# Unified Access Control Solution

The Juniper Networks security device works in conjunction with an Infranet Controller to provide a Unified Access Control (UAC) solution. The UAC is an IP-based enterprise infrastructure that coordinates network, application, and endpoint intelligence to support network applications, manage network use, and reduce threats.

Infranet Controller—A central policy management server that validates the user's identity and endpoint’s security compliance, and manages network policies. You create and save the policies on the Infranet Controller. The Infranet Controller pushes the policies to the security device (also called Infranet Enforcer) and the Infranet Agent on the client.

The Juniper Networks security device is called an Infranet Enforcer (IE) in the Unified Access Control environment. Basicall, the IE is a firewall security device that operates with the Infranet Controller to enforce policies. The IE is deployed in front of servers and resources that you want to protect.

For more information about this solution, see the Unified Access Control Administration Guide.

This page lists the Infranet Controllers that are available for the security device (Infranet Enforcer) to use. You can set up to eight IP addresses of various Infranet Controllers, but your security device only communicates with one Infranet Controller at a time in a fail-over mode. The security device communicates with the first Infranet Controller to which it establishes a heartbeat. If the Infranet Enforcer is disconnected from the first Infranet Controller, the Infranet Enforcer attempts to connect with the next Infranet Controller on the list.

The Infranet Auth Controller table lists the following information:

- Instance Name: Infranet Controller name

- Host: IPv4 address of the Infranet Controller

- Port: Port communicating with the Infranet Controller.

- Timeout: Length of time in seconds for the Infranet Controller connection to timeout.

- Configure: After you add a new Infranet Controller instance you can edit or remove the instance with the Edit or Remove buttons that appear in this column.

Click New to add a new Infranet Controller to the list and enter the settings on the Infranet Auth Configuration page.

December 2, 2008