Spotlight Secure

Linking security intelligence to policy enforcement for rapid protection against advanced threats

Spotlight Secure is a threat intelligence platform that aggregates threat feeds from multiple sources to deliver open, consolidated, actionable intelligence to SRX Series Services Gateways (firewalls) across the organization. These sources include Juniper threat feeds, third-party threat feeds, and threat detection technologies that the customer can deploy. Administrators can define enforcement policies from all feeds via a single, centralized management point, Junos Space Security Director.

    Overview

    As the threat landscape continues to accelerate and evolve, the security industry continues to respond with a variety of disparate new detection technologies. Unfortunately, this approach results in customers struggling to manage a patchwork of uncoordinated security tools, leaving a gap between detection and enforcement at the firewall. Many next-generation firewalls (NGFW) include integrated capabilities, such as intrusion prevention system (IPS), antivirus signatures, and proprietary reputation feeds, but they are closed systems that are not capable of taking full advantage of the highly diverse third-party and custom feeds utilized by customers.

    Juniper’s Spotlight Secure threat intelligence platform addresses these challenges and constraints by aggregating threat feeds from multiple sources to deliver open, consolidated, actionable intelligence to SRX Series firewalls across the organization. These sources include Juniper threat feeds from our cloud-based service, third-party threat feeds, and threat detection technologies that the customer can deploy.

    Administrators are able to define enforcement policies from all feeds via a single, centralized management point, Junos Space Security Director.

    Features

    • Open and Customizable Intelligence Platform: Use Juniper’s optimized threat feeds (C&C/anti-bot, GeoIP and global attacker fingerprint data), custom or third-party feeds for policy enforcement.
    • Scalable Security: Simultaneously apply security intelligence policy to thousands of SRX Series firewalls using Junos Space Security Director.
    • High Threat Data Capacity: SRX Series is the only firewall to support 1M+ feed entries that can be used both for Juniper and/or customer feeds.
    • Effective Protection: Spotlight Secure ensures only the latest and most relevant intelligence is sent to firewall, in order to maximize SRX device resources, rapid enforcement and reduce false positives; threat severity ratings for each feed entry allow admin to write policy based on ratings.
    • High Operational Efficiency: Firewall policies, threat intelligence feeds, and reporting on enforcement and actions are all available in a single pane view with Security Director; latest aggregated threat intelligence can automatically syndicate across entire firewall estate, with no need to update.