Juniper

JunOS M/MX

Remove Access

Verifier

Server Decommission

Impact Analysis
Verifier
Authorization and documentation

Rule Recertification

Update metadata

JunOS SRX

Access Requests

Manual target selection
Device object selection

Modify Group

Designer
Syntax-based change
Provisioning
Provisioning in automatic step
Create/modify group

Add Access

Risk Analysis
Designer
Verifier
Syntax-based change instructions
Provisioning
Provisioning in automatic step
Authorization and documentation
Auto close

Remove Access

Verifier

Server Decommission

Impact Analysis
Designer
Provisioning
Verifier
Authorization and documentation

Rule Decommission

Designer
Provisioning
Provisioning in automatic step
Verifier
Authorization and documentation
Auto close

Rule Modification Device object selection (object browser)
Provisioning
Syntax-based commands

Rule Recertification

Update metadata

Notes for JunOS SRX

  • In a Rule Modification workflow there is no zone validation for Juniper SRX devices. While it is possible for a request to include adding objects from address books or adding zones to rules on other zones, validation will fail on provisioning.

  • Rule Modification supports provisioning in auto-step.

  • Modify Group is only supported if the device is configured with a Global Address Book.

  • Designer gives priority to service objects that have a default timeout set in the firewall.

NetScreen

Access Requests

Manual target selection
Device object selection

Modify Group

Create/modify group

Add Access

Risk Analysis
Designer
Verifier
Syntax-based change instructions
Authorization and documentation
Auto close

Remove Access

Verifier

Server Decommission

Impact Analysis
Verifier

Rule Recertification

Update metadata

NSM

Access Requests

Manual target selection
Device object selection

Modify Group

Create/modify group

Add Access

Risk Analysis
Verifier
Authorization and documentation
Auto close

Remove Access

Verifier

Server Decommission

Impact Analysis
Verifier

Rule Recertification

Update metadata