Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Руководство администратора

Страница: 415 / 1026

From the resulting list of matching attack objects, you can then exclude any attack objects
that produces false positives on your network, or an attack object that detects an attack
to which your network is not vulnerable.
NOTE: A dynamic group cannot contain another group (predefined, static,
or dynamic). However, you can include a dynamic group as a member of a
static group.
Example: Creating a Dynamic Group
To create a dynamic group:
1.
In the Custom Attack Groups tab, click the Add icon, and select Add Dynamic Group .
The New Dynamic Group dialog box appears.
2.
Enter a name and description for the group. Select a color for the group icon.
Figure 78: New Dynamic Group
3.
In the Filters tab, click the Add icon and add the filters that determine which attack
objects should be in the group:
a. Add a Products filter to add attack objects that detect attacks against all Microsoft
Windows operating systems.
b. Add a Severity filter to add attack objects that have a severity level of critical or
major.
IDP automatically applies all filters to the entire attack object database, identifies
the attack objects that meet the defined criteria, and adds the matching objects
as members of the group.
365 Copyright © 2010, Juniper Networks, Inc.
Chapter 8: Configuring Objects