Juniper JSA3500, Руководство по оборудованию

Страница: 110 / 154

Table 26: Network Hierarchy (continued)
Weight Color IP/CIDR Value Name Description
50 #000099 0.0.0.1/32 Internal Example for DMZ
For more information, see the Juniper Secure Analytics Administration Guide .
The following sections explain how to set your network before you install the JSA software:
•
Identifying Network Settings on page 94
•
Identifying Security Monitoring Devices and Flow Data Sources on page 94
• Identifying Network Assets on page 95
Identifying Network Settings
Before you install Juniper Secure Analytics (JSA), you must have the following information
for each system you want to install:
NOTE: When you configure the network setting such as hostname and IP
address using the qchange_netsetup script, the JSA appliance hangs while
rebooting. This issue is seen in 2013.2.r3.607582 and it will be fixed in the
future releases. You need to manually power cycle the JSA appliance to
overcome this issue.
•
Hostname
• IP address
• Network mask address
•
Subnet mask
•
Default gateway
• Primary DNS server
• Secondary DNS server (optional)
•
Public IP address for networks using Network Address Translation (NAT)
•
E-mail server
• NTP server (Console only) or Time server
Identifying Security Monitoring Devices and Flow Data Sources
Juniper Secure Analytics (JSA) can collect and correlate events received from external
sources such as security equipment (for example, firewalls, VPNs, or IDSs) and host or
application security logs, such as Windows logs. Device Support Modules (DSMs) and
Flow Collectors allow you to integrate JSA with this external data. JSA automatically
discovers sensor devices that are sending system log (syslog) messages to an Event
Collector. The sensor devices that are automatically discovered by JSA appear in the
Copyright © 2018, Juniper Networks, Inc. 94
Juniper Secure Analytics Hardware Guide