Automatic Policy Versioning; Setting Nsm To Automatic Policy Versioning - Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual

Automatic Policy Versioning

Copyright © 2010, Juniper Networks, Inc.
Select all rulebases
Expand rule groups
Show expanded view
Print filter condition
Link all shared object details
Run in background
Click the button to select a default export directory for all future exports. Click
Browse
to export the file. You can choose to export the policy as a background process
Export
by selecting the Run in background
and view the completed percentage in a dialog
Export Policy Status
Each export creates a new directory. The default directory name is
<policyname>_YYMMDD_HHMMSS. The export process puts each rulebase in a separate
HTML file in that directory.
Use an HTML browser to view the exported file. Expanded views may make the output
too wide for a standard printer. Shared objects like Address, Service, Install on, Attack
columns and so on, appear as links. Click on a link to view details about the selected
object in a new HTML page.
To export an expanded view of the Zone based Firewall Rules from a security policy,
select a policy from Policies.
dialog box, select Zone based Firewall Rules. Select Show Expanded View. Browse to
an export directory and click Select Export Directory. Click Export.
NSM creates a new subdirectory for each export. To view the policy, point your browser
at file zone.html in the created subdirectory.
NSM policies are objects that reference other objects in the database. Those objects, in
turn, reference other objects. When a version is created for a "versioning" you must also
version all directly and indirectly referenced objects in the database to maintain referential
integrity.
To simplify the process, you can generate a database snapshot, which is a virtual copy
of the whole database at a specific point in time. However, you cannot change the
database snapshot. At a later time when changes are made, you update an "object
version" of the database.
This section explains how to set NSM for automatic policy versioning, create a new policy
version, and view existing versions.

Setting NSM to Automatic Policy Versioning

This section explains how to use the GUI to make NSM default to automatic policy
versioning.
option. To check progress during a policy export, click
Then select File > Export Policy from the menu bar. In the
Chapter 9: Configuring Security Policies
521