Help Center User GuideGetting StartedFAQRelease Notes
 
X
User Guide
Getting Started
FAQ
Release Notes
Contents  

Creating a Security Profile

Procedure

To distribute security resources across logical systems, you can create security profiles that specify the type and amount of resources to be allocated to a logical system. You can create security profile and bind it to more than one logical systems, if you want to allocate the same type and amount of resources to them.

When a device is discovered in Security Director for the first time, you can see the list of security profiles, if any, while creating a logical system. Alternatively, you can create security profiles in Security Director.

To create a security profile:

  1. Select Devices > Security Devices.

    The Security Devices page is displayed.

  2. Select a root device and click Create Logical System.

    The Create Logical System (LSYS) page is displayed.

  3. Click Add Bulk LSYS.

    The Add Bulk Logical System (LSYS) page is displayed.

  4. Under Security Profiles, click the + icon.

    The Create Security Profile page is displayed.

  5. Complete the configuration according to the guidelines given in Table 84.
  6. Click Save.

    The Job Details page is displayed with the status of update security profile job. If the job is successful, the security profile is created.

Table 84: Security Profile

Parameters

Description

General Settings

Security Profile Name

Enter a valid unique name. The name must contain only letters and numbers. Note that the security profile name must be unique for the selected root device.

Resource Allocation

Select the type of resource and allocate the reserved and maximum value for the selected resource.

Each security profile contains resources with a range based on the devices. You can manage the resources by allocating reserved and maximum values.

Reserved

It guarantees that the specified resource amount is always available to the logical system. If a reserved quota is not configured for a resource, the default value is 0.

Maximum

If a logical system requires more resource than its reserved amount allows, it can utilize resources configured for the global maximum amount if they are available—if they are not allocated to other logical systems. The maximum allowed quota specifies the portion of the free global resources that the logical system can use. The maximum allowed quota does not guarantee that the amount specified for the resource in the security profile is available.

If a maximum allowed quota is not configured for a resource, the global system quota for the resource is used as a default value. Global system quotas are platform-dependent.

Related Documentation

Ask questions in TechWiki

Check documentation in TechLibrary

Rating by you:      
X

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:
Email:

Need product assistance? Contact Juniper Support

Submit