Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 294 / 1026

1.
Ensure that you have configured the device correctly, created and assigned a policy
to the device, and established a connection between the device and the management
server.
2.
From the Device Manager launchpad, select Update Device . The launchpad displays
the Update Device(s) dialog box.
All connected and managed devices appear in the device list. Modeled devices and
devices awaiting import for the first time do not appear.
3.
Select the devices or device groups you want to update and click Apply Changes .
NSM updates the selected devices or device groups with the modeled configuration.
NOTE: For IDP devices, the firmware version on the IDP device must match
the version recorded in NSM, or the update will fail and the Config state of
the device will change to "OS Version Adjustment needed". This situation
can happen if the device firmware is upgraded from outside of NSM without
importing the new configuration into NSM.
NSM uses centralized control and tracking to indicate when you need to update a device,
and to follow the progress of the device configuration you are updating. Before updating
your managed devices, you can use other NSM modules and tools to identify devices
that need to be updated, validate their modeled configurations, and preview how those
devices accept the new configuration. After updating, you can use the same tools to
verify a successful update. These tools include:
•
Audit Log Viewer—This NSM module records changes made to a device configuration.
The audit log entry also identifies the administrator who performed the change, shows
when the change was updated on the device, and provides a history of change details.
• Report Manager—This NSM module collects data from traffic logs on various events
that occur over your network and provides a visual representation of them. You can
customize reports to display and filter parameters.
• Configuration Summaries—These tools provide a preview of the modeled configuration,
enabling you to compare it with the configuration that is running on the device. Use
configuration summaries to ensure the modeled configuration is consistent with what
you want to update on the device.
• Job Manager—This NSM module tracks the status of running and completed update
processes. The Job Manager displays details of the update process in a dedicated
information window and includes the update’s success or failure and errors involved
in a failed update.
How the Update Process Works
The managed device is functioning normally. You have successfully added the device to
NSM, reviewed the device configuration, and updated the device. An event occurs on the
managed device that requires a change to the device configuration. For example, malicious
traffic might have entered your network, requiring you to update the security policy for
the device to detect and prevent that attack.
Copyright © 2010, Juniper Networks, Inc. 244
Network and Security Manager Administration Guide