Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 576 / 1026

The Comparing — Database Snapshots window appears. The window lists changes
for all user visible objects from older database versions to the current version. In the
left pane, under Snapshot Diff Tree, the coloring over items indicates that the listed
database version (SOSS, IDP-1, JS-1, and so on) is changed (yellow), added (green),
or deleted (pink).
4.
Click on a listed database to display detailed information about that version.
For more information about the types of displayed data, see “Introduction to Network
and Security Manager” on page 3 and the
Network and Security Manager Configuring
ScreenOS and IDP Devices Guide .
5.
When you are finished reviewing data about the different versions, click Close on the
window to return to the main GUI page.
Update Device with an Older Database Version
This section explains how to use the NSM GUI to update a single device with an older
database snapshot. This action returns the device configuration to the earlier configuration
associated with the older database.
To update the device:
1.
Select Configure > Device Manager > Devices .
2.
Under the Device Tree tab, right-click on a listed device.
3.
In the popup menu, select View Versions .
The Version History window appears.
4.
Select the older database version in the window and click Update Device .
5.
When the Update Device prompt appears, click Yes to change the version.
The Job Information window appears indicating “Successful Completion.”
6.
Click Close in the Job Information and Version History windows to end the operation.
If you right-click on the device, the Version History window lists the newly updated
Current version and the previous version.
Pre and Post Rules
In NSM, a policy supports many kinds of rulebases. Each rulebase is an ordered list of
rules. Prerule and postrule lists are also ordered lists of rules that are defined from the
Central Manager at the global domain and subdomain levels as well as on regional servers
in standalone NSM installations. You can define and apply rules for each rulebase type.
When you update a device, device-specific policy configurations are generated for the
device. This creates rulebases by applying the following rules in the following order (from
first to last):
•
Prerules
•
Policy rulebase rules
Copyright © 2010, Juniper Networks, Inc. 526
Network and Security Manager Administration Guide