Table of Contents
Advertisement
CHAPTER 17
Analyzing Your Network
About the Dashboard
About the Profiler
Copyright © 2010, Juniper Networks, Inc.
You can use the Security Monitor module to learn about your internal network. The
Security Monitor includes the Dashboard, Profiler, and Security Explorer network analysis
tools.
This chapter contains the following sections:
About the Dashboard on page 683
About the Profiler on page 683
Setting Up the Profiler on page 685
About Profiler Views on page 690
Recommended Profiler Options on page 700
Accessing Data in the Profiler Database on page 704
About Security Explorer on page 705
Using Security Explorer on page 708
Known targets and sources of attacks or suspected targets and sources of attacks can
be added to source or destination watch lists. The Dashboard is a near-real-time monitor
of these watch lists and the top 10 attacks within the previous hour. The interval at which
these lists are updated ranges from 2 minutes (default rate) to 30 minutes. The lists are
updated automatically after the refresh rate is configured.
Use the Dashboard to create and configure both a destination and a source watch list
as well as to display device status. This feature is available by default to the system
administrator. Use the watch list to add or modify known or suspected targets and sources
of attacks.
The Profiler is a network-analysis tool that helps you learn about your internal network
so you can create effective security policies and minimize unnecessary log records. After
you configure the Profiler, it automatically learns about your internal network and the
elements that constitute it, including hosts, peers (which host is talking to which other
683
Advertisement
Table of Contents
