Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual page 325

Table B-10 Default Building Blocks (continued)
Building Block
Default-BB-FalsePositive:
Syslog Sender False
Positive Events
Default-BB-FalsePositive:
Virus Definition Update
Categories
Default-BB-FalsePositive:
Web Server False
Positive Categories
Default-BB-FalsePositive:
Web Server False
Positive Events
Default-BB-FalsePositive:
Windows Server False
Positive Categories Local
Default-BB-FalsePositive:
Windows Server False
Positive Events
Default-BB-Host
Definition: Database
Servers
Default-BB-Host
Definition: DHCP Servers
Block
Group Type
False Event Edit this BB to define all false
Positive
False Event Edit this BB to define all the false
Positive
False Event Edit this BB to define all the false
Positive
False Event Edit this BB to define all the false
Positive
False Event Edit this BB to define all the false
Positive
False Event Edit this BB to define all the false
Positive
Host Event Edit this BB to define typical
Definitions
Host Event Edit this BB to define typical DHCP
Definitions
STRM Administration Guide
Description
positive events that occur to or
from syslog sources or
destinations.
positive QIDs that occur to or from
virus definition or other automatic
update hosts that are defined in
the Default-BB-HostDefinition:
Virus Definition and Other Update
Servers building block.
positive categories that occur to or
from web servers that are defined
in the Default-BB-HostDefinition:
Web Servers building block.
positive QIDs that occur to or from
Web servers that are defined in the
Default-BB-HostDefinition: Web
Servers building block.
positive categories that occur to or
from Windows servers that are
defined in the
Default-BB-HostDefinition:
Windows Servers building block.
positive QIDs that occur to or from
Windows servers that are defined
in the Default-BB-HostDefinition:
Windows Servers building block.
database servers.
servers.
Default Building Blocks
Associated Building
Blocks, if applicable
Default-BB-HostDefinition:
Syslog Servers and
Senders
Default-BB-HostDefinition:
Virus Definition
Default-BB-HostDefinition:
Web Servers
Default-BB-HostDefinition:
Web Servers
Default-BB-HostDefinition:
Windows Servers
Default-BB-HostDefinition:
Windows Servers
Default-BB-FalsePositive:
Database Server False
Positive Categories
Default-BB-FalsePositive:
Database Server False
Positive Events
Default-BB-False Positive:
DHCP Server False
Positives Categories
Default-BB-FalsePositve:
DHCP Server False
Positive Events
317