Loading J-Security-Center Updates (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INTRUSION DETECTION PREVENTION DEVICES GUIDE REV 01 Manual

Configuring Intrusion Detection and Prevention Devices Guide

Loading J-Security-Center Updates (NSM Procedure)

Table 35: IDP Detector Engine and NSM Attack Database Update Procedures
Task
To download IDP
detector engine and NSM
attack database updates
to the NSM GUI server
To push an IDP detector
engine update from the
NSM GUI server to IDP
devices
64
The Juniper Networks Security Center (J-Security Center) routinely makes important
updates available to IDP security policy components, including updates to the IDP detector
engine and NSM attack database.
The IDP detector engine is a dynamic protocol decoder that includes support for decoding
more than 60 protocols and more than 500 service contexts. You should update IDP
detector engine when you first install the IDP device, whenever you upgrade, and whenever
alerted to do so by Juniper Networks.
The NSM attack database stores data definitions for the attack objects that are key
components of IDP security policies. Updates can include new attack objects, revised
severity settings, or removed attack objects. You should schedule daily updates to the
NSM attack database.
After you have completed the update, any new attack objects are available in the security
policy editor. If you use dynamic groups to your IDP rulebase rules and a new attack object
belongs to the dynamic group, the rule automatically inherits the new attacks.
Table 35 on page 64 provides procedures for updating IDP detector engine and the NSM
attack database.
Procedure
From the NSM main menu, select Tools > View/Update NSM attack database and complete the
wizard steps.
NOTE: The default URL from which to obtain updates is
https://services.netscreen.com/restricted/sigupdates/nsm-updates/NSM-SecurityUpdateInfo.dat.
If you encounter connection errors, ensure this setting has not been inadvertently changed.
1. From the NSM main menu, select Tools > Preferences.
2. Click Attack Object.
3. Click Restore Defaults.
NSM restores the URL in the Download URL for ScreenOS Devices text box.
4. Click OK.
From the NSM main menu, select Devices > IDP Detector Engine > Load IDP Detector Engine for
ScreenOS and complete the wizard steps.
NOTE: Updating the IDP detector engine on a device does not require a reboot of the device.
Copyright © 2010, Juniper Networks, Inc.