Specifying Tracked Hosts - Juniper NETWORK AND SECURITY MANAGER 2010.3 - CONFIGURING INTRUSION DETECTION AND PREVENTION GUIDE REV1 Manual

Configuring Intrusion Detection and Prevention Devices Guide

Specifying Tracked Hosts

Table 7: Profiler Tracked Hosts/Exclude List Dialog Boxes
Setting
Add Host
16
Select the known hosts you want to track in the Tracked Hosts tab. Select Object Manager
> Address Objects to add entries to the hosts list.
In the Tracked Hosts tab, select the Network Objects that represent your internal hosts.
The device collects detailed information about traffic that passes between internal hosts,
and then groups traffic that does not match an internal host in a special IP: 73.78.69.84.
Communication between an internal host and an external host is recorded only once.
For example, the device records internal host A communicating to
as one entry in the Profiler database. You can select unlimited internal
www.cnn.com
network objects. You can also use the Exclude List tab to select the Network Objects
that represent internal hosts that you do not want to include in IDP profiling. You might
want to exclude a host from the Profiler if you select a group of network objects in the
Tracked Host tab. Also, you might want to exclude specific members of that group.
You configure Profiler tracked host and excluded host settings to determine the network
segments where the Profiler gathers data.
To configure the tracked host and exclude lists:
From Device Manager, double-click a device and then click Profiler Settings.
1.
Click the Tracked Hosts tab.
2.
Click the + icon and then select Add Host > Add Network or Add Group. A dialog
3.
box appears where you create your tracked hosts list.
Configure Profiler tracked host settings using Table 7 on page 16.
4.
Description
Name—Enter the name of the host.
Color—Select any color from the drop-down list.
Comment—Enter any additional comments.
IP/IP Address—Enter the IP address when you select IP.
Domain/Domain name—Enter the domain name when you select domain name.
Resolve—Resolve the domain name with the IP and vice versa.
www.yahoo.com
Copyright © 2010, Juniper Networks, Inc.
and