Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 385 / 1026

•
To configure a recurrent schedule, select Recurrent , and click the Add icon. In the
Recurrent Schedule dialog box, select the day of the week and specify the hour and
minutes for Start 1 and Stop 1.
To specify a second recurring time interval on the same day, specify the hour and minutes
for Start 2 and Stop 2. For example, Business Hours Schedule (8:00 to 12:00 and 13:00
to 17:00 every weekday).
Configuring Access Profile Objects
An access profile consists of a set of attributes that defines access to a device. You can
configure multiple profiles and multiple clients for each profile. You can use Object
Manager to configure access profile objects. Access profile objects can then be shared
across security policies that are assigned to J Series Services Routers and SRX Series
Services Gateways managed by NSM. NSM does not provide predefined access profile
objects, and you must create an access profile object before you can use it in security
policies.
To view all objects, select Access Profiles in the navigation tree. The Object Manager
displays all the access profiles configured in NSM. Access profiles are listed in a table
consisting of the following columns:
• Name—Name of the access profile.
• Comment—Description of the access profile.
You can create, view, edit, or delete access profile objects in the Object Manager. You
can also perform a Find Usages operation, and view the version history of an access
profile. For details on creating an access profile, see the
Junos System Basics Configuration
Guide .
NOTE: The access profile object is not supported on ScreenOS devices. When
a security policy using an access profile is assigned to a ScreenOS device,
the access profile settings will be removed before the security policy is
updated.
Configuring Quality of Service Profiles
On SSG Series Secure Services Gateways running ScreenOS 6.3 and later, you can define
Quality of Service (QoS) profiles as objects under the Object Manager. These profiles
can be either IP precedence profiles or Differentiated Services Code Point (DSCP) profiles.
For a DSCP QoS profile, the six most significant bits in the ToS field of the IP packet are
used to match entries; for an IP precedence QoS profile, only the three most significant
bits in the ToS field are used.
335 Copyright © 2010, Juniper Networks, Inc.
Chapter 8: Configuring Objects