Table of Contents
Advertisement
Example: Using Administrative Reports to Optimize Rulebases
Copyright © 2010, Juniper Networks, Inc.
In this example, you are a security administrator responsible for implementing new rules
to your firewall rulebase. After you have updated the new security policy on the managed
security devices in your network, you want to know the effect of the new rules on network
traffic.
You configure a "Top FW/VPN Rules" report to start at the same date and time that the
new rulebase settings were updated in the network. You also set the report data point
count to 100. In this way, you can get an indication for the top 100 rules that are generating
log events. Figure 117 on page 827 shows the Top FW/VPN Rules report.
Figure 117: Top FW/VPN Rules Report
By identifying the new rules that you implemented in the network, you can track how
effective the new rules are. If you find that a specific rule that is permitting too much
traffic, you may want to redefine it to be more strict. If you find that a specific rule is not
generating any log events, you may want to check it again to verify that you configured
it correctly; perhaps you configured an IP address incorrectly.
Regular review of the "Top FW/VPN Rules" report can help you to update and optimize
the rulebases implemented in your security policies.
Chapter 20: Reporting
827
Advertisement
Table of Contents
Related Manuals for Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1
Related Products for Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.3 - CONFIGURING INTRUSION DETECTION AND PREVENTION GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - API GUIDE REV 1
- Juniper NETWORK AND SECURITY MANAGER 2010.3 - M-SERIES AND MX-SERIES DEVICES GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.2 - ADMINISTRATION GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING J SERIES SERVICES ROUTERS AND SRX SERIES SERVICES GATEWAYS GUIDE REV
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - NSMXPRESS SERIES II REV 1
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - REV1
- Juniper NETWORK AND SECURITY MANAGER 2010.4 - M-SERIES AND MX-SERIES DEVICES GUIDE REV 1
- Juniper NETWORK AND SECURITY MANAGER 2010.3
- Juniper NETWORK AND SECURITY MANAGER 2010.2
- Juniper MEDIA FLOW CONTROLLER 2.0.4 -
- Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - AQL EVENT AND FLOW QUERY CLI GUIDE
- Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - EVENT CATEGORY CORRELATION REV 1
- Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - SNMP AGENT GUIDE REV 1
- Juniper STRM LOG MANAGEMENT 2008.2 - S 6-2008
Need help?
Do you have a question about the NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 and is the answer not in the manual?