Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Руководство администратора

Страница: 103 / 1026

Assigning a policy to a device links the device to that policy.
To assign an existing policy to the ISG2000 or ISG1000 device:
a. In Device Manager, right-click the ISG2000 or ISG1000 device and select Policy >
Assign Policy .
b. From the Security Policy Name list, select the security policy you just created.
2.
Validate the security policy (optional).
Validating a security policy can identify potential problems before you install it.
a. In the navigation tree, select Device Manager .
b. From the Device Manager launchpad, select Validate > Validate IDP Policy and
select the device. A Job Manager window displays job information and progress.
If NSM identifies a problem in the policy during policy validation, it displays
information about the problem at the bottom of the selected rulebase. For example,
if you included a non-IDP capable security device in the Install On column of an
IDP rule, policy validation displays a error message.
3.
Install the security policy.
During policy installation, NSM installs the entire security policy, including the firewall
and IDP rules, on the security devices you selected in the Install On column of each
rule.
To install a policy:
a. In the navigation tree, select Device Manager .
b. From the Device Manager launchpad, select Update Device .
c. Select the ISG2000 or ISG1000 security device.
d. Click OK . A Job Manager window displays job information and progress.
Reviewing IDP Logs
After you have enabled IDP on the device and installed a security policy that uses the
IDP detection and prevention functionality, IDP logs begin to appear in the NSM Log
Viewer (assuming you enabled IDP logging for each IDP rule). Depending on the attack
objects you included in the IDP rule, the IDP log entries you receive might provide details
of events such as attacks against your network, protocol anomalies, or even simple login
attempts.
To view IDP log entries:
1.
Go to the main navigation tree and expand the Investigate panel.
2.
Select Log Viewer > Predefined > 3-IDP/DI . The Log Viewer displays all IDP logs
generated by the security device.
53 Copyright © 2010, Juniper Networks, Inc.
Chapter 2: Planning Your Virtual Network