Performing The Initial Configuration; Preparing The Network Hierarchy; Table 13: Network Hierarchy - Juniper 3800 Hardware Manual

Secure analytics

Table of Contents

CHAPTER 11

Performing the Initial Configuration

Preparing the Network Hierarchy on page 39

Configuring the Basic Settings on the JSA3800 Appliance on page 42

Accessing the JSA Interface on page 43

Juniper Secure Analytics (JSA) uses the network hierarchy to determine your network

traffic and provides you with the ability to view network activity for your entire deployment.

JSA supports any network hierarchy that can be defined by a range of IP addresses.

You can create your network based on many different variables, including geographical

or business units. For example, your network hierarchy might include corporate IP address

ranges (internal or external), physical departments or areas, mail servers, and webservers.

Once you define the components you want to add to your network hierarchy, you can

install JSA and then configure the network hierarchy using the JSA interface. For each

component you want to add to the network hierarchy, use

each component in your network map.

At a minimum, we recommend that you define objects in the network hierarchy for:

Internal/external demilitarized zone (DMZ)

VPN

All internal IP address space (for example, 0.0.0.0/8)

Proxy servers

Network Address Translation (NAT) IP address range

Server network subnets

Voice-over-IP (VoIP) subnets

Description

Name

Example for NAT

NAT_Ranges

Table 13 on page 39

IP/CIDR Value

Color

0.0.0.5/32

#00FF33

to indicate

Weight

Table of Contents