Identifying Network Settings; Identifying Security Monitoring Devices And Flow Data Sources - Juniper JSA1500 Hardware Manual

Juniper Secure Analytics Hardware Guide

Identifying Network Settings

Identifying Security Monitoring Devices and Flow Data Sources

94
Table 26: Network Hierarchy (continued)
Description Name
Example for DMZ Internal
For more information, see the Juniper Secure Analytics Administration Guide.
The following sections explain how to set your network before you install the JSA software:
Identifying Network Settings on page 94
Identifying Security Monitoring Devices and Flow Data Sources on page 94
Identifying Network Assets on page 95
Before you install Juniper Secure Analytics (JSA), you must have the following information
for each system you want to install:
NOTE: When you configure the network setting such as hostname and IP
address using the qchange_netsetup script, the JSA appliance hangs while
rebooting. This issue is seen in 2013.2.r3.607582 and it will be fixed in the
future releases. You need to manually power cycle the JSA appliance to
overcome this issue.
Hostname
IP address
Network mask address
Subnet mask
Default gateway
Primary DNS server
Secondary DNS server (optional)
Public IP address for networks using Network Address Translation (NAT)
E-mail server
NTP server (Console only) or Time server
Juniper Secure Analytics (JSA) can collect and correlate events received from external
sources such as security equipment (for example, firewalls, VPNs, or IDSs) and host or
application security logs, such as Windows logs. Device Support Modules (DSMs) and
Flow Collectors allow you to integrate JSA with this external data. JSA automatically
discovers sensor devices that are sending system log (syslog) messages to an Event
Collector. The sensor devices that are automatically discovered by JSA appear in the
IP/CIDR Value Color
0.0.0.1/32 #000099
Copyright © 2018, Juniper Networks, Inc.
Weight
50