Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual page 135

Table 16: Predefined NSM Administrator Activities (continued)
Function
Security Policies
Servers
Service Objects
Shared Historical Log Report
Subdomain and Groups
Supplemental CLIs in Devices
& Templates
SYNProtector Rulebase
System Status Monitor
System UrlCategory
Copyright © 2010, Juniper Networks, Inc.
Task Description
View A policy is a set of rules that determines how a device handles traffic
passing through the firewall.
Create
Edit
Delete
View The Device Server and GUI Server form the NSM System.
Create
Edit
Create Allows an administrator to manage service objects. Service objects
represent the IP traffic types for existing protocol standards.
Delete
Edit
View
Create A shared historical log report is a user-defined historical log report that
is available to users with the appropriate permissions in a domain. These
Edit
reports appear under "Shared Reports" in the UI and can be generated
offline with the guiSvrCli utility. If an administrator can create shared
Delete
historical log reports, then that administrator can also move a report
from "My Reports" to "Shared Reports". An administrator requires
permission to delete shared historical log reports in order to move a report
from "Shared Reports" to "My Reports".
View A subdomain is a separate, unique representation of other networks that
exist within your larger network.
Create
Edit
Delete
Edit The Supplemental CLI option enables you to configure features on
security devices not yet formally supported in NSM. This applies to security
devices running a future release of ScreenOS.
Create Allows an administrator to manage the SYN-Protector rulebase, which
protects your network from SYN floods by ensuring that the three-way
Edit
handshake is performed successfully for specified TCP traffic.
View
View The system status monitor displays the status of NSM servers (GUI Server
and Device Server) and the processes running on each server.
Update The system URL category list contains predefined Web categories used
in Web filtering profiles. You can update the system Web category list
from the master Web category list maintained by SurfControl.
Chapter 3: Configuring Role-Based Administration
85