Table of Contents
Advertisement
Network and Security Manager Administration Guide
Enabling Jumbo Frames (ISG1000 Only)
46
Standalone IDP Sensors
The ISG2000 and ISG1000 security module is an optional component that provides IDP
functionality. If you have an ISG2000 or ISG1000 device that does not have IDP capability,
you can upgrade the device to be an IDP-capable system by replacing the memory chip
in the CPU, installing up to three security modules, and installing the Advanced and IDP
license keys for IDP. See the ISG2000 Field Upgrade Guide or the ISG1000 IDP Field
Upgrade Guide for instructions on how to upgrade your device to include IDP capabilities.
You can use the ISG2000 or ISG1000 device with IDP capability as a fully integrated
firewall/VPN/IDP security system that not only screens traffic between the Internet and
your private network, but also provides application-level security. Alternatively, you can
use the ISG2000 or ISG1000 device as a dedicated IDP system to protect critical segments
of your private network, such as Web servers or corporate accounting servers.
NOTE: IDP Series Appliances are standalone appliances that provide IDP functionality
without integrated firewall/VPN capabilities.
NSM is the sole means for configuring and managing IDP on the ISG2000 and ISG1000
devices. Although you can use the ScreenOS CLI or Web UI to configure the firewall/VPN
capabilities of the security device, you must use the NSM UI to enable and configure IDP
capabilities on the security module.
NSM supports jumbo frames on ISG1000 devices running ScreenOS 6.0r2 and later.
When the jumbo frame feature is enabled, the four predefined ports on the ISG1000 are
disabled.
If, however, you use a template to apply a predefined Ethernet or Fast Ethernet port to
an ISG1000 device with jumbo frames enabled, the port will be visible and can be edited,
even though it is not applicable to the device type.
To enable jumbo frames for the ISG1000:
In the Configure panel of the NSM main navigation tree, select Device Manager >
1.
Devices.
Click the Add Device icon, and then select Device from the list. The New Security
2.
Device wizard appears.
Enter a device name, and then select the Model Device option button.
3.
Click Next to continue.
4.
Select ScreenOS/IDP from the OS Name list.
5.
Select nsISG1000 from the Platform list.
6.
Select 6.0 or greater from the Managed OS Version list.
7.
Select the Enable Jumbo Frame check box, and then click Finish.
8.
Copyright © 2010, Juniper Networks, Inc.
Advertisement
Table of Contents
