Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 128 / 1026

Table 16: Predefined NSM Administrator Activities (continued)
Description Task Function
A Certificate Revocation List (CRL) identifies invalid certificates. You can
obtain a CRL file (
.crl ) from the CA that issued the local certification and
CA certificate for the device, and then use this file to create a Certificate
Revocation List object.
Create
Delete
Edit
View
CRLs
Enables add, delete, or viewing of custom troubleshooting commands
available through the Device Manager for troubleshooting devices. Custom
troubleshooting commands are in addition to the standard device
troubleshooting commands
debug , exec , and get .
Edit
View
Custom Troubleshoot
Commands
Known targets and sources of attacks or suspected targets and sources
of attacks can be added to source or destination watch lists. The
Dashboard is a near-real time monitor of watch lists of known targets
and sources of attacks and the top 10 attacks within the previous hour. View Dashboard
These activities allow an administrator to manage the database snapshot
feature that provides versioning of NSM objects, policies, and managed
devices. Create
Delete
Edit
View
Database Versions
Deep Inspection is a mechanism for filtering traffic that a security device
permits. You can enable Deep Inspection in firewall rules to examine
permitted traffic and take specific actions if the DI module finds matching
attack signatures or protocol anomalies.
This activity enables a system administrator to view or set the deep
inspection package that is loaded on the device.
Edit
View
Deep Inspection Pack
Selection
Device administrators have permissions to administer the devices through
the CLI or UI for the device itself. Importing a device administrator allows
that administrator to use the NSM UI. Import Device Admins
Allows you to perform Border Gateway routing Protocol (BGP) operations
on a device, such as connect or disconnect with a neighbor, or test the
TCP connection to a specific neighbor. N/A Device BGP Operations
A device certificate authenticates packets passing through a device. Generate and
Upload
Get
Delete
Device Certificates
Allows a system administrator to import a device configuration from a
file or export a device configuration to a file. Export
Import
Device Config To/From File
Copyright © 2010, Juniper Networks, Inc. 78
Network and Security Manager Administration Guide