Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual page 81

Step 5
Step 6
Step 7
Step 8
Renaming
Components
Step 1
Step 2
Step 3
Step 4
Building Your
Event View
Encrypt traffic from off-site source - Select the check box if you wish to
•
encrypt traffic from an off-site source. To enable encryption, you must select
this check box on the associated off-site source and target. For more
information regarding encryption, see
Click Next.
Click Finish.
Repeat for all remaining off-site sources and targets.
From the main menu, select File > Save to staging.
Note: If you update your Flow Processor configuration or the monitoring ports, you
must manually update your source and target configurations to maintain the
connection between deployments.
You may wish to rename a component in your view to uniquely identify
components through your deployment.
To rename a component:
Select the component you wish to rename.
From the menu, select Actions > Rename component.
Note: You can also use the right mouse button (right-click) to access the Actions
menu items.
The Rename component window appears.
Enter a new name for the component. The name must be alphanumeric with no
special characters.
Click Ok.
The Event View allows you to create and manage the SIM components for your
deployment including:
Event Collector - Collects security events from various types of security
•
devices in your network. The Event Collector gathers events from local, remote,
and device sources. The Event Collector then normalizes the events and sends
the information to the Event Processor. The Event Collector also bundles all
virtually identical events to conserve system usage.
Event Processor - An Event Processor processes flows collected from one or
•
more Event Collector(s). The events are bundled once again to conserve
network usage. Once received, the Event Processor correlates the information
STRM Administration Guide
Building Your Event View
Managing Your System
73
View.