Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 438 / 1026

Table 39: Service Table Tab Information
Name of the service object Name
Type of the service object: service or group Type
Service timeout—inactivity timeout after a which a session on a security
device is removed Timeout
Classification based on the purpose the service is designed for:
• email—used for sending and receiving e-mail (POP3, for example)
•
info seeking—used to retrieve specific information from a server (DNS, for
example)
• remote—used for accessing remote servers (Telnet, for example)
•
security—enable the access of a remote server securely using well known
security mechanisms (HTTPS for example)
• other— all other services
Category
The TCP and UDP source port for the service. This column displays a list of
IP protocols. Non-ICMP Src
Port
The TCP and UDP destination port for the service. This column displays a
list of IP protocols. Non-ICMP Dst
Port
Contains optional comments. Comment
To view service object properties, double-click a service object. In addition to the service
name, category, and service timeout value, you can view the following service settings:
• For Non-ICMP services, the service object displays the protocol ID, source port range,
and destination port range.
•
For ICMP services, the General tab displays the Internet Control Message Protocol
(ICMP) type and code.
• For Sun-RPC services, the Sun-RPC tab displays the Sun Microsystems program
identifiers. Sun Remote Procedure Call (Sun-RPC), also known as Open Network
Computing (ONC) RPC, enables a program running on one host to call procedures in
a program running on another host. Because of the large number of RPC services and
the need to broadcast, the transport address of an RPC service is dynamically
negotiated based on the service’s program number and version number. Several binding
protocols are defined for mapping the RPC program number and version number to a
transport address.
NOTE: The transport address is comprised of the port number of the server,
the program ID, and the version number.
NSM and security devices support 13 Sun-RPC predefined services. To permit or deny
all Sun-RPC requests, include the Sun-RPC-Any service in a firewall or IDP rule; to
Copyright © 2010, Juniper Networks, Inc. 388
Network and Security Manager Administration Guide