Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 131 / 1026

Table 16: Predefined NSM Administrator Activities (continued)
Description Task Function
Group expressions allow the system administrator to set conditions for
authentication requirements for external users stored on a RADIUS server. Create
Delete
Edit
View
Group Expressions
GPRS Tunneling Protocol (GTP) objects applied to a security policy rule
enable a security device to manage GTP traffic. If a GTP packet matches
the rule, the device attempts to further match the packet data with the
parameters set in the GTP object. Create
Delete
Edit
View
GTP Objects
Enables the system administrator to configure HA parameters for the
GUI server. N/A HA for guiSvrClusterMgr
A historical log report is a report generated using historical log entries. If
an administrator can view historical log reports, then that administrator
can also view shared historical log reports and their definitions. View Historical Log Reports
An ICAP object defines a server or server group to act as an ICAP AV
server. Create
Delete
Edit
View
ICAP Objects
Enables a system manager to create, delete, edit, or view IDP devices. Create
Delete
Edit
View
IDP
Enables a system administrator to run the IDP Cluster Monitor and monitor
IDP clusters. View IDP Cluster Monitor
N/A IDP Migration
This activity enables an administrator to view the Profiler. IDP Profiler Operations
This activity enables an administrator to manage the IDP Rulebase within
a security policy. Rules configured in this rulebase are supported only on
IDP capable devices, such as the ISG2000, ISG1000 running 5.0–IDP1,
SRX Series, J Series, and MX Series. Create
Edit
View
IDP Rulebase
Allows an administrator to import device information to NSM from the
device, including Inventory information. Import Device
81 Copyright © 2010, Juniper Networks, Inc.
Chapter 3: Configuring Role-Based Administration