Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 255

Copyright © 2010, Juniper Networks, Inc.
Table 65: Configuring Host Checker Third-Party Applications Using
Predefined Rules Details (continued)
Option
live-update
set-real-time-protection-on
start-scan
Predefined Firewall Rules
Rule Name
Select Products
Require any supported
product from a specific
vendor
Require specific products
Monitor this rule for change
in result
Turn on firewall for all
supported products
Selected Vendors tab
Chapter 15: Configuring Secure Access Host Checker Policies
Function
Allows live-update for the
product.
Allows real-time protection
for the product.
Starts the scanning process
for the product.
Specifies the name for the
firewall rule.
Allows you to select your
firewall vendor(s) and
product(s).
Checks for any product
(rather than requiring you
to select every product
separately)
Specifies specific
products/vendors, and
defines compliance by
allowing any product by a
specific vendor (for
example, any Symantec
product).
Continuously monitors the
policy compliance of
endpoints.
Turns on the Firewall.
Your Action
Select the live-update option to
enable this feature.
Select the
set-real-time-protection on option
to enable this feature.
Select the start-scan option to
enable this feature.
Enter the name.
Select one of the following options
from the drop-down list:
Require any supported
product—Specifies the software
vendor's product that is
supported for the system scan
check.
Require specific
products/vendors—Specifies
the specific vendor for the
system scan check.
Select the Require any supported
product from a specific vendor to
enable this feature.
Select the Require specific
products to enable this feature.
Select the Monitor this rule for
change in result to enable this
feature.
Select the Turn on firewall for all
supported products to enable this
feature.
237