Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual page 12

Configuring ScreenOS Devices Guide
Chapter 6
Chapter 7
xii
Secure Shell Server in NSM Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158
Using SSH Version 1 (SSHv1) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159
Using SSH Version 2 (SSHv2) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159
Configuring CLI Banners in NSM Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
Configuring Remote Access Using Web Management Overview . . . . . . . . . . . . . 161
Configuring HTTP Administrative Connections in ScreenOS Devices Using NSM
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161
Configuring Secure Connections in ScreenOS Devices Using NSM Overview . . . 162
Configuring Network Time Protocol and NTP Backup Server in NSM
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163
Configuring Network Time Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
Configuring an NTP Backup Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
Setting ScreenOS Authentication Options Using General Auth Settings . . . . . . 165
Clearing RADIUS Sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165
Assigning an Authentication Request Interface . . . . . . . . . . . . . . . . . . . . . . . 165
Setting ScreenOS Authentication Options Using Banners Overview . . . . . . . . . . 166
Setting ScreenOS Authentication Options Using Default Servers Overview . . . . 167
Setting ScreenOS Authentication Options Using Infranet Settings Overview . . . 167
General Report Settings for ScreenOS Devices Overview . . . . . . . . . . . . . . . . . . 168
Configuring Syslog Host Using NSM (NSM Procedure) . . . . . . . . . . . . . . . . . . . . 169
Configuring SNMPv3 in ScreenOS Devices (NSM Procedure) . . . . . . . . . . . . . . . 170
Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175
Classification of Security Options Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176
Classification of Antivirus Scanning Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176
External Antivirus Scanner Settings Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177
Internal Antivirus Scan Manager Settings Overview . . . . . . . . . . . . . . . . . . . . . . . 178
Internal Antivirus HTTP Webmail Settings Overview . . . . . . . . . . . . . . . . . . . . . . 181
Antivirus Scanner Settings Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181
Classification of Deep Inspection Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183
Attack Object Database Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184
Using Attack Objects Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185
Antispam Settings in ScreenOS Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186
Configuring Antispam Settings in ScreenOS (NSM Procedure) . . . . . . . . . . . . . . 187
Configuring IDP Security Module Settings in ScreenOS Overview . . . . . . . . . . . . 189
Load-Time Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189
Run-Time Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189
Protocol Thresholds and Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189
Configuring Integrated Web Filtering in ScreenOS (NSM Procedure) . . . . . . . . . 190
Example: Configuring Integrated Web Filtering (NSM Procedure) . . . . . . . . . . . . 190
Redirect Web Filtering in ScreenOS Using NSM Overview . . . . . . . . . . . . . . . . . . 192
Example: Configuring Redirect Web Filtering in ScreenOS (NSM Procedure) . . . 193
Adding Proxy Addresses Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194
Planning and Preparing VPNs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
System-Level and Device-Level VPN Using NSM Overview . . . . . . . . . . . . . . . . . 196
System-Level VPN with VPN Manager Overview . . . . . . . . . . . . . . . . . . . . . . . . . 196
Device-Level VPN in Device Manager Overview . . . . . . . . . . . . . . . . . . . . . . . . . . 197
VPN Configuration Supported Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198
Planning Your VPN Using NSM Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198
Copyright © 2010, Juniper Networks, Inc.