The Juniper JSA3800 is a high-performance security appliance that combines advanced threat detection and prevention capabilities with comprehensive network security features. It utilizes machine learning and artificial intelligence to deliver real-time threat detection and automated incident response. The JSA3800 provides visibility and control across your entire network, including encrypted traffic, and offers a range of security features such as stateful firewall, intrusion prevention system (IPS), advanced malware protection, and unified threat management.
The Juniper JSA3800 is a high-performance security appliance that combines advanced threat detection and prevention capabilities with comprehensive network security features. It utilizes machine learning and artificial intelligence to deliver real-time threat detection and automated incident response. The JSA3800 provides visibility and control across your entire network, including encrypted traffic, and offers a range of security features such as stateful firewall, intrusion prevention system (IPS), advanced malware protection, and unified threat management.
Juniper Secure Analycs Risk Manager:
Adobe Flash End of Life and Changes to
Conguraon Source Management (CSM)
Published
2021-05-24
RELEASE
7.4.2
Juniper Networks, Inc.
1133 Innovaon Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respecve owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publicaon without noce.
Juniper Secure Analycs Risk Manager: Adobe Flash End of Life and Changes to Conguraon Source Management
(CSM)
7.4.2
Copyright © 2021 Juniper Networks, Inc. All rights reserved.
The informaon in this document is current as of the date on the tle page.
YEAR 2000 NOTICE
Juniper Networks hardware and soware products are Year 2000 compliant. Junos OS has no known me-related
limitaons through the year 2038. However, the NTP applicaon is known to have some diculty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentaon consists of (or is intended for use
with) Juniper Networks soware. Use of such soware is subject to the terms and condions of the End User License
Agreement ("EULA") posted at hps://support.juniper.net/support/eula/. By downloading, installing or using such
soware, you agree to the terms and condions of that EULA.
ii
About This Guide
Use this guide to understand how you can manage your device conguraons aer 31 December 2020
due to Adobe Flash end of life (EOL) issues.
iv
Adobe Flash End of Life and Changes to
Conguraon Source Management (CSM)
IN THIS SECTION
Product Versions | 2
How to Idenfy the Issue | 3
Locang the Conguraon Monitor | 3
Administrators with JSA Risk Manager appliances in their deployment are being alerted to changes in
Conguraon Source Manager due to the approaching end of life of Adobe Flash. Due to removal of
Adobe Flash, the Conguraon Source Management (CSM) funconality is integrated in to the
Conguraon Monitor. The updated Conguraon Monitor interface is available to administrators who
upgrade their JSA deployment in upcoming x pack releases.
JSA Risk Manager administrators are being alerted to an upcoming user interface change to the
Conguraon Source Management (CSM) component. Due to the End of Life (EOL) announcement for
Adobe Flash, JSA Risk Manager has deprecated the default Conguraon Source Management interface
and integrated device backup and conguraon funconality in to the Conguraon Monitor. The
Conguraon Monitor interface includes the same device backup funconality, but was developed
without Adobe Flash to ensure that administrators can comply with Adobe's 31 December 2020 end of
life announcement. Administrators who are in corporate environments who are required to remove
Adobe Flash can discuss upgrades to a JSA release that includes the updates to the Conguraon
Monitor. All created schedules (Scheduled Discovery, jobs) are automacally moved from the legacy
Admin tab Conguraon Source Management interface to the Conguraon Monitor on the Risks tab
aer you upgrade.
Product Versions
The following releases integrate scheduling and device conguraons on the Risks tab in to the
Conguraon Monitor:
•JSA 7.4.1 x pack 1 and later
•JSA 7.3.3 x pack 5 and later
2
How to Idenfy the Issue
A noce is displayed in the Conguraon Source Management component to advise administrators that
the Conguraon Source Management is deprecated. Administrators who see this informaon message
can upgrade to a JSA release that includes the Conguraon Monitor to avoid interrupons with device
conguraons aer 31 December 2020 due to Adobe Flash end of life (EOL) issues.
Figure 1: Legacy Conguraon Source Management User Interface for Adobe Flash.
Figure 2: Browsers Which Block Adobe Flash by Default do not Display the Conguraon Source
Management User Interface.
Locang the Conguraon Monitor
JSA 7.4.1 x pack 1 and JSA 7.3.3 x pack 5 updates move the funconality of discovery, backups,
credenals and scheduled to the Risks tab. Administrators can use the Conguraon Monitor to make
changes to their devices aer an upgrade to the JSA deployment. The funconality between
3
Conguraon Source Manager and the Conguraon Monitor is idencal and the Conguraon Monitor
does not include dependencies on Adobe Flash.
1. Log in to JSA.
2. Click the Risks tab.
3. In the Risk Manager pane, click Conguraon Monitor.
Figure 3: Locaon of the Conguraon Monitor on the Risks Tab.
4. Use the Conguraon Monitor to manage your devices.
Schedules and Device Backups
Schedules Conguraon for JSA Risk Manager allows administrators to dene backup jobs or device
discovery in the Conguraon Monitor. Schedules are now setup using the Conguraon Monitor.
Devices can be added to the schedule and a trigger denes the me and recurrence for the backup or
4
device discovery, which can occur either once, daily, weekly, monthly, or dened as a cron job
expression.
Figure 4: Schedules are Now Dened in the Conguraon Monitor for the Risk Manager Versions
Dened in this Technical Note.
1. Click the Risks tab.
2. Expand the Conguraon Monitor and select Schedules.
3. On the Scheduled page, click Add to create a new schedule or select and exisng schedule and click
Edit.
4. Type a unique Name for the schedule.
5. Select a Group from the drop-down list or type a new Group name.
6. Select a schedule type:
Opon Descripon
Backup Backup schedules allow users to collect device conguraon changes from
discovered network devices.
Discovery Updates the telemetry (neighbor) informaon for devices and adds newly discovered
network devices.
NOTE: If a discovery schedule exists, you must select Backup. You cannot change the Type
of an exisng schedule.
5
7. If you are creang a discovery schedule and want to add newly discovered devices to a product,
select Crawl.
8. If you are creang a backup schedule, click Edit and add or remove devices to be targeted for
backup. Then perform one of the following acons.
9. Use the arrows to move devices from the Available Devices list to the Selected Devices list.
10. Select Search to congure a search to dynamically target devices based on IP address, operang
system, model, or hostname.
TIP: You can search for Admin or Interface IP addresses with a comma-separated list of IP
addresses or CIDR ranges.
11. Select a Trigger to specify the frequency you want the schedule to run.
• Once
• Daily
• Weekly
• Monthly
• Cron
6
NOTE: Cron expressions that repeat more than once per hour are not accepted.
12. Click Save.
Device Discovery
Device Discovery is now located in the Conguraon Monitor on the Risks tab for the JSA Risk Manager
versions discussed in this technical note. Device Discovery streamlines adding network devices through
network management appliances, such as Check Point Management Servers, Palo Alto Panorama,
Juniper NSM, or by crawling the network with SNMP for discoverable IP addresses. The Device
Discovery funcons in JSA Risk Manager allow users to set up mulple networks and run discovery to
automacally add new rewalls, IPS, and other network devices so they can be backed up and added to
7
the Topology. It is important that administrators do not add overlapping address ranges or CIDR
addresses when discovering devices to prevent duplicates.
Figure 5: Device Discovery in the Conguraon Monitor Displays the Status or Logs for Added
Devices.
Credenals
Device credenals can be added to access and download the conguraon of devices such as rewalls,
routers, switches, or IPSs in the Conguraon Monitor on the Risks tab. Administrators can add
8
credenals for individual devices or for mulple network devices that use the same credenals and
priorize the credenal order JSA Risk Manager uses to back up network device conguraons.
Figure 6: Device Credenals can be Added in the Conguraon Monitor.
Conguring Protocols
JSA Risk Manager users can dene the protocol, port, and other details required to communicate to a set
of network devices. You can assign devices to network groups, which allows you to group together
protocol sets and address sets for your devices.
1. On the Risk tab, click Conguraon Monitor.
2. In the navigaon menu, click Protocols.
3. Select Add from the toolbar.
4. Type a Name for the protocol set.
9
5. In the Address Sets secon, click Add.
6. In the Add Address eld, type the IP address or CIDR range that you want to apply to the network
group, then click OK.
TIP: You can use IP4 or IP6 address or CIDR ranges.
7. Select the check box for each protocol you want to enable.
TIP: Select a protocol and click Increase Priority or Decrease Priority to adjust the order you
want the protocols to be used.
8. Select a protocol to congure its relevant properes. You can congure the following values for the
protocol parameters:
Protocol Parameter descripon
SSH Congure the following parameters:
•Port- Type the port on which you want the SSH protocol to use when
communicang with and backing up network devices. The default SSH protocol port
is 22.
•Version- Select the version of SSH that you want this network group to use when
communicang with network devices. The available opons are as follows:
•Auto- This opon automacally detects the SSH version to use when
communicang with network devices.
a. Use SSH-1 when communicang with network devices.
b. Use SSH-2 when communicang with network devices.
Telnet Type the port number you want the Telnet protocol to use when communicang with
and backing up network devices. The default Telnet protocol port is 23.
HTTPS Type the port number you want the HTTPS protocol to use when communicang with
and backing up network devices. The default HTTPS protocol port is 443.
10
(Connued)
Protocol Parameter descripon
HTTP Type the port number you want the HTTP protocol to use when communicang with
and backing up network devices. The default HTTP protocol port is 80.
SCP Type the port number you want the SCP protocol to use when communicang with and
backing up network devices. The default SCP protocol port is 22.
SFTP Type the port number you want the SFTP protocol to use when communicang with
and backing up network devices. The default SFTP protocol port is 22.
FTP Type the port number you want the FTP protocol to use when communicang with and
backing up network devices. The default SFTP protocol port is 22.
TFTP The TFTP protocol does not have any congurable opons.
SNMP Congure the following parameters:
•Port - Type the port number you want the SNMP protocol to use when
communicate with and backing up network devices.
•Timeout(ms) - Select the amount of me, in milliseconds, that you want to use to
determine a communicaon meout.
•Retries - Select the number of mes you want to aempt to retry communicaons
to a device.
•Version - Select the version of SNMP you want to use for communicaons. The
opons are v1, v2, or v3.
•V3 Authencaon - Select the algorithm you want to use to authencate SNMP
traps.
•V3 Encrypon - Select the protocol you want to use to decrypt SNMP traps.
9. Click Save.
11
TIP: Aer you create your protocol sets, select a protocol set and click Increase Priority or
Decrease Priority to adjust the order you want the protocol sets to be checked.
12
-
1
-
2
-
3
-
4
-
5
-
6
-
7
-
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
Juniper JSA3800 User guide
- Type
- User guide
- This manual is also suitable for
The Juniper JSA3800 is a high-performance security appliance that combines advanced threat detection and prevention capabilities with comprehensive network security features. It utilizes machine learning and artificial intelligence to deliver real-time threat detection and automated incident response. The JSA3800 provides visibility and control across your entire network, including encrypted traffic, and offers a range of security features such as stateful firewall, intrusion prevention system (IPS), advanced malware protection, and unified threat management.
Ask a question and I''ll find the answer in the document
Finding information in a document is now easier with AI
Related papers
Other documents
-
Dell OpenManage Network Manager Owner's manual
-
-
-
-
-
-
-
-
Dell W-Airwave User guide