Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual page 130

Network and Security Manager Administration Guide
Table 16: Predefined NSM Administrator Activities (continued)
Function
Device UrlCategory
Devices, Device Groups, and
Templates
DI Objects
Extranet Policy Objects
Dial-in Objects
Failover Device
Firewall Rulebases
Force Logout Administrators
Get Entitlement from
Entitlement Server
80
Task Description
Update The device URL category list contains predefined Web categories used
in Web filtering profiles. You can update the device Web category list
from the system Web category list.
View A device is a managed device.
Create A device group is a collection of managed devices.
Edit A template is a device configuration that contains predefined, static
configuration information, such as networking settings, interface settings,
Delete
or DNS settings.
Create Deep Inspection (DI) attack objects contain attack patterns and protocol
anomalies for known attacks and unknown attacks that attackers can
Delete
use to compromise your network. However, DI attack objects don't work
on their own—they need to be part of an attack object group and a DI
Edit
Profile object before you can use them in a firewall rule to detect known
attacks and prevent malicious traffic from entering your network.
View
Create Extranet policies enable you to configure and manage third-party routers.
Delete
Edit
View
Create Use Dial-in objects to dial-in and manage a device as a console. You can
create and edit lists of allowed numbers and lists of blocked numbers
Delete
and set a policy for unknown CNIDs.
Edit
View
N/A Use failover to enable the device to switch traffic from the primary
interface to the backup interface, and from the backup to the primary
when both primary and backup interfaces are bound to the Untrust zone.
Create/Edit The firewall rulebases (Zone and Global) in a security policy contain rules
that handle traffic passing through the firewall. These activities enable
View
an administrator to control or view rules in the firewall rulebases.
N/A The Force Logout Administrators activity enables a system administrator
to forcibly log out another administrator when there is a resource
contention.
N/A Entitles the administrator to configure devices to receive services that
require subscriptions, such as internal AV or Deep Inspection Signature
Service.
Copyright © 2010, Juniper Networks, Inc.