Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual page 208

200 C R
ONFIGURING ULES
Table 9-8 Host Profile Tests (continued)
Test Description
Host Valid when the local source or
Vulnerability destination host vulnerability risk
Assessment level is greater than or less than
Risk Level the configured value.
Host Valid when the local source or
Vulnerability destination host port vulnerability
Assessment risk level is greater than or less
Port Risk Level than a configured amount of
time.
Attacker Threat Threat Posing is the calculated
Level value for this attacker over time,
that indicates how severe the
attacker is compared to all other
attackers in your network.
Valid when the amount of threat
posed to the network by an
attacker is greater than or less
than the configured value.
Attacker Threat STRM calculates the long and
short-term threat of an attacker
and then calculates the
difference between the two to
provide information on changes
in the attacker's behavior.
Valid when the threat delta
posed by an attacker is greater
than or less than the configured
value.
Default Test Name
when the local
destination host
vulnerability risk level
is greater than 5
{default}
when the local
destination host port
vulnerability risk level
is greater than this
value
when the amount of
threat the attacker is
posing is greater than
this value
when the threat delta
of the attacker is
greater than this
value
STRM Administration Guide
Parameters
Configure the following parameters:
destination - Specify if you wish
•
this test to apply to the source or
destination port.
greater than - Specify if you wish
•
this test to be greater than or less
than the vulnerability risk.
5 - Specify the value you wish this
•
test to consider.
Configure the following parameters:
destination - Specify if you wish
•
this test to apply to the source or
destination port.
greater than - Specify if you wish
•
this test to consider greater than
or less than the vulnerability risk.
this value - Specify the value you
•
wish this test to consider.
Configure the following parameters:
greater than - Specify if you wish
•
the threat level to greater than or
less than the configured value.
this value - Specify the value you
•
wish this test to consider.
Configure the following parameters:
greater than - Specify if you wish
•
the threat data to be greater than
or less than the configured value.
this value - Specify the value you
•
wish this test to consider.