Importing Versus Modeling; Importing Device Configurations; Modeling Device Configurations - Juniper NETWORK AND SECURITY MANAGER 2010.2 - ADMINISTRATION GUIDE REV1 Administration Manual

Importing Versus Modeling

Copyright © 2010, Juniper Networks, Inc.
Additionally, collect the following information about the device:
OS and OS version running on the device
Port Mode used by the device (some ScreenOS devices only)
The following sections provide details to help you make decisions about adding devices
and determine device information.
You must decide if you want to import or model your devices in NSM.

Importing Device Configurations

You can add devices in your existing network into NSM and import their configurations.
Using the Add Device wizard, you configure a connection between the management
system and the physical device, and then import all device parameters, policies, objects,
VPNs, and so on.
After you have imported several devices, you can start using system-level management
features, such as:
The policy merge tool (for ScreenOS, J Series, and SRX Series devices) that can merge
several device security policies into a single, efficient policy that is easy to maintain.
Device groups, which group devices by function, location, or platform to make updating
easier.
The VPN Manager, for creating VPNs across multiple devices quickly.
If you modify a device that supports centralized policy management and import or
reimport the device into NSM, a new policy is automatically created using the following
naming syntax: device_1. (Each new policy increments the name.) Devices are not assigned
to the new policy. If you reimport a device with no changes, then a duplicate policy is not
created.
Importing and Templates
If you assign a template to a device before connecting to and importing the device, later
changes to the template will change values on the device. If you assign a template to a
device after importing it, changes to the template will not change set values on the device
unless you specifically have the template override the existing values.

Modeling Device Configurations

For most new or undeployed device types, you can add and configure the device in NSM,
and then activate the configuration when you are ready to deploy the physical device on
your network.
Before connecting to the device, create a device object (using the Add Device wizard)
that represents the OS and device type of the actual, physical device. Then model the
device configuration in the NSM UI. Configure all device features—zones, interfaces,
virtual routers, policies, logging features. Finally, activate the device (using the Activate
Device wizard) by configuring a connection between the management system and the
physical device, and then update the modeled configuration to the device.
Chapter 4: Adding Devices
101