Juniper NetScreen-IDP 3.0 Quick Start Manual Download Page 1 | Manualshive

Page: 1 / 32

background image

Q

UICK

S

TART

G

UIDE

NetScreen-IDP 3.0

V/N 3.0 P/N 093-1509-000 Rev. B

1
2
3
...
»

Summary of Contents for NetScreen-IDP 3.0

Page 1: ...QUICKSTART GUIDE NetScreen IDP 3 0 V N 3 0 P N 093 1509 000 Rev B...

Page 2: ...The following information is for FCC compliance of Class B devices The equipment described in this manual generates and may radiate radio frequency energy If it is not installed in accordance with Ne...

Page 3: ...GEMENT SERVER 11 CONNECT TO THE IDP APPLIANCE 14 CONFIGURE THE IDP SENSOR 17 CONNECT IDP TO YOUR NETWORK 20 CONNECT THE NS IDP BYP OPTIONAL 22 BSMI WARNING 25 INSTALL THE USER INTERFACE 26 ADD NETWORK...

Page 4: ...s please contact customer support IDP Sensor Package Contents Each NetScreen IDP Sensor package contains An IDP appliance A bezel An accessory box containing 1 North American power cable 2 Ethernet ca...

Page 5: ...p you connect the IDP Bypass Unit to your network and to the IDP appliance 7 Install the User Interface In this step you install the User Interface UI 8 Add Network Components In this step you add the...

Page 6: ...s take full advantage of IDP attack prevention capabilities and MultiMethod Detection mechanisms Choose bridge proxy ARP transparent or router mode Passive Sniffer To use IDP as a passive IDS system w...

Page 7: ...ust use a hub or the span port of a switch Cannot use NS IDP BYP for fail open protection IDP Firewall Hub or Switch Protected Network Eth2 IP 2 2 2 7 Management Network Hub or Switch straight through...

Page 8: ...ch Eth0 192 168 0 1 Forw arding Interface D efault G W 192 168 0 2 E th1 1 1 1 1 Forw arding Interface P rotected N etw ork Eth2 2 2 2 7 M anagem ent Interface M anagem ent N etw ork H ub or S w itch...

Page 9: ...ction Can forward non IP traffic transparent mode only IDP Firewall Hub or Switch Eth2 2 2 2 7 Management Interface Management Network Hub or Switch 2 2 2 1 Client1 IP 2 2 2 2 Client2 IP 2 2 2 3 Clien...

Page 10: ...ntries Cannot use NS IDP BYP for fail open protection IDP Firewall Hub or Switch Eth0 1 1 1 254 Forwarding Interface Eth1 1 1 1 5 Forwarding Interface Protected Network Eth2 2 2 2 7 Management Interfa...

Page 11: ...software This is installed by default on RedHat systems For Solaris systems you can download the gzip package for your processor and OS version from http www sunfreeware com Once you have downloaded...

Page 12: ...ement Server 3 Log in to the computer as root If you are already logged in as a user other than root become root by typing su At the password prompt enter the root password for the computer 4 Create a...

Page 13: ...ver processes start automatically Management Server IP Address During the Sensor configuration process you must establish the communication between the Management Server and the Sensor by providing th...

Page 14: ...rd and monitor to the IDP appliance and configure Ethernet access by choosing an Ethernet port IP address and default route After you have configured Ethernet access you connect the IDP appliance to y...

Page 15: ...meters 8 N 1 9600 For Windows use HyperTerminal For Linux use minicom For keyboard and monitor connections connect a keyboard and monitor to the IDP appliance 2 Log in to the IDP appliance as root wit...

Page 16: ...to a hub or switch use a straight through cable 6 Using the computer that is on your network open a Web browser Enter the IP address you chose in the configuration script Because the ACM uses a secure...

Page 17: ...rts Mozilla 1 0 1 and IE 6 0 Web browsers If the font size is too small or difficult to read in your Mozilla Web browser increase the font size to 150 Note During the configuration process you choose...

Page 18: ...on the IDP appliance to these subnets Without these static routes incoming traffic to those subnets can be lost Alternatively you can create a static route from the IDP appliance to an internal gatew...

Page 19: ...nect the serial console keyboard and monitor or other standalone computer from the IDP appliance If you changed the IP address of a standalone computer to access the ACM be sure to change it back to i...

Page 20: ...igurations below display the Ethernet ports and their intended connections your configuration may differ to external network to external network to protected network to protected network eth1 Forwardi...

Page 21: ...a Bypass Unit proceed to Connect the NS IDP BYP optional on page 22 If you are not using a Bypass Unit proceed to Install the User Interface on page 26 to protected network eth0 eth1 1 2 to external n...

Page 22: ...nd eth3 If you have a quad card installed you can also use port pairs eth4 and eth5 eth6 and eth7 or eth8 and eth9 2 Connect NET IN to the untrusted switch 3 Connect NET OUT to the trusted switch The...

Page 23: ...ou must use the specified port pairs Enabling NSRP Frames The Bypass Unit passes NSRP frames However because other software applications also use NSRP layer 2 frames you must enable the Sensor to pass...

Page 24: ...0 100 Base T standard The following table displays media type and distance for these connectors Status LEDs The status LED indicates the operation of the NS IDP BYP device Temperature Operating Normal...

Page 25: ...e Juniper Networks NetScreen IDP 3 0 25 BSMI Warning The Bureau of Standards Metrology and Inspection BSMI is an agency of the government of China Taiwan which requires the following label on technolo...

Page 26: ...ine If Autoplay is enabled the installation starts automatically If not run the install application install exe from your CD ROM drive 3 Follow the directions in the dialog boxes to install the UI Ins...

Page 27: ...Choose your Web browser from the list and then click OK or In the Enter file name field enter the name of the Web browser and then click OK Opening the User Interface When you open the User Interface...

Page 28: ...ct Sensor and then click OK to display the Sensor Editor Enter the information about the Sensor including a unique name Use the VIN and One Time Password from Configure the IDP Sensor on page 17 If yo...

Page 29: ...y Policy template appears Customize the template to your network You must specify the Sensor that you want the Security Policy installed on 4 Choose Policy Install from the menu bar to install the new...

Page 30: ...ab select any individual objects you want the Profiler to exclude from the groups you selected on the Internal Hosts tab On the Profiles tab select Context Objects to profile all contexts Leave the se...

Page 31: ...wnloads new or modified Attack Objects From the menu bar of the User Interface select Tools Update Attacks and follow the instructions in the Attack Update Client wizard to update your Attack Object d...

Page 32: ...WS 3 or Solaris 8 9 Can also install on the Sensor IDP 10 100 500 1000 Required install on a separate computer running Red Hat 7 2 or 8 RHEL AS ES WS 3 or Solaris 8 9 Interfaces IP Addresses Manageme...

Reviews:

No comments

Related manuals for NetScreen-IDP 3.0

Brand: N-Tron Pages: 101

Brand: Eaton Pages: 10

Brand: YASKAWA Pages: 68

Brand: E-TOP Pages: 76

Brand: Alcad Pages: 6

Brand: FOR-A Pages: 72

TWR-SB0410-36EVB

Brand: NXP Semiconductors Pages: 26

Brand: Conceptronic Pages: 230

Brand: TP-Link Pages: 2

Brand: Delta Electronics Pages: 1

Brand: TRENDnet Pages: 2

IE-SW-VL16-14TX-2SC

Brand: Weidmuller Pages: 17

Brand: Cypress Semiconductor Pages: 10

Barricade SMC7901WBRA2

Brand: SMC Networks Pages: 2

Brand: ZALMAN Pages: 4

Brand: Grizzly Pages: 9

Brand: Baicells Pages: 10

iTRON B 70.2040

Brand: JUMO Pages: 41

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands