Juniper NETWORK AND SECURITY MANAGER, Руководство пользователя

Страница: 283 / 340

Configuring Sensors (NSM Procedure)
The IDP sensor is a powerful tool to counter users who initiate attacks. Integration with
the Secure Access device allows you to configure automatic responses as well as manually
monitor and manage users.
To configure IDP sensors:
1.
In the NSM navigation tree, select Device Manager > Devices . Click the Device Tree
tab, and then double-click the Secure Access device for which you want to configure
sensors.
2.
Click the Configuration tab, and select System > Configuration > Sensors . The
corresponding workspace appears.
3.
Add or modify settings as specified in Table 77 on page 265.
4.
Click one:
• OK —Saves the changes.
•
Cancel —Cancels the modification.
Table 77: Configuring IDP Sensor Details
Your Action Function Option
Sensors tab
Enter the name. Specifies the name that the Secure
Access device uses to identify the
new connection entry. Name
Enter the hostname or IP address. Specifies the hostname or IP
address of the IDP sensor to which
the Secure Access device connects
to receive application and resource
attack alert messages. Hostname
Enter the port. Specifies the TCP port on the IDP
sensor to which the Secure Access
device listens when receiving
application and resource attack
alert messages. TCP Port
Enter the encrypted Secure Access
device OTP password as displayed on
the IDP ACM configuration summary
screen. Specifies the encrypted password
the Secure Access device uses
when conducting the initial
Transport Layer Security (TLS)
handshake with the IDP sensor. One Time
Password
Enter the IP addresses. Allows you to specify individual IP
addresses and address ranges the
IDP sensor monitors for potential
attacks, one entry per line. IDP
reports attack information only for
the IP addresses that you specify. Addresses to
monitor > New
Addresses to
monitor
265 Copyright © 2010, Juniper Networks, Inc.
Chapter 17: Configuring Secure Access System Management Features