Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual page 176

168 M V
ANAGING IEWS
Table 8-22 Element Options (continued)
Parameter Description
Property Using the drop-down list box, select the flow property. Options include:
ClassL2L - Traffic between two local objects on your network.
•
ClassL2R - Traffic between one local object and one remote object.
•
ClassOther - Traffic between hosts not defined in your network.
•
SuperFlow - Flow of traffic that is an aggregate of the number of
•
flows that have a similar predetermined set of elements, such as
protocol, source bytes, source packets, source host, or destination
network. In some cases, other properties may be similar, such as
destination ports, TCP/IP flags, ICMP types, and code; however, the
destination hosts can differ.
SuperFlowTypeA - SuperFlow identified as one host destined to
•
many host.
SuperFlowTypeB - SuperFlow identified as many hosts destined to
•
one host.
SuperFlowTypeC - SuperFlow identified as one host to one host.
•
StealthPorts - Traffic located outside the normal application ports.
•
SrcLocal - Traffic originating from a local source.
•
DstLocal - Traffic originating from a remote network destined for
•
your network.
NoAppDetect - Traffic with zero application detection that may be
•
caused by not enough payload; or, traffic originating from ICMP
messages.
UnknownApp - Non-defined application traffic.
•
FlowShapeInOnly - Traffic or flows destined in the network (from
•
the Flowtype View).
FlowShapeOutOnly - Traffic or flows destined out from the network
•
(from the Flowtype View).
Click Add.
Port Element Type
Name Specify the element name.
Object Using the drop-down list box, select the targeted traffic flow. Options
include: Src (Source), Dst (Destination), Local, Remote, and Total.
Value Specify the port number. Click Add.
CIDR Element Type
Name Specify the element name.
Object Using the drop-down list box, select the targeted traffic flow. Options
include: Src (Source), Dst (Destination), Local, Remote, and Total.
Value Enter the IP address or CIDR range. Click Add.
Application ID Element Type
Name Specify the element name.
STRM Administration Guide