Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual page 358

350 ISP T D
EMPLATE EFAULTS
Table D-10 Default Building Blocks (continued)
Building Block
Default-BB-FalsePositive:
Global False Positive
Events
Default-BB-FalsePositive:
Internal Attacker to
Internal Target False
Positives
Default-BB-FalsePositive:
Internal Attacker to
Remote Target False
Positives
Default-BB-FalsePositive:
LDAP Server False
Positive Categories
Default-BB-FalsePositive:
LDAP Server False
Positive Events
Default-BB-FalsePositive:
Mail Server False Positive
Categories
Default-BB-FalsePositive:
Mail Server False Positive
Events
Default-BB-FalsePositive:
Network Management
Servers Recon
Default-BB-FalsePositive:
Proxy Server False
Positive Categories
Default-BB-FalsePositive:
Proxy Server False
Positive Events
Block
Type Description
Event Edit this BB to include any event QIDs that
you wish to ignore.
Event Edit this BB to define all the false positive
QIDs that occur to or from Local-to-Local
(L2L) based servers.
Event Edit this BB to define all the false positive
QIDs that occur to or from Local-to-Remote
(L2R) based servers.
Event Edit this BB to define all the false positive
categories that occur to or from LDAP
servers that are defined in the
Default-BB-HostDefinition: LDAP Servers
building block.
Event Edit this BB to define all the false positive
QIDs that occur to or from LDAP servers
that are defined in the
Default-BB-HostDefinition: LDAP Servers
building block.
Event Edit this BB to define all the false positive
categories that occur to or from mail
servers that are defined in the
Default-BB-HostDefinition: Mail Servers
building block.
Event Edit this BB to define all the false positive
QIDs that occur to or from mail servers that
are defined in the
Default-BB-HostDefinition: Mail Servers
building block.
Edit this BB to define all the false positive
categories that occur to or from network
management servers that are defined in the
Default-BB-HostDefinition: Network
Management Servers building block.
Event Edit this BB to define all the false positive
categories that occur to or from proxy
servers that are defined in the
Default-BB-HostDefinition: Proxy Servers
building block.
Event Edit this BB to define all the false positive
QIDs that occur to or from proxy servers
that are defined in the
Default-BB-HostDefinition: Proxy Servers
building block.
STRM Administration Guide
Associated Building Blocks,
if applicable
Default-BB-HostDefinition:
LDAP Servers
Default-BB-HostDefinition:
LDAP Servers
Default-BB-HostDefinition: Mail
Servers
Default-BB-HostDefinition: Mail
Servers
Default-BB-HostDefinition:
Network Management Servers
Default-BB-HostDefinition:
Proxy Servers
Default-BB-HostDefinition:
Proxy Servers