Configuring Stateful Firewall (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.3 - M-SERIES AND MX-SERIES DEVICES GUIDE REV1 Manual

M-series and MX-series Devices
Related Topics

Configuring Stateful Firewall (NSM Procedure)

460
Table 267: Service Set Configuration Details (continued)
Task
Configure generation of
system log messages for the
service set.
Configuring Service Interface Pools (NSM Procedure) on page 455
Configuring Stateful Firewall (NSM Procedure) on page 460
Configuring Intrusion Detection Service (NSM Procedure) on page 415
Stateful firewall is a type of firewall filter that considers state information derived from
previous communications and other applications when evaluating traffic. Contrasted
with a stateless firewall that inspects packets in isolation, a stateful firewall provides an
extra layer of security by using state information derived from past communications and
other applications to make dynamic control decisions for new communication attempts.
To configure stateful firewall in NSM:
In the navigation tree select Device Manager > Devices.
1.
In the Devices list, double-click the device to select it.
2.
In the Configuration tab, expand Services > Stateful Firewall.
3.
Add or modify the settings as specified in Table 268 on page 461.
4.
Click one:
5.
OK—To save the changes.
Cancel—To cancel the modifications.
Your Action
1. Click Syslog next to service-set.
2. In the Comment box, enter the comment.
3. Click Host next to Syslog.
4. Click Add new entry next to Host.
5. In the Name box, enter the name of the system logging utility
host machine.
6. In the Comment box, enter the comment.
7. From the Facility Override list, select the name of the facility
that overrides the default assignment.
8. In the Log Prefix box, enter the system logging prefix value.
9. Click Contents next to host.
10. From the Name list, select the service set.
11. In the Comment box, enter the comment.
12. From the Any list, select the system logging severity level.
Copyright © 2010, Juniper Networks, Inc.