Using Global Device Templates; Using Device Groups - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Using Global Device Templates

Using Device Groups

Copyright © 2010, Juniper Networks, Inc.
A template contains all possible fields for all possible devices. Not all devices have all
fields. You can apply a template to any device. NSM will ignore any fields that do not
apply to the given device.
A template can refer to other templates, enabling you to combine multiple templates
into a single template. When you make changes to any of the referenced templates,
those changes are propagated through the combined template.
NOTE: For more information on using templates, template limitations, and
exporting and importing device templates, see Network and Security Manager
Administration Guide. For instructions on creating and applying templates,
see the Network and Security Manager Online Help topics "Adding Device
Templates" and "Applying Templates."
Using Global Device Templates on page 33
Using Device Groups on page 33
In NSM, you can make global-domain templates available for reference in subdomains.
However, if an administrator disables the Allow use of global templates in subdomains
flag in the preferences, the administrator must also identify and remove all uses of the
global templates in the subdomains. You can do this by removing the template from
subdomain devices with the template operations directive in each relevant subdomain.
Use device groups to organize your managed devices, making it easier for you to configure
and manage devices within a domain. You can group devices by type (such as all the
NetScreen-5GTs in a domain), by physical location (such as all the security devices in
the San Jose office), or logically (such as all the security devices in sales offices throughout
western Europe).
Groups enable you to execute certain NSM operations on multiple security devices at
the same time. For example, if you have a group of the same type of devices running
similar ScreenOS versions, you can upload the firmware on all devices in the group at
the same time. You can also add devices to the NSM UI, place the devices in a group, and
then import the device configurations for all devices in the group at one time.
The devices that you add to a group must exist; that is, you must have previously added
or modeled the devices in the domain. You can group devices before configuring them.
You can add a device to more than one group. You can also add a group to another group.
Chapter 2: Device Configuration
33