Juniper JSA3500, Руководство по оборудованию

Страница: 109 / 154

•
Mozilla Firefox - 10.0 ESR and 17.0 ESR
NOTE: Due to Mozilla’s short release cycle, we cannot commit to testing
on the latest versions of the Mozilla Firefox web browser. However, we are
fully committed to investigating any issues that are reported.
Related
Documentation
JSA Components on page 91
•
•
Preparing the Network Hierarchy on page 93
•
Identifying Network Settings on page 113
•
Identifying Security Monitoring Devices and Flow Data Sources on page 114
•
Identifying Network Assets on page 114
Preparing the Network Hierarchy
Juniper Secure Analytics (JSA) uses the network hierarchy to understand your network
traffic and provides you with the ability to view network activity for your entire deployment.
JSA supports any network hierarchy that can be defined by a range of IP addresses.
You can create your network based on many different variables, including geographical
or business units. For example, your network hierarchy might include corporate IP address
ranges (internal or external), physical departments or areas, mail servers, and webservers.
Once you define the components you want to add to your network hierarchy, you can
install JSA, and then configure the network hierarchy using the JSA interface. For each
component you want to add to the network hierarchy, use
Table 26 on page 93 to indicate
each component in your network map.
At a minimum, we recommend that you define objects in the network hierarchy for:
• Internal/external demilitarized zone (DMZ)
•
VPN
•
All internal IP address space (for example, 0.0.0.0/8)
• Proxy servers
• Network Address Translation (NAT) IP address range
•
Server network subnets
•
Voice-over-IP (VoIP) subnets
Table 26: Network Hierarchy
Weight Color IP/CIDR Value Name Description
50 #00FF33 0.0.0.5/32 NAT_Ranges Example for NAT
93 Copyright © 2018, Juniper Networks, Inc.
Chapter 15: Software Installation Overview