Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 762 / 1026

Configuring the Profiler
To configure the Profiler, use the Profiler settings that are available on the device settings
in the Device Manager. From Device Manager, double-click on a device and select
IDP
Profiler Settings .
The IDP Profiler Settings dialog box appears with the General tab selected. After selecting
the device you want to use for profiling, you can then configure how that device collects
data from your internal network.
Table 84 on page 712 describes the Profiler settings that you can configure from the
General tab:
Table 84: General IDP Profiler Settings
Description Setting
Enables the IDP Profiler. Enable IDP Profiling
Enables the Profiler to collect and track application data. Enable Application Profiling
Enables the Profiler to collect and track specific probes and
attempts. Include Probe and Attempt
Enables the Profiler to perform Application Volume Tracking. Enable AVT
Enables the Profiler to collect and track data from external hosts. Include Non-tracked IP
Profiles
Maximum database size for the Profiler on each device. By default,
the maximum database size is 3 GB. db limit (in MB)
Enables the Profiler to perform passive OS fingerprinting to
determine the operating system of an end host.
Not applicable for ISG family devices with IDP.
Enable OS Fingerprinting
Time interval (in seconds) that the Profiler refreshes OS
fingerprinting. By default, the Profiler refreshes OS fingerprinting
data every 3600 seconds (60 minutes).
Not applicable for ISG family devices with IDP.
Refresh Interval (in secs)
If you enable AVT in the Profiler settings, you can view AVT reports on ISG devices running
ScreenOS 6.2 and later. From
My Reports
under the
Investigate
module, you can create
a new AVT report format with your defined settings.
The AVT feature is limited by its dependency on the NSM agent’s report delivery which
might be unreliable, affecting the accuracy of information. Also, the AVT feature displays
the cumulative count of all the traffic on a port, which could be over many sessions.
Copyright © 2010, Juniper Networks, Inc. 712
Network and Security Manager Administration Guide