Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Руководство администратора

Страница: 564 / 1026

NOTE: Additionally, NSM must reset the policy during an import when the
security policy exists on the device, but does not exist in the management
system.
After the updated has completed, close the Job Manager window. The rules in the policy
become active on the devices you selected in the Install On column of the rule. To see
the exact rules that were applied to a specific device, in Device Manager, right-click a
device and select
Policy > View Pending Device Policy .
Updating Only the IDP Rulebases on ISG Devices
On ISG devices with IDP, you can elect to push only the IDP rulebases, not the entire
policy.
To push only the IDP rulebases, not the firewall or multicast rulebases, select the Update
IDP Rulebase Only check box in the Update Device Options dialog box.
The IDP-on-ISG rulebases are as follows:
• IDP
• Backdoor
•
Exempt
Managing Rules and Policies
Managing rules and policies for multiple security devices can seem daunting at first. Take
some time to carefully design your policies to make them efficient.
•
Helpful Tips on page 514
•
Selecting Rules on page 515
• Editing Rule Order on page 515
• Using Cut, Copy, and Paste on Rules on page 515
•
Deleting a Rule on page 517
•
Disabling a Rule on page 517
• Using Rule Groups on page 517
• Reimporting Devices and Security Policies on page 518
•
Merging Policies on page 518
•
Importing SRX Series Devices That Contain Inactive Policies on page 520
• Exporting Policies on page 520
Helpful Tips
Some helpful tips about managing your rules and policies:
Copyright © 2010, Juniper Networks, Inc. 514
Network and Security Manager Administration Guide