Deleting A Flow Source; Managing Flow Source Aliases; Adding A Flow Source Alias; Editing A Flow Source Alias - Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual

122 M F
ANAGING LOW
Deleting a Flow
Source
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Managing Flow
Source Aliases
Adding a Flow
Source Alias
Step 1
Step 2
Step 3
S
OURCES
To delete a flow source:
In the Administration Console, click the Flow Configuration tab.
The Flow Configuration panel appears.
Click the Manage Flow Source icon.
The Flow Source window appears.
Select the flow source you wish to delete.
Click Delete.
A confirmation window appears.
Click Ok.
From the Administration Console menu, select Configurations > Deploy
configuration changes.
You can configure a virtual name (or alias) for flow sources. You can identify
multiple sources being sent to the same Flow Collector, using the sources' IP
address and virtual name. An alias allows a Flow Collector to uniquely identify and
process data sources being sent to the same port.
When a Flow Collector receives traffic from a device with an IP address but no
current alias, the Flow Collector attempts a reverse DNS lookup to determine the
hostname of the device. If the lookup is successful, the Flow Collector adds this
information to the database and includes this information is reported to all Flow
Collector in your deployment.
Note: Using the deployment editor, you can configure the Flow Collector to
automatically detect flow source aliases. For more information, see
Managing Flow Sources.
Using the Administration Console, you can:

Adding a Flow Source Alias

•

Editing a Flow Source Alias

•
•

Deleting a Flow Source Alias

To add a flow source alias:
In the Administration Console, click the Flow Configuration tab.
The Flow Configuration panel appears.
Click the Manage Flow Source Aliases icon.
The Flow Source Alias window appears.
Click Add.
STRM Administration Guide
Chapter 5