Managing Remote Networks View; Default Remote Networks Views; Adding A Remote Networks Object; Editing A Remote Networks Object - Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual

Managing Remote
Networks View
Default Remote
Networks Views
Adding a Remote
Networks Object
Step 1
Step 2
Step 3
Remote Networks View displays user traffic originating from named remote
networks. Using the Remote Networks View, you can view traffic by known remote
networks. This section provides information on managing the Remote Networks
View including:

Default Remote Networks Views

•

Adding a Remote Networks Object

•

Editing a Remote Networks Object

•
Remote Networks includes the following default groups:
Table 8-9 Remote Networks Views
Parameter Description
BOT Specifies traffic originating from BOT applications.
Bogon Specifies traffic originating from un-assigned IP addresses.
Note: Bogon reference: http://completewhois.com/bogons/
HostileNets Specifies the traffic originating from known hostile networks.
HostileNets has a set of 20 (Rank 1 to 20 inclusive) configurable
CIDR ranges.
Neighbours This group is blank by default. You must configure this group to
classify traffic originating from neighboring networks.
Superflows This group is non-configurable. A superflow is a flow that is an
aggregate of a number of flows that have a similar
pre-determined set of elements.
TrustedNetworks This group is blank by default. You must configure this group to
classify traffic originating from trusted networks.
Note: Groups and objects that include superflows are for informational purposes
only and cannot be edited. Groups and objects that include bogons are configured
by the Automatic Update function.
To add a Remote Networks object:
From the Administration Console, click the Views Configuration tab.
The Views Configuration panel appears.
Click the Remote Networks
Click Add.
The Add New Object window appears.
STRM Administration Guide

Managing Remote Networks View 151

icon.