[j-nsp] NSM, IDP200 and SRX240

Glenn Krutsinger GKrutsinger at us.ci.org
Fri Jun 4 15:04:08 EDT 2010


Be wary of how you configure logging on the IDP as it can really hammer your NSM server, both in CPU and log volume. We pointed our IDP to a SEIM system (e.g. Qradar, STRM, etc). for log collection and analysis.

SRX management doesn't seem to be that resource intensive in NSM, I think 2008 cannot support the schemas for the newer firewalls and OS.


-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Crist Clark
Sent: Friday, June 04, 2010 11:26 AM
To: juniper-nsp at punk.nether.net
Subject: [j-nsp] NSM, IDP200 and SRX240

I was told by a reseller that I would not be able to
manage our existing IDP200 and a new SRX240 using the
same NSM. I know I can't do it using the NSM version
we are running, 2008.1r1, but from the 2010.2
documentation, it looks like it can manage both devices.

Are there some limitations to managing an IDP200 and
SRX240 from one NSM 2010.2 installation? Or might he
have been referring to some "gotcha" in the NSM upgrade
path from 2008.1r1 to 2010.2 that would stop us from
wanting to move the IDP200 off of the existing NSM
installation?




_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp





More information about the juniper-nsp mailing list