Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual page 38

Network and Security Manager Administration Guide
Chapter 5
Chapter 6
Chapter 7
xxxviii
Figure 32: Connecting Vsys Devices Across Domains . . . . . . . . . . . . . . . . . . . . . . 148
Figure 33: Adding a Secure Access Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159
Figure 34: Adding a J Series Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162
Figure 35: Adding the First Member to a J Series Cluster . . . . . . . . . . . . . . . . . . . . 162
Figure 36: Adding the Second Member to a J Series Cluster . . . . . . . . . . . . . . . . . 163
Figure 37: Cluster Member Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163
Figure 38: Configuring Cluster Members for Paris Vsys Cluster . . . . . . . . . . . . . . . 167
Figure 39: Paris Cluster Members and Paris Vsys Cluster Members . . . . . . . . . . . 168
Configuring Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187
Figure 40: Device Info and Configuration Tabs . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191
Figure 41: ScreenOS and IDP Device Configuration Information . . . . . . . . . . . . . . 192
Figure 42: ScreenOS Device Object Configuration Data . . . . . . . . . . . . . . . . . . . . 194
Figure 43: Secure Access Device Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196
Figure 44: Example of Setting Values in a Template . . . . . . . . . . . . . . . . . . . . . . . 201
Figure 45: Applying a Template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202
Figure 46: Template Override Icon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203
Figure 47: Revert to a Template or Default Value . . . . . . . . . . . . . . . . . . . . . . . . . 203
Figure 48: View Denial of Service Defense Values from DoS Template . . . . . . . 206
Figure 49: Configure DoS Defense Settings for the DoS2 Template . . . . . . . . . . 207
Figure 50: View Template Priority (DoS Highest) . . . . . . . . . . . . . . . . . . . . . . . . . 208
Figure 51: View Values from DoS and DoS2 Templates . . . . . . . . . . . . . . . . . . . . 208
Figure 52: View DoS2 Value for Source IP Based Session Limit . . . . . . . . . . . . . . 209
Figure 53: View DoS Value for SYN-ACK-ACK Proxy Protection Setting . . . . . . . 209
Figure 54: View Default SYN-ACK-ACK Proxy Protection Setting . . . . . . . . . . . . 209
Figure 55: Up and Down Arrows for Changing the Sequence of a List . . . . . . . . . . 211
Figure 56: Identifying Ordered List Entries that Do Not Match the Template
Order . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217
Figure 57: Template Operations Directive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218
Figure 58: Select Template Dialog Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219
Figure 59: Template Operations Job Information Dialog Box . . . . . . . . . . . . . . . . 221
Figure 60: Adding a Configuration Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225
Figure 61: Applying a Configuration Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227
Figure 62: Configuration Group Applied . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227
Figure 63: Excluding a Configuration Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228
Figure 64: Configuring Routing Engine Specific Parameters . . . . . . . . . . . . . . . . . 237
Figure 65: Viewing the Routing Engine Configuration . . . . . . . . . . . . . . . . . . . . . . 238
Updating Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243
Figure 66: Delta Configuration Summary Example . . . . . . . . . . . . . . . . . . . . . . . 255
Figure 67: Job Manager Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259
Figure 68: Job Information Dialog Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260
Figure 69: Failed Update Job Dialog Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263
Managing Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265
Figure 70: Viewing the Device Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273
Figure 71: Comparing the Device Inventory with the NSM Database . . . . . . . . . . 274
Figure 72: Adding a Shared Binary Data Object . . . . . . . . . . . . . . . . . . . . . . . . . . . 277
Figure 73: Linking to a Shared Binary Data Object . . . . . . . . . . . . . . . . . . . . . . . . 278
Figure 74: Attack Update Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 296
Copyright © 2010, Juniper Networks, Inc.