Configuring Host Checking in an SRC Network

When IVE processes subscriber sign-ons, it identifies compliance with the Host Checker policies that are configured within IVE. For SRC-managed subscriber traffic, you can configure the SRC software to:

• Activate a host-checking service on the subscriber interface to redirect the subscriber’s Web traffic to IVE Host Checker.
• Direct the subscriber’s next HTTP request to the IVE Single Sign-On page for checking the compliance policy of the subscriber’s machine.

  Note: If connection to the Host Checker client program on the subscriber’s machine is not possible, the subscriber is considered to be violating Host Checker policy.

• Post host-checking results to the Host Check Result portal servlet that provides information about the host’s compliance to Host Checker policies.
  • If the subscriber’s system complies with the Host Checker policies, the SRC software deactivates the host-checking service so that the subscriber’s next Web request will not be redirected to the IVE sign-on page.
  • If the subscriber’s system does not comply with the Host Checker policies, the SRC software deactivates the host-checking service and can do one of the following:
    • Activate a blocking service to redirect the subscriber’s Web traffic to a captive portal until the subscriber’s machine is in compliance.
    • Schedule the next host check using the service schedule specified by the result.

To support host checking in an SRC network, configure a service on the subscriber’s interface that can be activated to redirect the subscriber’s HTTP traffic to IVE Host Checker. You must have preconfigured Host Checker (see Before You Integrate IVE into an SRC Environment). For complete information about IVE Host Checker features, see the Juniper Networks Secure Access and Secure Meeting Administration Guide.

To use the host-checking application, perform the following tasks:

•  Configuring the Host Check Result Portal
•  Configuring Services for Subscribers

The following sections describe the tasks to incorporate IVE Host Checker into your environment and provide references to entries in the sample data that demonstrate an implementation.

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.