specifies the name of the policy that allows you to compress data from the specified resource.

Enter a name.

Action

Allows you to compress data from the specified resource.

Select any one of the following options:

  • Compress—Compresses data from the specified resource.
  • Do not compress—Disables compression for the specified resource.

Resources

Specifies the resource names for which this policy applies.

Enter the names.

Autopolicy:Windows Server Single Sign-On

New Resources

Specifies the resource policy to which this policy applies.

Enter the resource using the format: \\server[\share[\path]].

Action

Specifies the type of credentials to pass to the Windows share or directory.

Select one of the following options:

  • Use Specified Credentials(Variable Password)...—Secure Access device uses specified credentials with variable password to pass to the Windows share or directory.
  • Use Specified Credentials(Fixed Password)...—Secure Access device uses specified credentials with fixed password to pass to the Windows share or directory.
  • Prompt for user credentials—Secure Access device intermediates the share challenge by presenting an authentication challenge in the Secure Access device the first time a user attempts to access the share. The user enters the credentials and the credentials are stored in the Secure Access device. If the credentials later fail, the Secure Access device again prompts the user for the credentials.

Username

Specifies a username to submit to the Windows share or directory.

Enter a variable. For example, <USERNAME> or a static username. For example enter administrator to submit to the Windows share or directory.

Note: When entering a variable, you may also include a domain. For example, yourcompany.net\<USERNAME>

Variable Password

Specifies a variable password to the Windows share or directory.

Enter the variable password.

Password

Specifies a static password to the Windows share or directory.

Enter the static password.

Bookmarks

Name

Specifies the name of the bookmark.

Enter a name.

Description

Describes the bookmark.

Enter the description.

Server

Specifies the server name.

Enter the server name.

Share

Specifies the share name.

Enter the share name.

Path

Adds a suffix to the resource if you want to create links to subdirectories of the resource defined in the primary resource profile.

Enter a suffix to the resource.

Appearance

Displays the bookmark on a user’s welcome page and when browsing network files.

Select one of the following options:

  • Appear as bookmark on homepage and file browsing—Bookmark appears on both a user’s welcome page and when browsing network files.
  • Appear in file browsing only—Bookmark appears only when users are browsing network files.

Applies to roles

Specifies the roles to which you want to display the bookmark.

Select one of the following options:

  • All File Profile roles— Bookmark appears both on a user’s welcome page and when browsing network files.
  • Subset of File Profile roles—Bookmark appears only when users are browsing network files.
`Bookmarks > Role Selections

Roles Selections

Specifies the roles to which the resource profile applies.

Note: The Role Selections tab is enable only when you select the Subset of File Profile roles option from the Applies to roles drop-down list.

Select the role, and then click Add.

Related Documentation