Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 133 / 1026

Table 16: Predefined NSM Administrator Activities (continued)
Description Task Function
Allows an administrator to configure network honeypot rules that mimic
seemingly vulnerable counterfeit ports to entrap would be attackers. Create
Edit
View
Network Honeypot Rulebase
NSRP Monitor tracks NSRP statistics. To enable NSM to track these
statistics, you must enable “NSRP Monitor” in the NSRP properties for
each cluster device. View NSRP Monitor
Allows an administrator to manage permitted objects. You configure
permitted objects in Profiler consisting of source ID, destination, and
service. These objects define what you should see on the network, rather
than using attack objects which define what you do not want to see. Create
Delete
Edit
View
Permitted Objects
Allows an administrator to manage custom IKE phase 1 and phase 2
proposals, Create
Delete
Edit
View
Phase1/Phase2 Proposal
Allows an administrator to manage custom objects added to a Policy
table. Create
Delete
Edit
View
Policy Custom Field Data
Objects
Allows an administrator to manage metadata used in defining custom
Policy objects. Create
Delete
Edit
View
Policy Custom Field Metadata
Objects
Modify Policy Lookup Table
Allows an administrator to create polymorphic address objects.
Polymorphic objects can be used as place holders for values that will be
defined in a different context (in a regional server domain or subdomain,
for instance). Create Polymorphic Address Objects
Allows an administrator to create polymorphic service objects.
Polymorphic objects can be used as place holders for values that will be
defined in a different context (in a regional server domain or subdomain,
for instance). Create Polymorphic Service Objects
83 Copyright © 2010, Juniper Networks, Inc.
Chapter 3: Configuring Role-Based Administration