Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual page 362

354 ISP T D
EMPLATE EFAULTS
Table D-10 Default Building Blocks (continued)
Building Block
Default-BB-Host
Definition: Server
Networks
Default-BB-Host
Definition: Servers
Default-BB-Host
Definition: SNMP Sender
or Receiver
Default-BB-Host
Definition: SSH Servers
Default-BB-Host
Definition: Syslog Servers
and Senders
Default-BB-Host
Definition: Undefined IP
Space
Default-BB-Host
Definition: VA Scanner
Source IP
Default-BB-Host
Definition: Virus Definition
and Other Update Servers
Default-BB-Host
Definition: Web Servers
Default-BB-Host
Definition: Windows
Servers
Default-BB-Policy:
Application Policy
Violation Events
Block
Type Description
Event Edit this BB to include the networks where
your servers are located.
Event Edit this BB to define generic servers.
Event Edit this BB to define SNMP senders or
receivers.
Event Edit this BB to define typical SSH servers.
Event Edit this BB to define typical host that send
or receive syslog traffic.
Event Edit this BB to include areas of your
network that does not contain any valid
hosts.
Event Edit this BB to include the source IP
address of your VA scanner. By default,
this BB applies when the source IP address
is 127.0.0.2.
Event Edit this BB to include all servers that
include virus protection and update
functions.
Event Edit this BB to define typical web servers.
Event Edit this BB to define typical Windows
servers, such as domain controllers or
exchange servers.
Event Edit this BB to define policy application and
violation events.
STRM Administration Guide
Associated Building Blocks,
if applicable
Default-BB-PortDefinition:
SNMP Ports
Default-BB-False Positive: SSH
Server False Positives
Categories
Default-BB-FalsePositve: SSH
Server False Positive Events
Default-BB-FalsePositive:
Syslog Server False Positive
Categories
Default-BB-FalsePositive:
Syslog Server False Positive
Events
Default-BB-False Positive: Web
Server False Positives
Categories
Default-BB-FalsePositve: Web
Server False Positive Events
Default-BB-False Positive:
Windows Server False
Positives Categories
Default-BB-FalsePositve:
Windows Server False Positive
Events