Hi Luca, While we do not have the means to automate publishing within the application itself, if you are running the Global Enterprise Edition, theoretically you could leverage the LDAP Configuration Interface within SBR to export the entire config to an ldif file and then script the import to the other servers via the LCI. We don't have any technical documentation for performing this configuration but, I do not see why it would not work. Do you have GEE? If so, I can supply you with some basic commands to export and import the configurations. Automating the process would be up to you though, One other thing to mention is that this method would not be supported so if it did not work, we would only be able to provide "Best effort" support. Regards, Rich Luca wrote: We have three Steel-Belted RADIUS servers running in our network. Currently for them to replicate, I need to go to the primary and publish the config. Is there a way to get them to automatically replicate? ... View more

I'm assuming you're wondering about configuring resources themselves under either the Role itself or Resource Profiles. Generally, you can achieve the same thing both ways. But what I've found to be best is to make something a Resource Profile if you will be assigning it to more than one Role. If you make Resource Profiles for everything, you'll end up with an enormous list of profiles and a bunch of 1:1 [Role:Resource Profile] mappings anyway. So for example, we have a lot of partner/vendor roles configured, where there really isn't much duplication of resources. They all access different things, so this is where we generally put resources within the Role itself. For our internal employee resources though, we generally make Resource Profiles so that they can easily be assigned to multiple Roles. To more specifically answer your question about roles being a user thing and profiles being more global, the answer is "kind of." While you can map a specific user(s) to a role, it is just as often done by AD or LDAP groups. Resource Profiles aren't "global" per se, since you still need to assign them to roles. But like I said, it's easier to assign Resource Profiles to multiple roles. ... View more

What type of web bookmark is not working? You are not using webTS, are you? If yes, this will require SAM or Network Connect as the ActiveX control cannot be rewritten and needs a direct connection (as you are seeing from the PC). ... View more

Go to Users -> Resource Policies -> Network Connect -> NC Connection Profiles. In there edit your connection profile. In older versions there is a DNS tab, in the latest version it is all in one page. Set the DNS suffix you want to use under the DNS section. Then select the radial button to "Use Device's DNS settings then use Client". Select the tick box to auto-allow IPs in DNS settings if you are using split tunneling and they are not in your routing policy. Re-connect and it should work. Sam. ... View more

The routing is handled slight differently in win XP versus Vista due to the 2 OS's behavior differences.  ... View more

Yes, you can do that, and you don't need to do a trunk port. You just need to enter a static route on your router (or layer 3 switch) so that anything to 10.50.50.0 255.255.255.0 will be routed to your SA2000 IP address of 10.1.1.1 If you are using Cisco equipment, the config would look like this: ip route 10.50.50.0 255.255.255.0 10.1.1.1 It depends on your network and router design as to where that route would go. ... View more

Hi Luca,   There are no reports on the IVE for your query. However, you could import your access logs into a log analyzer which could. You might want to take a look at http://www.splunk.com/ to see if their product (they have a demo) can work for you. There might be other apps out there besides splunk that could help you create this kind of a report with the access log.   Also, a unix shell script could do this. ... View more

2 factor or strong authentication def is "something you have" and "something you know. Something you know could be a password or a PIN etc something you have could be a token with one time passwords like secuireID or a certificate. Certificates are cheap or free and do full fill the something you have part of the 2 factor. ... View more

You need to keep in mind that the 'allow access to local subnet' is doing just that. If that company has an internal network of 10.32.0.0/16 and have subnetted that /16 network into various /24s, then while they will continue to have access to 10.32.x.0/24, they won't be able to access any other internal subnets. It it were me, I'd have purchasing and legal (who negotiated the contract) ammend the contract to specifiy the use of a site-to-site VPN with appropriate f/w rules for both parties. I realize that this doesn't answer your question, but would be how I would handle it because even if you allow NC over ESP, only the first user connected is going to be able to use it, everyone else will fall back to NC over SSL. ... View more