-
Juniper Networks V10000 - page 1
IMPLEMENT A TION GUIDE Copyright © 2010 , Juniper Networks, Inc. 1 J U N I P E R N E TW O R K S S R X S E R I E S S E R V I C E S G A T E W A Y S / W E B S E N S E V 1 0 0 0 0 S RX S eri es Co n fi g ura t io n t o E na bl e Se c ur ity So l ut ion s wit h T R I T ON Although Junip er Netwo rks ha s attem pted to prov ide accurate informatio n in ...
-
Juniper Networks V10000 - page 2
2 Copyright © 2010 , Juniper Networks, Inc. IMPLEMENT A TION GUIDE - Juniper Network s SRX Series Services Ga tew ays/W ebsense V10000 T able of C ontents I n t r o d u c t i o n ...................................................................................................... 3 S c o p e ....................................................... ...
-
Juniper Networks V10000 - page 3
Copyright © 2010 , Juniper Networks, Inc. 3 IMPLEMENT A TION GUIDE - Juniper Netw orks SRX S eries Service s Gate way s/W ebsense V10000 Introduction A pow erful new par adigm of Interne t-enabl ed rel ationships is transforming business es across the gl obe. Companies that embra ce “W eb 2.0” t echnol ogies empow er eff ective and l asting co ...
-
Juniper Networks V10000 - page 4
4 Copyright © 2010 , Juniper Networks, Inc. IMPLEMENT A TION GUIDE - Juniper Network s SRX Series Services Ga tew ays/W ebsense V10000 Figure 2 ill ustra tes the l adder diagram for user tr affic all ow ed by the W ebsense V10000. The V10000 pr oxie s the traffic betw een the user and the Interne t via the V10000 P1 port. The pro xied traffic is i ...
-
Juniper Networks V10000 - page 5
Copyright © 2010 , Juniper Networks, Inc. 5 IMPLEMENT A TION GUIDE - Juniper Netw orks SRX S eries Service s Gate way s/W ebsense V10000 Prot ocol Opera tion The W ebsense V10000 product us es T CP port 15871. This port service is used t o insert an alert pl aced in-stre am with the W eb brow ser, thereb y redire cting the W eb bro wser t o a “B ...
-
Juniper Networks V10000 - page 6
6 C opyright © 2010, Juniper Network s, Inc. IMPLEMENT A TION GUIDE - Juniper Network s SRX Series Services Ga tew ays/W ebsense V10000 Implement ation T asks The SRX Series a dministrat or needs to perform the f ollowing c onfigur ation step s that are specific t o cre ating an end- to-end sol ution with the W ebsense V10000 applianc e. 1. Cre at ...
-
Juniper Networks V10000 - page 7
Copyright © 2010 , Juniper Networks, Inc. 7 IMPLEMENT A TION GUIDE - Juniper Netw orks SRX S eries Service s Gate way s/W ebsense V10000 Junos OS c ould aut omatically c onfigure all 10 steps describe d in the previous sec tion using the foll owing SRX Series configur ation. [edit] admin@SRX# show groups websense { apply-macro V10000-alpha { c-por ...
-
Juniper Networks V10000 - page 8
8 C opyright © 2010 , Juniper Netw orks, Inc. IMPLEMENT A TION GUIDE - Juniper Network s SRX Series Services Ga tew ays/W ebsense V10000 2. Creat e a FBF that is used t o redir ect specific tr affic from the User LAN t o the V10000 P1 port. This technique r equires a f orwarding-ba sed routing-instanc e that has a single ne xt-hop r oute t o the V ...
-
Juniper Networks V10000 - page 9
Copyright © 2010 , Juniper Networks, Inc. 9 IMPLEMENT A TION GUIDE - Juniper Netw orks SRX S eries Service s Gate way s/W ebsense V10000 admin@SRX# show interfaces ge-0/0/1 description “To User LAN network”; unit 0 { family inet { address 192.168.5.1/24; } } admin@SRX# show security zones security-zone user-lan { address-book { address local-h ...
-
Juniper Networks V10000 - page 10
10 Copyright © 2010 , Juniper Netw orks, Inc. IMPLEMENT A TION GUIDE - Juniper Network s SRX Series Services Ga tew ays/W ebsense V10000 6. Add a sec urity policy from user -lan to public -inet. This st ep is nece ssary to all ow traffic t o the Interne t that does not need t o be proce ssed by the W ebsense V10000. admin@SRX# show security polici ...
-
Juniper Networks V10000 - page 11
Copyright © 2010 , Juniper Networks, Inc. 11 IMPLEMENT A TION GUIDE - Juniper Netw orks SRX S eries Service s Gate way s/W ebsense V10000 8. Cr eat e a W ebsense-specific security applica tion definition for the W ebsense redire ct prot ocol — T CP / 15871. admin@SRX# show applications application webs-redirect { protocol tcp; destination-port 1 ...
-
Juniper Networks V10000 - page 12
12 C opyright © 2010, Juniper Network s, Inc. IMPLEMENT A TION GUIDE - Juniper Netw orks SRX S eries Service s Gate way s/W ebsense V10000 80100 75 -001-EN Aug 2010 Cop yri ght 2010 Jun ipe r Net wor ks , Inc . All ri ght s res er ved . Jun ipe r Net wor ks , the J unip er N etw ork s logo , Jun os, Net Scr een , and S cree nOS ar e reg iste red t ...
Juniper Networks V10000についてご質問がありますか?
次のフォームを使用してください
見つけた説明書を読んでもJuniper Networks V10000の問題を解決できない場合、下記のフォームを使用して質問をしましょう。ユーザーのどなたかがJuniper Networks V10000で同様の問題を抱えていた場合、その解決方法を共有したいと考えるかもしれません。