Figure 78: New Dynamic Group - Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual

Copyright © 2010, Juniper Networks, Inc.
From the resulting list of matching attack objects, you can then exclude any attack objects
that produces false positives on your network, or an attack object that detects an attack
to which your network is not vulnerable.
NOTE: A dynamic group cannot contain another group (predefined, static,
or dynamic). However, you can include a dynamic group as a member of a
static group.
Example: Creating a Dynamic Group
To create a dynamic group:
In the Custom Attack Groups tab, click the Add icon, and select Add Dynamic Group.
1.
The New Dynamic Group dialog box appears.
Enter a name and description for the group. Select a color for the group icon.
2.

Figure 78: New Dynamic Group

In the Filters tab, click the Add icon and add the filters that determine which attack
3.
objects should be in the group:
a. Add a Products filter to add attack objects that detect attacks against all Microsoft
Windows operating systems.
b. Add a Severity filter to add attack objects that have a severity level of critical or
major.
IDP automatically applies all filters to the entire attack object database, identifies
the attack objects that meet the defined criteria, and adds the matching objects
as members of the group.
Chapter 8: Configuring Objects
365