Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 517 / 1026

In this example, you define a multicast rule that permits IGMP messages from the Trust
zone to the Untrust zone. You specify the original multicast group address object and a
different destination multicast group object.
1.
In the main navigation tree, select Object Manager > Address Objects .
2.
In the main display area, click the Add icon and select Multicast Group . In the New
Multicast Group dialog box, configure the following then click OK :
•
For Name, enter mcast1 .
• For Color, select green .
• For IP Address, enter 232.1.1.1 .
•
For Netmask, enter 16 .
•
In the main display area, click the Add icon and select Multicast Group. In the New
Multicast Group dialog box, configure the following then click
OK :
• For Name, enter mcast2 .
•
For Color, select red .
•
For IP Address, enter 232.1.1.2 .
• For Netmask, enter 16 .
NOTE: NSM validation prevents you from setting a 32 bit netmask in
multicast.
• In the main navigation tree, select Policies , then create a new multicast rule in the
Multicast rulebase of a new or existing security policy.
•
Right-click in the Source Group column and select Configure Source/Destination .
Configuring Antivirus Rules
Antivirus settings are stored in a profile.
To assign an antivirus profile to a policy, do the following:
1.
Double-click the Rule Options cell in a rule.
2.
In the Configure Options dialog, click the Antivirus tab.
3.
Select an Antivirus option:
•
None—Turns off antivirus scanning for that rule.
• Use External AV Server—Indicates that you want to use an External AV Server. You
must select the external AV server you wish to use.
467 Copyright © 2010, Juniper Networks, Inc.
Chapter 9: Configuring Security Policies