Intrusion Detection And Prevention Services And Device Configurations Supported; In Nsm - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INTRUSION DETECTION PREVENTION DEVICES GUIDE REV 01 Manual

Configuring Intrusion Detection and Prevention Devices Guide
Related
Documentation
Intrusion Detection and Prevention Services and Device Configurations Supported in
NSM
6
With NSM, you can manage most of the parameters that you can configure through the
IDP admin console. The configuration screens rendered through NSM are similar to the
screens in the IDP admin console. NSM incorporates a broad configuration management
framework that allows co-management using other methods.
After you have completed installation, follow these steps to get started with managing
an IDP device with NSM:
Add the IDP device to NSM. When you first add the IDP device to NSM in first instance,
1.
NSM pushes the policy named Recommended to the device.
Update the IDP detector engine and attack object database.
2.
Update software version (if necessary).
3.
Run the Profiler.
4.
Examine the logs.
5.
Create address objects for IDP rulebase rules.
6.
Optionally, configure additional rulebases.
7.
If adding this device changes your plan to distribute administrative responsibility,
8.
create NSM users with the access privileges.
An administrator (a user of NSM or IDP) has a specific level of permission. You can create
multiple administrators with specific roles to control access to the devices in each domain.
Intrusion Detection and Prevention Services and Device Configurations Supported in
NSM on page 6
Adding Intrusion Detection and Prevention Devices in NSM Overview on page 8
The Intrusion Detection and Prevention (IDP) device supports the following services in
NSM:
Inventory management service—NSM enables upgrading license and management of
the IDP hardware details. Adding or deleting licenses or upgrading or downgrading
software are not supported.
Status monitoring service—Allows the IDP device's status to be obtained, including
name, domain, OS version, synchronization status, connection details, current alarms,
CPU, memory, and swap.
Logging service—Allows the IDP device's logs to be obtained in a time-generated order.
Logging configuration details that are set on the IDP device will apply to NSM.
Packaging log files or debug files for remote analysis
Managing interface settings such as setting IP addresses, settings IDP device host and
network information, interoperability with NSM, Infranet Controllers, Secure Access
Copyright © 2010, Juniper Networks, Inc.