Configuring Zone Objects for vGW Series Interoperability with SRX Series Devices

To create a new SRX Series zone object, using the vGW Security Design VM interface:

  1. Select the Settings module.
    1. In the Security Settings box on the left pane, select SRX Zones.
    2. Click the Add button on the lower right side of the page.

      The Add SRX Zone dialog box appears.

    3. Specify the following information for the SRX Series zone in the Add SRX Zone pane:
      • Name–A short descriptive name for the SRX Series zone object. This name is used in VM zone labels.
      • Host–Device management IP address on the SRX Series device used to connect to the vGW Security Design VM.
      • Port–TCP port used to connect to the SRX Series device through the Junoscript interface.
      • Login and Password–Credentials used to authenticate to the SRX Series device.

        The account for the SRX Series zone object requires read access to the SRX Series device’s zones, interface, network, and routing configuration. Optionally, it requires write access to the Address Book for each zone to populate it with VM entries.

        If you do not want the system to enter VM objects in the SRX Series device’s address book, you do not need to provide write access.

      • VMs associated with this SRX–This optional parameter specifies the VMs scope. It can be a smart group that defines VMs that are relevant to the SRX Series device.
  2. Define synchronization intervals and relevant interfaces, by clicking Load Zones after you save the SRX Series zone object definition.

After the zone synchronization process has completed, a list of zones that the vGW Series retrieved appears. You can select the zones to import into the vGW Series as VM zone groupings.

You can configure zone synchronization to automatically poll the SRX Series device for zone updates.

To configure the vGW Series automatic zone synchronization process to control synchronization update, specify the following information:

SRX Series zones that participate in the synchronization process are automatically created in the vGW Series as VM Smart Groups. A Smart Group is created based on the following parameters:

If the zone synchronization configuration includes a VM associated selection, the group you select is included in the Smart Group Definition.

Related Documentation