Using Rapid Deployment (Screenos Only) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual

Using Rapid Deployment (ScreenOS Only)

Copyright © 2010, Juniper Networks, Inc.
Rapid Deployment (RD) enables deployment of multiple security devices in a large
network environment with minimal user involvement. RD is designed to:
Simplify the deployment of firewall devices in nontechnical environments.
Minimize device staging or technical staff required at the deployment site.
Enable secure and efficient deployment of a large number of firewalls.
Bring new security devices under NSM management for initial configuration.
RD is supported on the following security devices:
ns204
ns208
ns25
ns50
ns5GT-Combined
ns5GT-Dmz-Dual-Untrust
ns5GT-Dual-Untrust
ns5GT-Extended
ns5GT-Home-Work
ns5GT-Trust-Untrust
ns5GTadsl-Extended
ns5GTadsl-Home-Work
ns5GTadsl-Trust-Untrust
ns5GTadslwlan-Extended
RD typically involves two people: The NSM administrator, who creates the necessary
device configuration for the new firewall devices in the NSM UI, and the onsite
administrator, who enables the firewall device to contact NSM for configuration.
The NSM administrator performs the following tasks in the NSM UI:
Adds a device to the UI.
1.
Creates a device configuration with specific or template-driven values.
2.
Enters the basic information that defines how a security device can contact your NSM
3.
Device Server.
Generates a small, static command file called a configlet.
4.
Saves the configlet in a user-defined directory, using email, CD, or another out-of-band
5.
method.
Chapter 4: Adding Devices
ns5GTadslwlan-Home-Work
ns5GTadslwlan-Trust-Untrust
ns5GTwlan-Combined
ns5GTwlan-Dmz-Dual-Untrust
ns5GTwlan-Dual-Untrust
ns5GTwlan-Extended
ns5GTwlan-Home-Work
ns5GTwlan-Trust-Untrust, ns5XP
ns5XT-Combined
ns5XT-Dual-Untrust
ns5XT-Home-Work
ns5XT-Trust-Untrust
nsHSC-Home-Work
nsHSC-Trust-Untrust
139