Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 105 / 1026

Simplifying Management
When you add devices to NSM, you are creating the network organization that you use
to manage your security system. Before you begin the device creation or device import
process however, first review your network topology and decide how you want it to appear
in NSM. This is particularly important when you are creating a new network, but is also
helpful when you are importing networks, because you might want to edit your network
design to take advantage of key NSM management features.
These features include:
• Using Device Groups on page 55
•
Using Device Templates on page 55
•
Using Configuration Groups on page 56
• Merging Policies on page 56
• Using a Naming Convention on page 56
Using Device Groups
You can create groups of devices to manage multiple devices at one time. Group your
device by region, device type, or even OS version, and then use the groups to:
•
Deploy new or updated device configurations to the entire device group.
•
Deploy new or updated policies to the entire device group.
• Create reports using the log information from the entire device group.
Using Device Templates
A template is a predefined device configuration that helps you reuse common information.
A domain can contain multiple templates, and you can use templates to quickly configure
and deploy multiple devices. A device template looks much like a device configuration—the
template page displays boxes for interfaces, zones, and virtual routers in which you can
enter values. When you add a new device that uses similar information as a previously
added device, you can use a device template to fill in specific configuration values so you
do not have to reenter information.
For example, you might create a generic NetScreen-5GT device template that you can
use each time you add a device of that type. Or you can apply multiple templates to the
same device. You can map a maximum of 63 templates to the same device; you set the
priority of the template to determine the order in which they applied.
For example, you might create the following templates:
•
DNS setting template
• Default PKI Settings template
• Authentication template
55 Copyright © 2010, Juniper Networks, Inc.
Chapter 2: Planning Your Virtual Network