Spotlight Secure

Linking security intelligence to policy enforcement for rapid protection against advanced threats

Spotlight Secure is a threat intelligence platform that aggregates threat feeds from multiple sources to deliver open, consolidated, actionable intelligence to SRX Series Services Gateways (firewalls) across the organization. These sources include Juniper threat feeds, third party threat feeds and threat detection technologies that the customer can deploy. Administrators can define enforcement policies from all feeds via a single, centralized management point, Junos Space Security Director.

    Overview

    As the threat landscape continues to accelerate and evolve, the security industry continues to respond with a variety of disparate new detection technologies. Unfortunately, this approach results in customers struggling to manage a patchwork of uncoordinated security tools, leaving a gap between detection and enforcement at the firewall. Many Next-Generation Firewalls (NGFW) include integrated capabilities, such as Intrusion Prevention System (IPS), anti-virus signatures, and proprietary reputation feeds, but they are closed systems that are not capable of taking full advantage of the highly diverse third party and custom feeds utilized by customers.

    Juniper’s Spotlight Secure threat intelligence platform addresses these challenges and constraints by aggregating threat feeds from multiple sources to deliver open, consolidated, actionable intelligence to SRX firewalls across the organization. These sources include Juniper threat feeds from our cloud-based service, third party threat feeds and threat detection technologies that the customer can deploy.

    Administrators are able to define enforcement policies from all feeds via a single, centralized management point, Junos Space Security Director.

    Features

    • Open and Customizable Intelligence Platform: Use Juniper’s optimized threat feeds (C&C/anti-bot, GeoIP and global attacker fingerprint data), custom or third-party feeds for policy enforcement.
    • Scalable Security: Simultaneously apply security intelligence policy to 1000s of SRX firewalls using Junos Space Security Director.
    • High Threat Data Capacity: SRX is the only firewall to support 1M+ feed entries that can be used both for Juniper and/or customer feeds.
    • Effective Protection: Spotlight Secure ensures only the latest and most relevant intelligence is sent to firewall, in order to maximize SRX device resources, rapid enforcement and reduce false positives; threat severity ratings for each feed entry allow admin to write policy based on ratings.
    • High Operational Efficiency: Firewall policies, threat intelligence feeds, and reporting on enforcement and actions all available in a single pane view with Security Director; latest aggregated threat intelligence can automatically syndicate across entire firewall estate, with no need to update.