Juniper NETWORK AND SECURITY MANAGER 2010.3, Administration Manual

Page: 511 / 1016

•
For Name, enter mcast1 .
• For Color, select green .
• For IP Address, enter 232.1.1.1 .
•
For Netmask, enter 16 .
•
In the main display area, click the Add icon and select Multicast Group. In the New
Multicast Group dialog box, configure the following then click
OK :
• For Name, enter mcast2 .
•
For Color, select red .
•
For IP Address, enter 232.1.1.2 .
• For Netmask, enter 16 .
NOTE: NSM validation prevents you from setting a 32 bit netmask in multicast.
• In the main navigation tree, select Policies , then create a new multicast rule in the
Multicast rulebase of a new or existing security policy.
•
Right-click in the Source Group column and select Configure Source/Destination .
Configuring Antivirus Rules
Antivirus settings are stored in a profile.
To assign an antivirus profile to a policy, do the following:
1.
Double-click the Rule Options cell in a rule.
2.
In the Configure Options dialog, click the Antivirus tab.
3.
Select an Antivirus option:
• None—Turns off antivirus scanning for that rule.
• Use External AV Server—Indicates that you want to use an External AV Server.
You must select the external AV server you wish to use.
• Use Scan Manager—Tells the device to use the settings on the device, instead of
a profile. Necessary for ScreenOS 5.0-5.2.
• Use Scan Manager with Profile—Tells the device to use the indicated antivirus
profile. Necessary for ScreenOS 5.3 and later.
• Use ICAP Profile —Tells the device to use the indicted ICAP AV profile. Available
with ScreenOS 5.4 and later.
461 Copyright © 2010, Juniper Networks, Inc.
Chapter 9: Configuring Security Policies