Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Руководство администратора

Страница: 342 / 1026

•
To perform a network update, enter the URL of the Attack Object Database web
server in the Download URL box. To restore the default server, select
Restore
Defaults .
•
To perform a local update, specify the local directory path to the
.dat
file you
previously downloaded in the Download URL box. Example:
file:///tmp/NSM-SecurityUpdateInfo.dat
• To use a proxy server for attack object download, select the Enable Proxy check
box. Then, enter the proxy server IP address, port, user name, and password.
• For DI devices, click the + button to enter a DI license key and specify Deep Inspection
Packs.
5.
Select Tools > Update NSM Attack Database . The Update NSM Attack Database
dialog box appears.
6.
Follow the instructions in the Attack Update Manager to download the new Signature
and Protocol Anomaly Attack Objects to the NSM GUI Server.
After you have updated the attack object database on the GUI Server, you can use that
database to update the attack object database on your managed devices.
IDP attack objects are loaded automatically when you load an IDP rulebase. DI attack
objects must be loaded manually.
To load the attack object database update to your managed devices:
1.
From the Device Manager launchpad, select Security Updates> Update Device Attack
Database , or from Devices in the menu bar, select Deep Inspection/IDP> Update
Device Attack Database . The Update Device Attack Database dialog box appears.
2.
Click Next , then select the managed devices on which you want to install the attack
object update.
3.
Follow the directions in the Change Device Sigpack wizard to update the attack object
database on the selected managed devices.
Updating DI Attacks on ScreenOS 5.0 Devices
You can update attacks for ScreenOS 5.0 and earlier devices (not 5.0.0 IDP1) by
configuring your managed devices to contact the attack object database server, then
prompting the devices to download new attack objects from the server.
To configure the device to contact the attack object database server:
1.
In the main navigation tree, select Device Manager > Devices , and then double-click
the device for which you want to configure the database.
2.
In the device navigation tree, select Security > AttackDB > Settings .
3.
For Attack Database Server, enter
https://services.netscreen.com/restricted/sigupdates
Copyright © 2010, Juniper Networks, Inc. 292
Network and Security Manager Administration Guide