User manual JUNIPER NETWORKS NETWORK AND SECURITY MANAGER NSMXPRESS SERIES II QUICK START REV1

[. . . ] Network and Security Manager NSMXpress Series II Quick Start November 17, 2010 Revision 1 NSMXpress Series II is an appliance version of Network and Security Manager (NSM). NSMXpress Series II simplifies the complexity of network administration by providing a single, integrated management interface that controls device parameters. This robust hardware management system installs in minutes with full high availability (HA) support, making it easy to scale and deploy. Enterprise customers with limited resources can benefit significantly from NSMXpress Series II because it eliminates the need to have dedicated resources for maintaining a network and security management solution. [. . . ] Select the SNMP Traps tab, which is shown in Figure 35 on page 31. Figure 35: Configuring SNMP Traps 3. In the Manager IP field, enter the IP address of the SNMP management server. Select from the following trap conditions: · Disk space low Enter the percentage of free disk space below which SNMP issues a trap. · Memory low Enter the percentage of free memory below which SNMP issues a trap. · CPU high Enter the percentage of CPU use over which SNMP issues a trap. · · · NSM start/stop Admin Logon/Logoff External IP unreachable Enter the IP address of the required device. 5. Click Save. Copyright © 2010, Juniper Networks, Inc. 31 NSMXpress Quick Start Forwarding Syslog Messages NSMXpress Series II provides a simple mechanism for configuring syslog messaging between the NSMXpress Series II appliance and a syslog receiver running rsyslog, syslog-NG, or basic syslog. This mechanism simplifies choosing syslog receivers, data sources of the messages you want to log, and the message transport used. For the type of message transport, you can choose among TCP, SSL, and UDP. SSL adds security to TCP; if you select SSL, NSMXpress Series II creates a secure tunnel to the syslog receiver. The following sections provide procedures for managing syslog message forwarding: · · · · Viewing Syslog Receivers on page 32 Adding and Configuring Syslog Receivers on page 33 Editing Syslog Receiver Configurations on page 35 Deleting Syslog Receivers on page 35 Viewing Syslog Receivers To view the syslog receivers configured on your NSMXpress Series II appliance, follow these steps: 1. Select System Administration > Syslog Forwarding. Figure 36 on page 34 shows an example. 32 Copyright © 2010, Juniper Networks, Inc. Managing System Administration 2. View the configured syslog receivers in the table in the top portion of the window. Table 4 on page 33 describes the fields. Table 4: Viewing Syslog Receivers Field Receiver Description A name provided by the network administrator to identify the syslog receiver The IP address of the syslog receiver The protocol used for forwarding messages: UDP, TCP, SSL The data sources configured for forwarding The system logs configured to be sent to this receiver. The HA Server logs configured to be sent to this receiver. IP Address Type Data sources System Device Server GUI Server HA Server Adding and Configuring Syslog Receivers To add and configure a syslog receiver, follow these steps: 1. Select System Administration > Syslog Forwarding. 2. In the Data Sources section, select the syslog facility for each GUI Server log, Device Server log, and HA Server log. The syslog facility is a field included in the syslog message to help identify the data source. 3. Click Add new Receiver. The syslog receiver configuration window appears as shown in Figure 36 on page 34. Copyright © 2010, Juniper Networks, Inc. 33 NSMXpress Quick Start Figure 36: Configuring a Syslog Receiver 5. This is the name that the syslog receiver will be known by within NSM. 6. In the Transport field, select the type of syslog receiver: · · Select UDP for basic syslog implementations. Select TCP for rsyslog or syslog-NG implementations. 34 Copyright © 2010, Juniper Networks, Inc. Managing System Administration · Select SSL to create a secure tunnel to a syslog receiver in rsyslog or syslog-NG implementations. In the System Logs section of the Data Sources table, select the sources of data from which system messages will be forwarded to the syslog receiver. These sources can include NSMXpress Series II system messages, package updates, and mail logs. In the NSM section of the Data sources table, select each GUI Server log, Device Server log, and HA Server log to be forwarded to the syslog receiver. · · 8. Click Save to save and apply the configuration. Editing Syslog Receiver Configurations To edit a syslog receiver configuration, follow these steps: 1. Select System Administration > Syslog Forwarding. 2. In the Syslog Receivers window, click the name of the syslog receiver you want to edit. The syslog receiver configuration window appears for the selected receiver. 3. [. . . ] Describes how to use and configure key management features in the NSM. It provides conceptual information, suggested workflows, and examples. This guide is best used in conjunction with the NSM Online Help, which provides step-by-step instructions for performing management tasks in the NSM user interface (UI). This guide is intended for application administrators or those individuals responsible for owning the server and security infrastructure and configuring the product for multiuser systems. [. . . ]