identity-context-profile

date_range 14-Dec-23

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
identity-context-profile profile-name profile-name {
      domain-name domain-name {
            attribute device-category {
                  string string-value;
            }
            attribute device-identity {
                  string string-value;
            }
            attribute device-os {
                  string string-value;
            }
            attribute device-os-version {
                  string string-value;
            }
            attribute device-type {
                  string string-value;
            }
            attribute device-vendor {
                  string string-value;
            }
      }
}

Hierarchy Level

content_copy zoom_out_map
[edit services user-identification device-information]

Description

Specify the name of the device identity profile, also referred to as the identity-context-profile, and either one or more of its attributes or the name of the Active Directory domain to which the device belongs.

The device identity profile is a key component of the SRX Series firewall identity feature, which enables you to control access to network resources based on the identity of the user’s device, not the identity of the user of the device. The device identity profile includes the domain name and a collection of attributes that characterize the device.

Options

profile-name `profile-name`	Name of the device identity profile; for example, marketing-west-coast. The profile is specified in the `destination-identity-context-profile` field of a security policy.
domain `domain-name`	Name of the domain to which the device belongs; for example, domain1.
attribute device-category `string`	Category of the device, for example, laptop.
attribute device-identity `string`	Name given to the device, for example, my-device1.
attribute device-os `string`	Operating system running on the device, for example, Windows.
attribute device-os-version `string`	Version of the operating system that is running on the device, for example, 10.1.
attribute device-type `string`	Type of device, for example, ThinkPad.
attribute device-vendor `string`	Name of the manufacturer of the device, for example, Lenovo.

Required Privilege Level

services—To view this statement in the configuration.

services-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 23.4R1.

arrow_backward PREVIOUS identity

NEXT arrow_forward identity-management

Junos CLI Reference

ON THIS PAGE