Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 570 / 1026

Figure 85: Security Policy B Rules (Before Policy Merge)
To merge Policy A (from policy) with Policy B (to policy), from the file menu, select Tools
> Policy Merge Tool and configure the merge.
NSM copies all rules from Policy A and pastes them above the rules in Policy B. Next,
NSM merges the matching values in the columns to create a single, simplified policy
(Policy C), shown in Figure 86 on page 520.
Figure 86: Security Policy Rules (Merged from Policy A and Policy B)
Importing SRX Series Devices That Contain Inactive Policies
When NSM imports an SRX Series device that contains an inactive policy, the inactive
policy configuration is imported into the NSM device configuration table (device obj), as
occurs in the case of in-device policy management. In addition, the inactive policies are
not displayed on the UI when the device is in central policy manager mode. All shared
objects that are used in the inactive policies are imported into their respective shared
objects table. Consequently, if the shared object (that is used in the inactive policy) is
edited or deleted, the changes are updated to the device on next update.
NOTE: Re-importing an SRX Series device that contains inactive policies
does not create duplicates of the shared objects that are included in the
inactive policies in NSM.
Exporting Policies
You can export a security policy rulebase to an HTML file.
To export a security policy, select File > Export Policy . (You can also use the button or
Alt-E.) In the Export Policy dialog box, select from the following options:
Copyright © 2010, Juniper Networks, Inc. 520
Network and Security Manager Administration Guide