1. NMS Case Study-I NetScreen Global Manager CS720H

2. What is NetScreen-100 Firewall –packet filters, Proxy servers,dynamic circuit-level packet filters VPN –Conforms to the IPsec and IKE protocol –DES, Triple-DES encryption and MD5 authentication Traffic control with real-time monitoring –Traffic monitoring and prioritization management –Event logging and alerting –DMZ Server load balancing Transparent & NAT –Virtual Server & Masquerade Easy management –CLI, SNMP, BUI, Central Manager

3. Network Configuration

4. Back and Front View

5. Global Manager(GM) Managing, configuring and monitoring Netscreen Devices from a Central Location Securing NetScreen- Global Manager communications

6. GM Function (1) Runs on a Windows NT –MS-windows GUI Viewing Network Topology –Add, Delete and Group devices –Organize network topology tree Configuring Netscreen Devices –Periodic “ Alive ” packet receive –Manage a maximum of 1000 devices

7. Reporting Netscreen Device Activities –Network Activity –Resource (CPU, flash card, memory) usage –Event log –Summary Storing Netscreen device information –Make a copy of the configuration information for each device Communicating on the network(proprietary) –TCP: exchange critical information –UDP: used for reporting Allowing GM through the firewall GM Function (2)

8. Navigating the Interface One-to-one mapping between BUI and GUI for configure, admin, policy, VPN, Virtual IP, Address, Service, Schedule and Users

9. Navigating the Interface File –Import, Export, Exit View –Toolbar, Status Bar, Properties Device –New Device, Modify Device, Delete Device –New Group, Rename Group, Delete Group Configure –Same as BUI Action –New Item, Modify Item, Delete Item, Reload Data –Reset Device, Stop Operation Report –Report Viewer Storage –View Files, Copy, Rename, Delete –Import Configuration, Export Configuration Help

10. Test Bed Configuration

11. Test Bed Operation Mode Transparent No access policy Most firewall settings done Built-in user database No static routing entry Enable untrusted side logon