Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual page 112

104 U D
SING THE EPLOYMENT
Step 7
Configuring a
Classification Engine
Step 1
Step 2
Step 3
E
DITOR
The deployment editor appears.
Repeat for all Flow Processors in your deployment you wish to configure.
The Classification Engine receives inputs from one or more Flow Processor(s),
classifies the flows into views and objects, and outputs the resulting database
entries and flow logs to the Update Daemon to be stored on disk. Using the
deployment map, you can either enable or disable views and configure a
Classification Engine.
To configure a Classification Engine:
In either the Flow or System View, select the Classification Engine you wish to
configure.
From the menu, select Actions > Configure.
Note: You can also use the right mouse button (right-click) to access the Actions
menu items. The Classification Engine window appears.
Enter values for the parameters:
Table 5-10 Classification Engine Parameters
Parameter
Classification Engine
Server Listen Port
Flow Processor
Connections
STRM Administration Guide
Description
Specify the port that the Classification Engine monitors for
incoming connections.The default range is from 32000 to
65535.
When the Classification Engine starts, it attempts to
establish a TCP/IP communications link with one or more
Flow Processor(s) to retrieve flows. If the Flow Processors
cannot be reached, the Classification Engine attempts to
establish the link periodically until it succeeds. This
parameter is for information purposes only and is not
amendable.
Specifies the list of Flow Processor connections using the
following format:
<hostname>:<port>
The default is localhost:32001.
Each entry is separated with a comma.