Juniper NETWORKS ATP Cloud-Based Threat Detection Software

Advanced Threat Prevention Cloud

MU TSOGOLO IZI
Gawo 1: Yambani | 1
Gawo 2: Mmwamba ndi Kuthamanga | 5
Gawo 3: Pitirizanibe | 14

Gawo 1: Yambani

M'GAWO INO

• Kumanani ndi Juniper ATP Cloud | 2
• Juniper ATP Cloud Topology | 2
• Pezani License Yanu ya Juniper ATP Cloud | 3
• Pezani SRX Series Firewall Yanu Yokonzeka Kugwira Ntchito ndi Juniper ATP Cloud | 3

Mu bukhuli, timapereka njira yosavuta, yamagulu atatu, kuti ikuthandizeni mwamsanga ndi Juniper Networks® Advanced Threat Prevention Cloud (Juniper ATP Cloud). Tafewetsa ndikufupikitsa machunidwe
ndikuphatikizanso makanema omwe amakuwonetsani momwe mungapezere laisensi ya ATP, momwe mungakhazikitsire ma SRX Series Firewalls a Juniper ATP Cloud, komanso momwe mungagwiritsire ntchito Mtambo wa Juniper ATP. Web Portal kuti mulembetse ma SRX Series Firewalls ndikusintha mfundo zoyambira zachitetezo.

Kumanani ndi Juniper ATP Cloud

Juniper ATP Cloud ndi pulogalamu yowunikira ziwopsezo zochokera pamtambo zomwe zimateteza onse omwe ali pamanetiweki anu kuti asawononge ziwopsezo zachitetezo. Juniper ATP Cloud imagwiritsa ntchito kusanthula kosasunthika komanso kosunthika komanso kuphunzira pamakina kuti izindikire mwachangu zowopseza zosadziwika, mwina zotsitsidwa kuchokera ku Web kapena kutumizidwa kudzera pa imelo. Zimapereka a file chigamulo ndi chiwopsezo ku SRX Series firewall yomwe imalepheretsa kuwopseza pa intaneti. Kuphatikiza apo, Juniper ATP Cloud imapereka zidziwitso zachitetezo (SecIntel) zomwe zimakhala ndi madera oyipa, URLs, ndi ma adilesi a IP osonkhanitsidwa kuchokera file kusanthula, kafukufuku wa Juniper Threat Labs, ndi zowopseza zowopsa za anthu ena. Zakudya izi zimasonkhanitsidwa ndikugawidwa ku zozimitsa moto za SRX Series kuti zitseke zolumikizirana ndi command-and-control (C&C).
Mukufuna kuwona momwe Juniper ATP Cloud imagwirira ntchito? Onerani tsopano:

Kanema: Juniper Network's Advanced Threat Prevention Cloud

Juniper ATP Cloud Topology
Nayi example za momwe mungatumizire Juniper ATP Cloud kuti muteteze omwe ali pamanetiweki anu ku zowopseza chitetezo.

Pezani License Yanu ya Juniper ATP Cloud

Zinthu zoyamba, choyamba. Muyenera kupeza chilolezo chanu cha Juniper ATP Cloud musanayambe kukonza Juniper ATP Cloud pa chipangizo chanu chowombera moto. Juniper ATP Cloud ili ndi magawo atatu a ntchito: zaulere, zoyambira, ndi zolipira. Layisensi yaulere imapereka magwiridwe antchito ochepa ndipo imaphatikizidwa ndi mapulogalamu oyambira. Lumikizanani ndi ofesi yanu yogulitsa kwanu kapena bwenzi la Juniper Networks kuti muyike oda ya Juniper ATP Cloud premium kapena layisensi yoyambira. Kuyitanitsa kukamalizidwa, nambala yotsegulira imatumizidwa kwa inu ndi imelo. Mugwiritsa ntchito nambala iyi molumikizana ndi nambala yanu ya siriyo ya SRX Series Firewall kuti mupange chiphaso chofunikira kapena chofunikira. (Gwiritsani ntchito chiwonetsero chachassis hardware CLI lamulo kuti mupeze nambala ya SRX Series Firewall).

Kuti mupeze chilolezo:

1. Pitani ku https://license.juniper.net ndikulowa ndi mbiri yanu ya Juniper Networks Customer Support Center (CSC).
2. Sankhani J Series Service Routers ndi SRX Series Devices kapena vSRX kuchokera pamndandanda wa Pangani License.
3. Pogwiritsa ntchito nambala yanu yololeza ndi nambala ya SRX Series, tsatirani malangizowa kuti mupange kiyi yanu yalayisensi.
   • Ngati mukugwiritsa ntchito Juniper ATP Cloud yokhala ndi SRX Series Firewalls, ndiye kuti simuyenera kuyika kiyi yalayisensi chifukwa imasamutsidwa yokha ku seva yamtambo. Zitha kutenga mpaka maola 24 kuti chilolezo chanu chitsegulidwe.
   • Ngati mukugwiritsa ntchito Juniper ATP Cloud yokhala ndi vSRX Virtual Firewall, chiphasocho sichimasamutsidwa chokha. Muyenera kukhazikitsa layisensi. Kuti mumve zambiri, onani License Management ndi vSRX Deployments. Chilolezo chikapangidwa ndikuyikidwa pa chipangizo china cha vSRX Virtual Firewall, gwiritsani ntchito layisensi yowonetsera CLI kuti view nambala ya pulogalamu ya chipangizocho.

Pezani SRX Series Firewall Yanu Yokonzeka Kugwira Ntchito ndi Juniper ATP Cloud
Mutalandira laisensi ya Juniper ATP Cloud, muyenera kukonza SRX Series Firewall yanu kuti mulankhule ndi Juniper ATP Cloud. Web Portal. Ndiye mutha kukonza ndondomeko pa SRX Series Firewall yomwe imagwiritsa ntchito Juniper ATP Cloud-based feed feeds zowopseza.

ZINDIKIRANI: Bukuli likuganiza kuti mumadziwa kale malamulo a Junos OS CLI ndi mawu, ndipo muli ndi chidziwitso pakuwongolera SRX Series Firewalls.

Musanayambe, onetsetsani kuti muli ndi SSH yolumikizidwa ndi intaneti ya SRX Series Firewall. Izi SRX Series Firewalls zimathandizira Juniper ATP Cloud:

• SRX300 mzere wa zida
• Mtengo wa SRX550M
• Mtengo wa SRX1500
• SRX4000 mzere wa zida
• SRX5000 mzere wa zida
• vSRX Virtual Firewall

ZINDIKIRANI: Kwa SRX340, SRX345, ndi SRX550M, monga gawo la kasinthidwe kachipangizo koyambirira, muyenera kuyendetsa njira yotumizira-chitetezo chopititsa patsogolo ntchito ndikuyambitsanso chipangizocho.

Tiyeni tiyambe ndikukonza zolumikizirana ndi chitetezo.

1. Khazikitsani kutsimikizika kwa mizu.
   user@host# set system root-authentication plain-text-password New password:
   Lembaninso mawu achinsinsi atsopano:
   ZINDIKIRANI: Mawu achinsinsi samawonetsedwa pazenera.
2. Khazikitsani dzina la hostname. user@host# set system host-name user@host.example.com
3. Konzani zolumikizirana. user@host# set interfaces ge-0/0/0 unit 0 family inet adilesi 192.0.2.1/24 user@host# set interfaces ge-0/0/1 unit 0 family inet adilesi 192.10.2.1/24
4. Konzani madera achitetezo.
   SRX Series Firewall ndi zone-based firewall. Muyenera kupatsa mawonekedwe aliwonse kudera kuti mudutse magalimoto. Kuti mukonze zone zachitetezo, lowetsani malamulo awa:
   ZINDIKIRANI: Pamalo osadalirika kapena chitetezo chamkati, yambitsani ntchito zofunidwa ndi zomangamanga pa ntchito iliyonse.
   user@host# khazikitsani madera otetezedwa-zone kusakhulupirika pa ge-0/0/0.0
   user@host# khazikitsani madera otetezedwa-zone trust interfaces ge-0/0/1.0
   user@host# set zones security-zone trust host-inbound-traffic system-services onse
   user@host# khazikitsani zone chitetezo-zone trust host-inbound-traffic protocol onse
5. 5. Konzani DNS.
   user@host# set system name-server 192.10.2.2
6. Konzani NTP.
   user@host# set system process ntp
   user@host# set system ntp boot-server 192.10.2.3 user@host# set system ntp server 192.10.2.3 user@host# commit

Pamwamba ndi Kuthamanga

M'GAWO INO

• Pangani a Web Akaunti Yolowera pa Portal ya Juniper ATP Cloud | 5
• Lembani SRX Series Firewall Yanu | 7
• Konzani Apolisi Otetezedwa pa SRX Series Firewall Kuti Mugwiritse Ntchito Cloud Feeds | 12

Pangani a Web Akaunti Yolowera pa Portal ya Juniper ATP Cloud
Tsopano popeza muli ndi SRX Series Firewall yokonzeka kugwira ntchito ndi Juniper ATP Cloud, tiyeni tilowe mu Juniper ATP Cloud. Web Portal ndikulembetsa SRX Series Firewall yanu. Muyenera kupanga Juniper ATP Cloud Web Akaunti yolowera pa portal, kenako lembani SRX Series Firewall yanu ku Juniper ATP Cloud Web Portal.
Khalani ndi chidziwitso chotsatira musanayambe kulembetsa:

• Kulowa kwanu kamodzi kapena Juniper Networks Customer Support Center (CSC).
•  Dzina lachitetezo. Za example, Juniper-Mktg-Sunnyvale. Mayina a dziko akhoza kukhala ndi zilembo za alphanumeric ndi chizindikiro cha mzera (“—”).
• Dzina la kampani yanu.
• Mauthenga anu.
• Adilesi ya imelo ndi mawu achinsinsi. Uwu udzakhala chidziwitso chanu cholowera kuti mupeze mawonekedwe a Juniper ATP Cloud management.

Tiyeni tizipita!

1. Tsegulani a Web osatsegula ndikulumikiza ku Juniper ATP Cloud Web Portal pa https://sky.junipersecurity.net. Sankhani dera lanu - North America, Canada, European Union, kapena Asia Pacific ndikudina Pitani.
Mukhozanso kulumikiza ku ATP Cloud Web Portal pogwiritsa ntchito kasitomala portal URL kwa malo anu monga momwe zilili pansipa.

Malo	Makasitomala Portal URL
United States	https://amer.sky.junipersecurity.net
mgwirizano wamayiko aku Ulaya	https://euapac.sky.junipersecurity.net
APAC	https://apac.sky.junipersecurity.net
Canada	https://canada.sky.junipersecurity.net

1. Tsamba lolowera likutsegulidwa.
2. Dinani Pangani Malo Otetezedwa.
3. Dinani Pitirizani.
4. Kuti mupange gawo lachitetezo, tsatirani wizard yomwe ili pazenera kuti mulowetse izi:
   • Maumboni anu olowa kapena Juniper Networks Customer Support Center (CSC).
   • Dzina lachitetezo
   • Dzina la kampani yanu
   • Mauthenga anu
   • Maumboni olowera kuti mulowe mu ATP Cloud
5. Dinani Chabwino.
   Mumalowetsamo ndikubwerera ku Juniper ATP Cloud Web Portal. Nthawi yotsatira mukadzayendera Mtambo wa Juniper ATP Web Portal, mutha kulowa pogwiritsa ntchito zidziwitso ndi chitetezo chomwe mwangopanga kumene.

Lembani Firewall Yanu ya SRX Series
Tsopano popeza mwapanga akaunti, tiyeni tilembetse SRX Series Firewall yanu ku Juniper ATP Cloud. Mu bukhuli, tikuwonetsani momwe mungalembetsere chipangizo chanu pogwiritsa ntchito Juniper ATP Cloud Web Portal yoyendetsedwa ndi Juniper. Komabe, mutha kulembetsanso chipangizo chanu pogwiritsa ntchito Junos OS CLI, J-Web Portal, kapena Junos Space Security Director Web Portal. Sankhani chida chosinthira chomwe chili choyenera kwa inu:

• Juniper ATP Cloud Web Portal - The ATP Cloud Web Portal imayendetsedwa ndi Juniper Networks mumtambo. Simufunikanso kutsitsa kapena kukhazikitsa Juniper ATP Cloud pamakina anu am'deralo.
• CLI imalamula-Kuyambira mu Junos OS Release 19.3R1, mutha kulembetsa chipangizo ku Juniper ATP Cloud pogwiritsa ntchito Junos OS CLI pa SRX Series Firewall yanu. Onani Kulembetsa Chipangizo cha SRX Series popanda Juniper ATP Cloud Web Portal.
• J-Web Portal - J-Web Portal imabwera yoyikiratu pa SRX Series Firewall ndipo itha kugwiritsidwanso ntchito kulembetsa SRX Series Firewall kupita ku Juniper ATP Cloud. Kuti mudziwe zambiri, onerani kanemayu:
  Video: ATP Cloud Web Chitetezo Pogwiritsa Ntchito J-Web
• Security Director Policy Enforcer-Ngati muli ndi chilolezo cha Junos Space Security Director Policy Enforcer wogwiritsa ntchito, mutha kugwiritsa ntchito Security Director Policy Enforcer kukhazikitsa ndikugwiritsa ntchito Juniper ATP Cloud. Kuti mumve zambiri zakugwiritsa ntchito Security Director ndi Juniper ATP Cloud, onani Momwe Mungalembetsere Zida Zanu za SRX Series mu Juniper Advanced Threat Prevention (ATP) Cloud Use Policy Enforcer.

Mukalembetsa SRX Series Firewall, mumakhazikitsa kulumikizana kotetezeka pakati pa Juniper ATP Cloud seva. Kulembetsanso:

• Tsitsani ndikuyika ziphaso za satifiketi (CA) pa SRX Series Firewall yanu
• Amapanga ziphaso zakomweko
• Amalembetsa masatifiketi am'deralo ndi seva yamtambo

ZINDIKIRANI: Juniper ATP Cloud imafuna kuti zonse ziwiri za Routing Engine (ndege yowongolera) ndi Packet Forwarding Engine (ndege ya data) zilumikizidwe pa intaneti. Simufunikanso kutsegula madoko aliwonse pa SRX Series Firewall kuti mulankhule ndi seva yamtambo. Komabe, ngati muli ndi chipangizo pakati, monga firewall, ndiye kuti chipangizocho chiyenera kukhala ndi madoko 80, 8080, ndi 443 otseguka.
Komanso, SRX Series Firewall iyenera kukhazikitsidwa ndi ma seva a DNS kuti athetse mtambo. URL.

Lowetsani Chipangizo Chanu cha SRX Series mu Juniper ATP Cloud Web Portal
Umu ndi momwe mungalembetsere SRX Series Firewall yanu mu Juniper ATP Cloud Web Portal:

1. Lowani ku Juniper ATP Cloud Web Portal.
   Tsamba la Dashboard likuwonekera.
2. Dinani Zida kuti mutsegule Tsamba la Zida Zolembetsa.
3. Dinani Lembetsani kuti mutsegule Tsamba Lolembetsa.
4. Kutengera mtundu wa Junos OS womwe mukuyendetsa, lembani lamulo la CLI kuchokera patsamba ndikuyendetsa lamulo pa SRX Series Firewall kuti mulembetse.
   ZINDIKIRANI: Muyenera kuyendetsa op url lamulo kuchokera kumachitidwe ogwirira ntchito. Akapangidwa, op url lamulo limagwira ntchito kwa masiku 7. Ngati mupanga op yatsopano url lamulo mkati mwa nthawi imeneyo, lamulo lakale silikugwiranso ntchito. (Op opangidwa posachedwa kwambiri url lamulo ndilovomerezeka.)
5. Lowani ku SRX Series Firewall yanu. SRX Series CLI imatsegulidwa pazenera lanu.
6. Thamangani op url lamulo lomwe mudakoperapo kale kuchokera pawindo la pop-up. Ingoyikani lamulolo mu CLI ndikudina Enter.
   SRX Series Firewall idzalumikizana ndi seva ya ATP Cloud ndikuyamba kutsitsa ndikuyendetsa zolemba za op. Mkhalidwe wa kulembetsa umawonekera pazenera.
7. (Ngati mukufuna) Thamangani lamulo ili kuti view Zina Zowonjezera:
   pemphani mautumiki apamwamba odana ndi pulogalamu yaumbanda diagnostics kasitomala-portal mwatsatanetsatane

Example
pemphani mautumiki apamwamba a anti-malware diagnostics amer.sky.junipersecurity.net mwatsatanetsatane
Mutha kugwiritsa ntchito mawonetsero apamwamba a anti-malware CLI lamulo pa SRX Series Firewall yanu kuti mutsimikizire kuti kulumikizana kwapangidwa ndi seva yamtambo kuchokera pa SRX Series Firewall. Ikalembetsa, SRX Series Firewall imalumikizana ndi mtambo kudzera pamalumikizidwe angapo, osakhazikika omwe amakhazikitsidwa panjira yotetezeka (TLS 1.2). SRX Series Firewall imatsimikiziridwa pogwiritsa ntchito satifiketi ya kasitomala wa SSL.

Lembani Chipangizo Chanu cha SRX Series mu J-Web Portal
Mutha kulembetsanso SRX Series Firewall ku Juniper ATP Cloud pogwiritsa ntchito J-Web. Izi ndi Web mawonekedwe omwe amabwera pa SRX Series Firewall.
Musanalembetse chipangizo:

• Sankhani dera lomwe mumapanga likhala chifukwa muyenera kusankha dera mukakonza malo.
• Onetsetsani kuti chipangizochi chalembetsedwa mu Juniper ATP Cloud Web Portal.
• Mumawonekedwe a CLI, konzani seti yotumizira-ndondomeko yopititsa patsogolo-ntchito-mode pa SRX300, SRX320, SRX340, SRX345, ndi SRX550M zida zanu kuti mutsegule madoko ndikukonzekera chipangizochi kuti chizitha kulumikizana ndi Juniper ATP Cloud.

Umu ndi momwe mungalembetsere SRX Series Firewall yanu pogwiritsa ntchito J-Web Portal.

1. Lowani ku J-Web. Kuti mudziwe zambiri, onani Start J-Web.
2. (Ngati mukufuna) Konzani proxy profile.
   a. Mu J-Web UI, yendani ku Chipangizo Chadongosolo> ATP Management> Kulembetsa. Tsamba la Kulembetsa kwa ATP limatsegulidwa.

b. Gwiritsani ntchito imodzi mwa njira zotsatirazi kuti mukonze proxy profile:

• Dinani Pangani Proxy kuti mupange proxy profile.
  Pangani Proxy Profile tsamba likuwonekera.
  Malizitsani kasinthidwe:
  • Profile Dzina—Lowetsani dzina la proxy profile.
  • Mtundu Wolumikizira-Sankhani mtundu wa seva yolumikizira (kuchokera pamndandanda) yomwe proxy profile amagwiritsa ntchito:
  • IP ya seva—Lowetsani adilesi ya IP ya seva yoyimira.
  • Dzina Lothandizira-Lowetsani dzina la seva yoyimira.
  • Nambala Yakudoko-Sankhani nambala ya doko ya woyimira projekitifile. Mulingo ndi 0 mpaka 65,535.

Lowetsani chipangizo chanu ku Juniper ATP Cloud.
a. Dinani Kulembetsa kuti mutsegule tsamba la Kulembetsa kwa ATP.

ZINDIKIRANI: Ngati pali kusintha komwe kulipo, uthenga umawonekera kuti musinthe ndikupitiriza kulembetsa.

Malizitsani kasinthidwe:

• Pangani New Realm-Mwachikhazikitso, njirayi imayimitsidwa ngati muli ndi Juniper ATP Cloud akaunti yokhala ndi layisensi yogwirizana nayo. Yambitsani njirayi kuti muwonjezere malo atsopano ngati mulibe Juniper ATP Cloud akaunti yokhala ndi chilolezo chogwirizana.
• Malo—Mwachisawawa, dera limayikidwa ngati Ena. Lowani m'derali URL.
• Imelo-Lowetsani imelo adilesi yanu.
• Achinsinsi—Lowetsani chingwe chapadera chosachepera zilembo zisanu ndi zitatu kutalika. Phatikizani zilembo zazikuluzikulu ndi zing'onozing'ono, nambala imodzi, komanso zilembo zina zapadera; palibe mipata yomwe imaloledwa, ndipo simungagwiritse ntchito mndandanda wa zilembo zomwe zili mu adilesi yanu ya imelo.
• Tsimikizirani Chinsinsi-Lowetsaninso mawu achinsinsi.
• Dziko - Lowetsani dzina lachitetezo. Ili liyenera kukhala dzina lofunikira ku bungwe lanu. Dzina la dera likhoza kukhala ndi zilembo za alphanumeric ndi chizindikiro cha dash. Likapangidwa, dzinali silingasinthidwe.

Dinani Chabwino.
Mkhalidwe wa kulembetsa kwa SRX Series Firewall ukuwonetsedwa.

Konzani Apolisi Otetezedwa pa SRX Series Firewall Kuti Mugwiritse Ntchito Cloud Feeds
Ndondomeko zachitetezo, monga anti-malware ndi chitetezo-intelligence mfundo, gwiritsani ntchito Juniper ATP Cloud kuwopseza kudyetsa files ndi anthu okhala kwaokha omwe adatsitsa pulogalamu yaumbanda. Tiyeni tipange mfundo zachitetezo, aamw-ndondomeko, ya SRX Series Firewall.

1. Konzani mfundo zotsutsana ndi pulogalamu yaumbanda.
   • user@host# khazikitsani ntchito zapamwamba zotsutsana ndi pulogalamu yaumbanda aamw-policy chigamulo-threshold 7
   • user@host# khazikitsani ntchito zapamwamba zotsutsana ndi pulogalamu yaumbanda aamw-policy http inspection-profile kusakhulupirika
   • user@host# khazikitsani malamulo odana ndi pulogalamu yaumbanda aamw-policy http chilolezo chochitira
   • user@host# khazikitsani malamulo odana ndi pulogalamu yaumbanda aamw-policy http notification log
   • user@host# khazikitsani ntchito zapamwamba zotsutsana ndi pulogalamu yaumbanda aamw-policy smtp inspection-profile kusakhulupirika
   • user@host# khazikitsani ntchito zothana ndi pulogalamu yaumbanda aamw-policy smtp notification log
   • user@host# khazikitsani ntchito zapamwamba zotsutsa pulogalamu yaumbanda aamw-policy imap inspection-profile kusakhulupirika
   • user@host# khazikitsani ntchito zapamwamba zotsutsa pulogalamu yaumbanda aamw-policy imap notification log
   • user@host# khazikitsani ndondomeko yolimbana ndi pulogalamu yaumbanda aamw-policy fallback-options notification log
   • user@host# khazikitsani ndondomeko zotsutsana ndi pulogalamu yaumbanda aamw-policy-notification log
   • user@host# perekani
2. (Ngati mukufuna) Konzani mawonekedwe odana ndi pulogalamu yaumbanda.
   Mawonekedwe a gwero amagwiritsidwa ntchito kutumiza files ku mtambo. Ngati mukonza magwero-mawonekedwe koma osati magwero, SRX Series Firewall imagwiritsa ntchito adilesi ya IP kuchokera pamawonekedwe omwe atchulidwa kuti alumikizike. Ngati mukugwiritsa ntchito njira yolowera, muyenera kukonza mawonekedwe amtundu wa anti-malware. Ngati mukugwiritsa ntchito njira yosasinthika, simukuyenera kumaliza izi pa SRX Series Firewall.
   user@host# khazikitsani ntchito zolimbana ndi pulogalamu yaumbanda yolumikizira gwero la ge-0/0/2
   ZINDIKIRANI: Kwa Junos OS Release 18.3R1 ndi pambuyo pake, tikupangira kuti mugwiritse ntchito chitsanzo cha kasamalidwe ka fxp0 (mawonekedwe odzipatulira a kasamalidwe ka injini ya chipangizochi) ndi chitsanzo chokhazikika cha magalimoto.
3. Konzani ndondomeko yachitetezo cha intelligence.
   • user@host# set services security-intelligence profile secintel_profile gulu CC
   • user@host# set services security-intelligence profile secintel_profile ulamuliro secintel_rule machesi chiwopsezo-level [7 8 9 10]
   • user@host# set services security-intelligence profile secintel_profile lamulirani secintel_rule ndiye kuti block block igwe
   • user@host# set services security-intelligence profile secintel_profile lamulirani secintel_rule ndiye lowani
     user@host# set services security-intelligence profile secintel_profile kusakhazikika-lamulo ndiye chilolezo chochita
   • user@host# set services security-intelligence profile secintel_profile default-lamulo ndiye lolemba
   • user@host# set services security-intelligence profile ine_profile gulu Infected-Hosts
   • user@host# set services security-intelligence profile ine_profile rule ih_rule match chiopsezo-level [ 10 ]
   • user@host# set services security-intelligence profile ine_profile lamulirani ih_rule ndiye kuti block block igwe
   • user@host# set services security-intelligence profile ine_profile lamulirani ih_rule ndiye lowani
   • user@host# set services security-intelligence policy secintel_policy Infected-Hosts ih_profile
   • user@host# set services security-intelligence policy secintel_policy CC secintel_profile
   • user@host# perekani
4. ZINDIKIRANI: Ngati mukufuna kuyang'ana kuchuluka kwa magalimoto a HTTPs, muyenera kusankha SSL-Proxy mundondomeko zanu zachitetezo. Kuti mukonze SSL-Proxy, onani Gawo 4 ndi Gawo 5.
   Kukonza izi kudzakhudza momwe magalimoto amayendera potsata ndondomeko zachitetezo zomwe zimagwiritsidwa ntchito.
   (Mwasankha) Pangani makiyi agulu/achinsinsi ndi ziphaso zodzisainira, ndikuyika satifiketi ya CA.
5. (Mwasankha) Konzani SSL forward proxy profile (Proxy ya SSL yopita patsogolo ndiyofunika pamayendedwe a HTTPS mundege ya data). user@host# set services ssl proxy profile ssl-yang'ana-profile-dut root-ca ssl-inspect-ca
   user@host# set services ssl proxy profile ssl-yang'ana-profile- Zochita zolimbitsa thupi zonse
   user@host# set services ssl proxy profile ssl-yang'ana-profile-dut zochita kunyalanyaza-server-auth-failure
   user@host# set services ssl proxy profile ssl-yang'ana-profile-dut trusted-ca onse
   user@host# perekani
6. Konzani ndondomeko ya chitetezo cha firewall.
   user@host# khazikitsani mfundo zachitetezo kuchokera ku zone trust to-zone kusakhulupirirana 1 match source-adilesi iliyonse
   user@host# khazikitsani mfundo zachitetezo kuchokera ku zone trust to-zone kusakhulupirika mfundo 1 yofanana ndi komwe mukupita-adilesi iliyonse
   user@host# khazikitsani mfundo zachitetezo kuchokera ku zone trust to-zone kusakhulupirirana 1 kugwiritsa ntchito kulikonse

Zabwino zonse! Mwamaliza kukonza koyambirira kwa Juniper ATP Cloud pa SRX Series Firewall yanu!

Pitiliranibe

M'GAWO INO

• Chotsatira Ndi Chiyani? | | 14
• Zambiri | 15
• Phunzirani ndi Makanema | 15

Chotsatira Ndi Chiyani?
Tsopano popeza muli ndi nzeru zoyambira zachitetezo komanso mfundo zotsutsana ndi pulogalamu yaumbanda, mudzafuna kufufuzanso zina zomwe mungachite ndi Juniper ATP Cloud.

Zina zambiri

Ngati mukufuna	Ndiye
View Juniper ATP Cloud System Administration Guide	Mwaona Juniper ATP Cloud Administration Guide
Onani zolemba zonse zomwe zilipo za Juniper ATP Cloud	Pitani ku Juniper Advanced Threat Prevention (ATP) Cloud Dziwani Choyamba tsamba mu Juniper TechLibrary
Onani zolemba zonse zomwe zilipo za Policy Enforcer	Pitani ku Zolemba Zothandizira Policy tsamba mu Juniper TechLibrary.
Onani, sinthani, ndikuteteza maukonde anu ndi Juniper Security	Pitani ku Security Design Center
Khalani odziwa za zatsopano ndi zosinthidwa komanso zodziwika ndi zothetsedwa	Onani Juniper Advanced Threat Prevention Cloud Release Zolemba
Kuthetsa mavuto ena omwe mungakumane nawo ndi Juniper ATP Cloud	Onani Juniper Advanced Threat Prevention Cloud Zovuta Zothandizira

Phunzirani ndi Mavidiyo
Laibulale yathu yamavidiyo ikupitilira kukula! Tapanga makanema ambiri omwe akuwonetsa momwe mungachitire chilichonse kuyambira pakuyika zida zanu kuti musinthe mawonekedwe apamwamba a netiweki a Junos OS. Nawa ena opambana kanema ndi maphunziro
zida zomwe zingakuthandizeni kukulitsa chidziwitso chanu cha Junos OS.

Ngati mukufuna	Ndiye
View Chiwonetsero cha ATP Cloud chomwe chimakuwonetsani momwe mungakhazikitsire ndikusintha ATP Cloud	Penyani Chiwonetsero cha ATP Cloud kanema
Phunzirani momwe mungagwiritsire ntchito Policy Enforcer Wizard	Penyani Kugwiritsa ntchito Policy Enforcer Wizard kanema
Pezani maupangiri amfupi komanso achidule ndi malangizo omwe amapereka mayankho ofulumira, omveka bwino, komanso chidziwitso pazinthu zenizeni ndi ntchito zaukadaulo wa Juniper.	Mwaona Kuphunzira ndi Mavidiyo pa Juniper Networks tsamba lalikulu la YouTube

Ngati mukufuna	Ndiye
View mndandanda wamaphunziro ambiri aulere aukadaulo omwe timapereka ku Juniper	Pitani ku Kuyambapo tsamba pa Juniper Learning Portal

Juniper Networks, logo ya Juniper Networks, Juniper, ndi Junos ndi zilembo zolembetsedwa za Juniper Networks, Inc. ku United States ndi mayiko ena. Zizindikiro zina zonse, zizindikiritso zautumiki, zilembo zolembetsedwa, kapena zizindikilo zantchito zolembetsedwa ndi katundu wa eni ake. Juniper Networks sakhala ndi udindo pazolakwika zilizonse m'chikalatachi. Juniper Networks ili ndi ufulu wosintha, kusintha, kusamutsa, kapena kuwunikiranso bukuli popanda chidziwitso. Copyright © 2023 Juniper Networks, Inc. Ufulu wonse ndi wotetezedwa.

Zolemba / Zothandizira

Juniper NETWORKS ATP Cloud-Based Threat Detection Software [pdf] Buku Logwiritsa Ntchito ATP Cloud-Based Threat Detection Software, ATP Cloud, Cloud-Based Threat Detection Software, Threat Detection Software, Detection Software, Software

Maumboni

• Buku Logwiritsa Ntchito