Migration Tools; Managing Devices In A Virtual Environment Using Nsm - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Configuring ScreenOS Devices Guide

Migration Tools

Related
Documentation

Managing Devices in a Virtual Environment Using NSM

6
Templates—A template is a predefined device configuration that helps you reuse
specific information. Create a device template that defines specific configuration
values, and then apply that template to devices to quickly configure multiple devices
at one time. For more flexibility, you can combine and apply multiple device templates
to a single device configuration (63 maximum). In addition, you can make global-domain
templates available for reference in subdomains.
Shared Objects—An object is an NSM definition that is valid in the global domain and
all subdomains. Any object created in the global domain is a shared object that is
shared by all subdomains; the subdomain automatically inherits any shared objects
defined in the global domain. You will not see global objects in the Object Manager of
a subdomain. Although, you can use the objects when selecting objects in a policy.
The global domain is a good location for security devices and systems that are used
throughout your organization, address book entries for commonly used network
components, or other frequently used objects. A subdomain, alternatively, enables you
to separate firewalls, systems, and address objects from the global domain and other
subdomains, creating a private area to which you can restrict access.
Grouping—A group is a collection of similar devices or objects. Use device groups and
object groups to update multiple devices simultaneously, simplify rule creation and
deployment, and enable group-specific reporting. You can even link groups using Group
Expressions to create a custom group.
If you have existing security devices deployed on your network or are using a previous
Juniper Networks management system, you can use the NSM migration tools to quickly
import your existing security devices and their configurations, address books, service
objects, policies, VPNs, and administrator privileges. As NSM imports your existing device
configurations, it automatically creates your virtual network based on the configuration
information.
You can import device configurations directly from your security device, or from your
Juniper Networks Global PRO or Global PRO Express system. Import all your security
devices at one time, or, if your network is large, import one domain at a time. When
importing from Global PRO or Global PRO Express, NSM automatically transfers your
existing domain structure.
For details on migrating from a previous management system, see the NSM Migration
Guide.
Administering ScreenOS Devices Using NSM Complete System Management on page 10
Managing Devices in a Virtual Environment Using NSM on page 6
Error Prevention, Recovery, and Audit Management Using NSM on page 8
A production network is a living entity, constantly evolving to adapt to the needs of your
organization. As your network grows, you might need to add new devices, reconfigure
Copyright © 2010, Juniper Networks, Inc.