Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual page 212

Strm administration guide
Hide thumbs Also See for SECURITY THREAT RESPONSE MANAGER 2008.2:
Table of Contents

Advertisement

204
C
R
ONFIGURING
ULES
Table 9-12 Host Profile Tests
Test
Description
Attacker Threat
Threat Posing is the
Level
calculated value for this
attacker over time, that
indicates how severe the
attacker is compared to all
other attackers in your
network.
Valid when the threat posed
to the network by an attacker
is greater or less than the
configured value.
Network
Valid when the overall VA risk
Vulnerability
on the network is greater or
Risk
less than the configured
value.
Network Threat
Valid when the amount of
Posing
threat a network is posing to
local and remote networks is
greater than, less than, or
equal to the configured value.
Network Threat
Threat under is the value
Under
applied to the threat a
network is under over time.
This is calculated based on
the average weighted value of
the threat under over time.
This test is valid when the
amount of threat a network is
under to local and remote
networks is greater than, less
than, or equal to the
configured value.
Host Profile Tests
The host profile tests include:
Default Test Name
when the amount of
threat the attacker is
posing is greater than
this value
when the overall network
VA risk is greater than
this value
when the amount of
threat the network is
posing is greater than
this value
when the amount of
threat the network is
under is greater than
this value
STRM Administration Guide
Parameters
Configure the following parameters:
greater than - Specify if you wish
the threat level to be greater than
or less than the configured value.
this value - Specify the value you
wish this test to consider.
Configure the following parameters:
greater than - Specify if you wish
the threat to be greater or less
than the configured value.
this value - Specify the value you
wish this test to consider.
Configure the following parameters:
greater than - Specify if you wish
the value to be greater or less
than the configured value.
this value - Specify the value you
wish this test to consider.
Configure the following parameters:
greater than - Specify if you wish
the network threat to be greater
than or less than the configured
value.
this value - Specify the value you
wish this test to consider.

Advertisement

Table of Contents
loading

Table of Contents