Juniper NETWORK AND SECURITY MANAGER - RELEASE NOTES REV 3 Release Note page 7

Copyright © 2010, Juniper Networks, Inc.
Right-click each $infranet_n object and select Delete from the list.
b.
Select VPN Manager > VPNs, and check that you do not have any $infranet objects
c.
under VPN Manager. These objects are usually deleted automatically when you
remove the firewall.
Create a new subdomain for the Infranet Enforcers:
6.
Select Tools > Manage Administrators and Domains.
a.
Select the Subdomains tab.
b.
Click the Add icon.
c.
In the New Subdomain dialog box, enter an appropriate name for the subdomain
d.
so you know what it will be used for, and then click OK.
From the drop-down list at the top left side, select your new domain. The new
e.
domain is empty, but it can use objects from the global domain. If you do not
remove the $infranet instances from the main domain, you risk having duplicate
$infranet names. In addition, add a Single Infranet Enforcer or Infranet Enforcer
Cluster.
Repeat Step 5 and Step 6 for every Infranet Enforcer or Infranet Enforcer Cluster
f.
you need to add to NSM. When finished, you should see $infranet instead of
$infranet_# in each of the domains except global.
In NSM, add the Infranet Enforcer objects to the new domain:
7.
Select Device Manager > Devices.
a.
Click the Add icon, and then select Device to start the Add Device Wizard.
b.
In the New Device window, provide a name for the device, a color for its icon in
c.
NSM, and check Device is Reachable.
Follow the instructions in the wizard to add and import the device.
d.
Repeat Step 7b through 7d for each Infranet Enforcer device.
e.
You must reimport the configuration each time you use an Infranet Enforcer. Otherwise,
a NACN password mismatch is possible because the Infranet Controller dynamically
changes this password periodically. It is also good practice to do a "Summarize Delta
Config" and ensure that no $infra policies are present. If there are, the Infranet
Controller has changed something on the Infranet Enforcer since you last imported
the device configuration.
NOTE: If you choose not to reimport the configuration, be sure to update the
Infranet Controller and Infranet Enforcer at the same time.
Important SSL VPN and Infranet Controller Instructions
7