Juniper Networks IDP250 Centralized Management with NSM Overview, IDP On-BoxUtilities continued

IDP250 Installation Guide

Table 11: IDP On-Box Utilities (continued)

Software	Usage
idp.sh utility	You can use the idp.sh utility to start, stop, or get status information on
	appliance processes.
	For details, see the IDP Administration Guide.
sctop utility	You can use the sctop utility to monitor connection tables and view status.
	For details, see the IDP Administration Guide.
bypassStatus	You can use bypassStatus commands to display settings for the daemon
utility	that monitors traffic interface NIC state.
	For details, see the IDP Administration Guide.
IDP Reporter	You can use the IDP Reporter to view statistics on attacks IDP has detected
	and responded to, as well as application volume tracking (AVT) statistics.
	For details, see the IDP Reporter User’s Guide.

Centralized Management with NSM Overview

Juniper Networks Network and Security Manager (NSM) is a central management server capable of managing hundreds of IDP appliances and other Juniper Networks devices, such as ScreenOS firewalls, SA Series appliances, and IC Series appliances. You typically deploy NSM in a management subnet accessible to the NSM-managed devices.

Figure 9 on page 16 illustrates the flow of information between the tiers of the central management solution: the NSM user interface, the NSM server, and IDP appliances.

Figure 9: IDP-NSM Communication

The IDP configuration, security policies, attack objects, and log records are stored in NSM server databases and administered using the NSM user interface. Communication between the NSM server and IDP appliances, and between the NSM server and the NSM user interface, is encrypted and authenticated.

16■ Centralized Management with NSM Overview