Configuring Sensors (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual

Configuring Sensors (NSM Procedure)

Copyright © 2010, Juniper Networks, Inc.
The IDP sensor is a powerful tool to counter users who initiate attacks. Integration with
the Secure Access device allows you to configure automatic responses as well as manually
monitor and manage users.
To configure IDP sensors:
In the NSM navigation tree, select Device Manager > Devices. Click the Device Tree
1.
tab, and then double-click the Secure Access device for which you want to configure
sensors.
Click the Configuration tab, and select System > Configuration > Sensors. The
2.
corresponding workspace appears.
Add or modify settings as specified in Table 77 on page 265.
3.
Click one:
4.
OK—Saves the changes.
Cancel—Cancels the modification.
Table 77: Configuring IDP Sensor Details
Option Function
Sensors tab
Name Specifies the name that the Secure
Access device uses to identify the
new connection entry.
Hostname Specifies the hostname or IP
address of the IDP sensor to which
the Secure Access device connects
to receive application and resource
attack alert messages.
TCP Port Specifies the TCP port on the IDP
sensor to which the Secure Access
device listens when receiving
application and resource attack
alert messages.
One Time Specifies the encrypted password
Password the Secure Access device uses
when conducting the initial
Transport Layer Security (TLS)
handshake with the IDP sensor.
Addresses to Allows you to specify individual IP
monitor > New addresses and address ranges the
Addresses to IDP sensor monitors for potential
monitor attacks, one entry per line. IDP
reports attack information only for
the IP addresses that you specify.
Chapter 17: Configuring Secure Access System Management Features
Your Action
Enter the name.
Enter the hostname or IP address.
Enter the port.
Enter the encrypted Secure Access
device OTP password as displayed on
the IDP ACM configuration summary
screen.
Enter the IP addresses.
265