Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual page 207

Table 9-8 Host Profile Tests (continued)
Test Description
Host Existence Valid when the local source or
destination host is known to exist
through active or passive
scanning.
You can also specify if the status
of the host is detected using one
of the following methods:
Active - STRM actively
•
searches for the configured
port through scanning or
vulnerability assessment.
Passive - STRM passively
•
monitors the network
recording hosts previously
detected.
Host Profile Valid when the local source or
Age destination host profile age is
greater than the configured
value within the configured time
intervals.
Host Port Age Valid when the local source or
destination host profile age is
greater than or less than a
configured amount of time.
Default Test Name
when the local source
host exists either
actively or passively
seen
when the local source
host profile age is
greater than this
number of time
intervals
when the local source
host profile port age is
greater than this
number of time
intervals
STRM Administration Guide
Creating a Rule
Parameters
Configure the following parameters:
source - Specify if you wish this
•
test to apply to source or
destination port. The default is
source.
either actively or passively -
•
Specify if you wish this test to
consider active and/or passive
scanning.
Configure the following parameters:
source - Specify if you wish this
•
test to apply to source or
destination port. The default is
source.
greater than - Specify if you wish
•
this test to consider greater than
or less than the profile port age.
this number of - Specify the
•
number of time intervals you wish
this test to consider.
time intervals - Specify whether
•
you wish this test to consider
minutes or hours.
Configure the following parameters:
source - Specify if you wish this
•
test to apply to the source or
destination port. The default is
source.
greater than - Specify if you wish
•
this test to consider greater than
or less than the profile port age.
this number of - Specify the time
•
you wish this test to consider.
time intervals - Specify whether
•
you wish this test to consider
minutes or hours.
199