Table of Contents
Advertisement
Juniper Secure Analytics (JSA) uses the network hierarchy to understand your network traffic and
provides you with the ability to view network activity for your entire deployment. JSA supports any
network hierarchy that can be defined by a range of IP addresses.
You can create your network based on many different variables, including geographical or business units.
For example, your network hierarchy might include corporate IP address ranges (internal or external),
physical departments or areas, mail servers, and webservers.
Once you define the components you want to add to your network hierarchy, you can install JSA, and
then configure the network hierarchy using the JSA interface. For each component you want to add to
the network hierarchy, use
At a minimum, we recommend that you define objects in the network hierarchy for:
• Internal/external demilitarized zone (DMZ)
• VPN
• All internal IP address space (for example, 0.0.0.0/8)
• Proxy servers
• Network Address Translation (NAT) IP address range
• Server network subnets
• Voice-over-IP (VoIP) subnets
Table 9: Network Hierarchy
Description
Example for NAT
Example for DMZ
For more information, see the
The following sections explain how to set your network before you install the JSA software:
Identifying Network Settings
Before you install Juniper Secure Analytics (JSA), you must have the following information for each
system you want to install:
Table 9 on page 74
to indicate each component in your network map.
Name
NAT_Ranges
Internal
Juniper Secure Analytics Administration Guide .
IP/CIDR Value
0.0.0.5/32
0.0.0.1/32
Color
Weight
#00FF33
50
#000099
50
74
Advertisement
Table of Contents
