Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 R2 - LOG MANAGEMENT REV 1 Manual page 115

Table B-7 Default Building Blocks (continued)
Building Block
Default-BB-Host
Definition: FTP Servers
Default-BB-Host
Definition: Host with Port
Open
Default-BB-Host
Definition: LDAP Servers
Default-BB-Host
Definition: Mail Servers
Default-BB-Host
Definition: Network
Management Servers
Default-BB-Host
Definition: Proxy Servers
Default-BB-Host
Definition: RPC Servers
Default-BB-Host
Definition: Servers
Default-BB-Host
Definition: SNMP Sender
or Receiver
Block
Group Type
Host Event Edit this BB to define typical FTP
Definitions
Host Event Edit this BB to include a host and
Definitions
Host Event Edit this BB to define typical LDAP
Definitions
Host Event Edit this BB to define typical mail
Definitions
Host Event Edit this BB to define typical
Definitions
Host Event Edit this BB to define typical proxy
Definitions
Host Event Edit this BB to define typical RPC
Definitions
Host Event Edit this BB to define generic
Definitions
Host Event Edit this BB to define SNMP
Definitions
STRM Log Management Users Guide
Description
servers.
port that is actively or passively
seen.
servers.
servers.
network management servers.
servers.
servers.
servers.
senders or receivers.
Default Building Blocks
Associated Building
Blocks, if applicable
Default-BB-False Positive:
FTP Server False
Positives Categories
Default-BB-FalsePositve:
FTP Server False Positive
Events
Default-BB-False Positive:
LDAP Server False
Positives Categories
Default-BB-FalsePositve:
LDAP Server False
Positive Events
Default-BB-False Positive:
Mail Server False
Positives Categories
Default-BB-FalsePositve:
Mail Server False Positive
Events
Default-BB-False Positive:
Proxy Server False
Positives Categories
Default-BB-FalsePositve:
Proxy Server False
Positive Events
Default-BB-False Positive:
RPC Server False
Positives Categories
Default-BB-FalsePositve:
RPC Server False
Positive Events
Default-BB-PortDefinition:
SNMP Ports
109