Table of Contents
Advertisement
Manage Polymorphic Objects
Copyright © 2010, Juniper Networks, Inc.
Validation of Polymorphic Object on page 531
Supported Polymorphic Object Categories on page 531
Access Control of Polymorphic Object
Table 48 on page 531 defines accessibility of polymorphic objects in different servers.
Table 48: Polymorphic Objects
Create
Customize mapping table
Change name/color and
other attributes
Delete
Validation of Polymorphic Object
When an administrator first creates a polymorphic object, the customization state is set
to pending. The validation routine generates a warning/error message when encountering
the pending state. Validation of a polymorphic object is triggered if an object is used by
a rule and that rule is edited or viewed in the policy manager.
Supported Polymorphic Object Categories
Polymorphic objects are in the same category as concrete objects of the same nature.
The shared object type attribute includes a new value for polymorphic objects of a specific
category. The following objects categories can have polymorphic type: Address, Service,
Zone, Global NAT and Routing Instance.
Zone is a polymorphic shared object at the Central Manager level. After a global pre/post
rule is pushed, zone objects resolve into names in prerules and postrules. A vsys zone
can only be supported with a polymorphic zone. Administrators must map every vsys
manually with a vsys zone name.
Global MIP/DIP/VIP objects in current NSM are intrinsically polymorphic. For all other
categories of shared objects at Central Manager level, only concrete shared objects are
supported.
You can create polymorphic objects at the Central Manager level or the regional server
level. When polymorphic objects are created in the Central Manager they are pushed to
one or more regional servers where they are available to be populated with real values.
The workflow for using polymorphic objects is:
Polymorphic objects
Polymorphic objects
created and used in
created in a Central
Central Manager
Manager, but used in
Server
a regional server
Yes
No
No
Yes
Yes
No
Yes
Yes if not referenced
by central rules.
Chapter 9: Configuring Security Policies
Polymorphic
objects created
and used in a
regional server
Yes
Yes
Yes
Yes
531
Advertisement
Table of Contents
Related Manuals for Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1
Related Products for Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.3 - CONFIGURING INTRUSION DETECTION AND PREVENTION GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - API GUIDE REV 1
- Juniper NETWORK AND SECURITY MANAGER 2010.3 - M-SERIES AND MX-SERIES DEVICES GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.2 - ADMINISTRATION GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING J SERIES SERVICES ROUTERS AND SRX SERIES SERVICES GATEWAYS GUIDE REV
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - NSMXPRESS SERIES II REV 1
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - M-SERIES AND MX-SERIES DEVICES GUIDE REV 1
- Juniper NETWORK AND SECURITY MANAGER 2010.3
- Juniper NETWORK AND SECURITY MANAGER 2010.2
- Juniper MEDIA FLOW CONTROLLER 2.0.4 -
- Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - AQL EVENT AND FLOW QUERY CLI GUIDE
- Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - EVENT CATEGORY CORRELATION REV 1
- Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - SNMP AGENT GUIDE REV 1
- Juniper STRM LOG MANAGEMENT 2008.2 - S 6-2008
Need help?
Do you have a question about the NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 and is the answer not in the manual?
Questions and answers