Feature Explorer AI 
×
Use identify-aware firewall features to set and enforce user-based and role-based security policies that restrict or permit users individually or in groups, using different authentication methods.
| Feature hierarchy | Feature Name |
|---|---|
| Identity Aware Firewall / | Client/server certificate validation using TLS protocol mutual authentication |
| Identity Aware Firewall / | Firewall Authentication |
| Identity Aware Firewall / | Firewall users log off, custom logo and banner |
| Identity Aware Firewall / | High availability of FW User auth state |
| Identity Aware Firewall / | LDAP over TLS/SSL for encryption and peer-authentication |
| Identity Aware Firewall / | Pass-through Authentication Customizable Banners |
| Identity Aware Firewall / | Pass-through Authentication FTP |
| Identity Aware Firewall / | Pass-through Authentication HTTP |
| Identity Aware Firewall / | Pass-through Authentication Telnet |
| Identity Aware Firewall / | Pass-through Authentication via LDAP client |
| Identity Aware Firewall / | Pass-through Authentication via Local DB |
| Identity Aware Firewall / | Pass-through Authentication via RADIUS client |
| Identity Aware Firewall / | Pass-through Authentication via SecurID client |
| Identity Aware Firewall / | Pass-through High availability of FW User Auth State |
| Identity Aware Firewall / | Pass-through Policy checks group-expressions |
| Identity Aware Firewall / | Pass-through Policy checks user-groups |
| Identity Aware Firewall / | Pass-through Policy checks users |
| Identity Aware Firewall / | Pass-through Viewing current/historical user auth state |
| Identity Aware Firewall / | Pass-through authentication |
| Identity Aware Firewall / | Pass-through authentication of IP-IP and GRE tunnel traffic in TAP mode |
| Identity Aware Firewall / | SAML-based firewall authentication |
| Identity Aware Firewall / | Unified Policy Support for Firewall User Authentication |
| Identity Aware Firewall / | User firewall authentication |
| Identity Aware Firewall / | User firewall captive portal HTTPS redirect |
| Identity Aware Firewall / | Web-redirect firewall authentication |
| Identity Aware Firewall / Active Directory as Identity Source / | Advanced user identity query |
| Identity Aware Firewall / Active Directory as Identity Source / | Configure client information to connect to the JIMS server |
| Identity Aware Firewall / Active Directory as Identity Source / | Data Loss Prevention |
| Identity Aware Firewall / Active Directory as Identity Source / | Enhanced user identity information loading rate |
| Identity Aware Firewall / Active Directory as Identity Source / | Ensured captive portal for unauthenticated users who use HTTP/HTTPS browsers |
| Identity Aware Firewall / Active Directory as Identity Source / | Firewall authentication support for HTTPS traffic |
| Identity Aware Firewall / Active Directory as Identity Source / | IPv6 support for configuring the JIMS server and filtering IP addresses |
| Identity Aware Firewall / Active Directory as Identity Source / | Individual user query on Integrated ClearPass |
| Identity Aware Firewall / Active Directory as Identity Source / | Integrated user firewall |
| Identity Aware Firewall / Active Directory as Identity Source / | JIMS support FQDN as primary and secondary address |
| Identity Aware Firewall / Active Directory as Identity Source / | JIMS support Junos PKI infrastructure |
| Identity Aware Firewall / Active Directory as Identity Source / | Secure Web Proxy |
| Identity Aware Firewall / Active Directory as Identity Source / | Security enhancement between a Junos Pulse Access Control Service and an Infranet Enforcer |
| Identity Aware Firewall / Active Directory as Identity Source / | Timeout parameters for unauthenticated user authentication table entries |
| Identity Aware Firewall / Active Directory as Identity Source / | User Firewall to configure ClearPass and JIMS at the same time |
| Identity Aware Firewall / Active Directory as Identity Source / | User IP identification from HTTP XFF or Forwarded headers |
| Identity Aware Firewall / Active Directory as Identity Source / | User and Role Enforcement on Integrated ClearPass |
| Identity Aware Firewall / Active Directory as Identity Source / | User firewall support for IPv6 |
| Identity Aware Firewall / Active Directory as Identity Source / | User role firewall providing flexibility and higher security |
| Identity Aware Firewall / Active Directory as Identity Source / | User-defined ICAP request header extension |
| Identity Aware Firewall / Active Directory as Identity Source / | View user identify information in JIMS Active Directory |
| Identity Aware Firewall / Active Directory as Identity Source / | Web API and Message Dispatcher on Integrated ClearPass |
| Identity Aware Firewall / Active Directory as Identity Source / | Zone-based global user identity logging |
| Identity Aware Firewall / Unified Access Control / | Automating the Single Sign-On for User Role FW |
| Identity Aware Firewall / Unified Access Control / | Infranet Controller (IC) as an external captive-portal server |
| Identity Aware Firewall / Unified Access Control / | L3 enforcement - End Point Security (UAC) |