Creating a Topology Model
SUMMARY You can create a network model based on a series of modifications that can be combined and configured. By creating a network model, you can determine the effect of configuration changes on your network by using a simulation.
- Click the Risks tab.
- On the navigation menu, click Simulation > Topology Models
- From the Actions menu, select New.
- In the What do you want to name this model field, type a name for the model definition.
- In the Which modifications do you want to apply to your model pane, select the modifications that you want to apply to the topology to create your model.
- Configure the tests added to the Configure model as follows
pane.
The following table describes the test names and parameters that you can configure.
Table 1: Configuring Topology Tests Test Name Parameters A rule is added to the selected devices that allows connections from source CIDRs to destination CIDRs on protocols, ports Configure the following parameters:
devices - Specify the devices that you want to add to this rule. In the Customize Parameter window, select the All checkbox to include all devices, or you can search devices by using one of the following search criteria:
IP/CIDR - Select the IP/CIDR option and specify the IP address or CIDR that you want to add this rule to.
Hostname - Select the Hostname option and specify the hostname that you want to filter. To search for multiple hostnames, use a wildcard character (*) at the beginning or end of the string.
Adapter - Select the Adapter option and use the menu to filter the device list by adapter.
Vendor - Select the Vendor option and use the menu to filter the device list by vendor. You can also specify a model for the vendor. To search for multiple models, use a wildcard character (*) at the beginning or end of the string.
allows | denies - Select the condition (accept or denied) for connections that you want this test to apply.
CIDRs - Select any source IP addresses or CIDR ranges that you want to add to this rule.
CIDRs - Select any destination IP addresses or CIDR ranges that you want to add to this rule.
protocols - Specify the protocols that you want to add to this rule. To include all protocols, select the All checkbox.
ports - Specify the ports that you want to add to this rule. To include all ports, select the All checkbox.
A rule is added to the selected IPS devices that allows connections from source CIDRs to destination CIDRs with vulnerabilities Configure the following parameters:
IPS devices - Specify the IPS devices that you want this topology model to include. To include all IPS devices, select the All checkbox.
allows | denies - Specify the condition (accept or denied) for connections that you want this test to apply.
CIDRs - Specify any source IP addresses or CIDR ranges that you want this topology model to include.
CIDRs - Specify any destination IP addresses or CIDR ranges that you want this topology model to include.
vulnerabilities - Specify the vulnerabilities that you want to apply to the topology model. You can search for vulnerabilities by using the Bugtraq ID, OSVDB ID, CVE ID, or title.
The following assets allow connections to the selected ports Configure the following parameters:
Assets - Specify the assets that you want this topology model to include.
allow | deny - Specify the condition (allow or deny) for connections that you want this topology model to apply. The default is allow.
ports - Specify the ports that you want this topology model to include. To include all ports, select the All checkbox.
Assets in the following asset building blocks allow connections to ports Configure the following parameters:
Assets building blocks - Specify the building blocks that you want this topology model to include.
allow | deny - Specify the condition (allow or deny) that you want this topology model to apply. The default is allow.
ports - Specify the ports that you want this topology model to include. To include all ports, select the All checkbox.
- When the test is displayed in the pane, the configurable parameters are underlined. Click each parameter to further configure this modification for your model. In the groups area, select the checkbox to assign groups to this question.
- Click Save Model.