To configure a wildcard mask, follow the procedure for adding a network address object.
In the
Network
dialog box, select
Use Wildcard Mask
. You can then add or edit the
Wildcard
Mask
field. If you are configuring wildcard masking on a new device, verify that the device
update and Delta Config Summary operations are successful.
NOTE:
When a firewall policy with network address objects is applied to Junos devices,
the device update operation in NSM fails, because DMI devices do not support network
address objects.
Editing and Deleting Address Objects
To edit an address object, right-click on the object and select
Edit
. To delete as address
object, right-click on the object and select
Delete
. For more information on editing and
deleting address objects, refer to the NSM Online Help.
Replacing Address Objects
To replace an address object, right-click on the object to be replaced and select
Replace
With
. Replacing address objects simplifies making repeated changes to an address object
that is referenced in multiple security policies. If you have permission to view global
domain objects for the objects you are replacing, then all objects for the selected category
in the current domain and the global domain are displayed in the Replace With wizard,
but the object to be replaced is not displayed. When you replace address objects, keep
the following in mind:
•
There is no validation check when replacing address objects.
•
You cannot undo or roll back a Replace With operation.
NOTE:
Replacing address objects only affects objects in your current working domain.
After replacing address objects, it is good practice to check your security policies for any
errors that may result. You can always edit or remove any duplicate objects in the security
policy.
Adding an Address Object Group
To simplify security policies, you can combine multiple address objects in an address
object group. An address object group can contain address objects (and other address
object groups) from the current subdomain and the global domain.
To add an Address Object Group:
1.
In the navigation tree, select
Address Objects
. The address object tree appears.
2.
In the main display area, click the Add icon and select
Group
.
3.
Enter a unique name for the group.
325
Copyright © 2010, Juniper Networks, Inc.
Chapter 8: Configuring Objects
Содержание NETWORK AND SECURITY MANAGER 2010.3
Страница 6: ...Copyright 2010 Juniper Networks Inc vi...
Страница 36: ...Copyright 2010 Juniper Networks Inc xxxvi Network and Security Manager Administration Guide...
Страница 52: ...Copyright 2010 Juniper Networks Inc 2 Network and Security Manager Administration Guide...
Страница 90: ...Copyright 2010 Juniper Networks Inc 40 Network and Security Manager Administration Guide...
Страница 144: ...Copyright 2010 Juniper Networks Inc 94 Network and Security Manager Administration Guide...
Страница 146: ...Copyright 2010 Juniper Networks Inc 96 Network and Security Manager Administration Guide...
Страница 234: ...Copyright 2010 Juniper Networks Inc 184 Network and Security Manager Administration Guide...
Страница 310: ...Copyright 2010 Juniper Networks Inc 260 Network and Security Manager Administration Guide...
Страница 364: ...Copyright 2010 Juniper Networks Inc 314 Network and Security Manager Administration Guide...
Страница 366: ...Copyright 2010 Juniper Networks Inc 316 Network and Security Manager Administration Guide...
Страница 478: ...Copyright 2010 Juniper Networks Inc 428 Network and Security Manager Administration Guide...
Страница 576: ...Copyright 2010 Juniper Networks Inc 526 Network and Security Manager Administration Guide...
Страница 580: ...Copyright 2010 Juniper Networks Inc 530 Network and Security Manager Administration Guide...
Страница 592: ...Copyright 2010 Juniper Networks Inc 542 Network and Security Manager Administration Guide...
Страница 684: ...Copyright 2010 Juniper Networks Inc 634 Network and Security Manager Administration Guide...
Страница 690: ...Copyright 2010 Juniper Networks Inc 640 Network and Security Manager Administration Guide...
Страница 696: ...Copyright 2010 Juniper Networks Inc 646 Network and Security Manager Administration Guide...
Страница 698: ...Copyright 2010 Juniper Networks Inc 648 Network and Security Manager Administration Guide...
Страница 748: ...Copyright 2010 Juniper Networks Inc 698 Network and Security Manager Administration Guide...
Страница 778: ...Copyright 2010 Juniper Networks Inc 728 Network and Security Manager Administration Guide...
Страница 870: ...Copyright 2010 Juniper Networks Inc 820 Network and Security Manager Administration Guide...
Страница 872: ...Copyright 2010 Juniper Networks Inc 822 Network and Security Manager Administration Guide...
Страница 898: ...Copyright 2010 Juniper Networks Inc 848 Network and Security Manager Administration Guide...
Страница 908: ...Copyright 2010 Juniper Networks Inc 858 Network and Security Manager Administration Guide...
Страница 910: ...Copyright 2010 Juniper Networks Inc 860 Network and Security Manager Administration Guide...
Страница 995: ...PART 6 Index Index on page 947 945 Copyright 2010 Juniper Networks Inc...
Страница 996: ...Copyright 2010 Juniper Networks Inc 946 Network and Security Manager Administration Guide...