JSA apps are created by developers. After a developer creates an app, Juniper certifies and publishes it in the IBM Security App Exchange. JSA administrators can then browse and download the apps and then install the apps into JSA to address specific security requirements.
The IBM Security App Exchange is a community-based sharing hub, that you use to share apps across Juniper Security products. By participating in App Exchange, you can use the rapidly assembled, innovative workflows, visualizations, analytics, and use cases that are packaged into apps to address specific security requirements. Easy-to-use solutions are developed by partners, consultants, developers to address key security challenges. To detect and remediate threats, use these shared security components, from real-time correlation and behavioral modeling to custom responses and reference data.
The combined memory requirements of all the apps that are installed on a JSA Console cannot exceed 10 per cent of the total available memory, or the apps won't work. If you exceed the 10 per cent memory allocation and want to run more apps, use a dedicated appliance for your apps (AppNode appliance for JSA 7.3.1 or the new AppHost appliance for JSA 7.3.2).
The QRadar Assistant app helps you to manage and update your app and content extension inventory, view app and content extension recommendations, follow the JSA Twitter feed, and get links to useful information. The app is automatically installed with JSA 7.3.2.
What is an app?
Apps create or add new functions in JSA by providing new tabs, API methods, dashboard items, menus, toolbar buttons, configuration pages, and more within the JSA user interface. You download apps from the IBM Security App Exchange. Apps that are created by using the GUI Application Framework Software Development Kit integrate with the JSA user interface to deliver new security intelligence capabilities or extend the current functions.
Every downloaded file from the IBM Security App Exchange is known as an extension. An extension can consist of an app or security product enhancement (content extension) that is packaged as an archive (.zip) file, which you can deploy on JSA by using the Extensions Management tool on the Admin tab.
Who can create an app?
You can use the GUI Application Framework Software Development Kit to create apps. For more information about the GUI Application Framework Software Development Kit, see the Juniper Secure Analytics Application Framework Guide.
How do I share my app?
Only certified content is shared in the IBM Security App Exchange, a new platform for collaborating where you can respond quickly and address your security and platform enhancement requirements. In the IBM Security App Exchange, you can find available apps, discover their purpose, and what they look like, and learn what other users say about the apps.
How do I get an app that I downloaded into JSA?
A JSA administrator downloads an extension and imports it into JSA by using the Extensions Management tool, which is used to upload the downloaded extension from a local source.
Where do I get help for an app?
You can see information about an app in the overview section when you download the app from the IBM Security App Exchange. For apps developed solely by Juniper, you can find information in the Juniper Knowledge Center.
How much memory does an app need?
The combined memory requirements of all the apps that are installed on a JSA Console cannot exceed 10 per cent of the total available memory. If you install an app that causes the 10 per cent memory limit to be exceeded, the app does not work.
If your app requires a minimum memory allocation, you must specify this allocation as part of your app manifest. The default allocation is 200 MB.
What is the difference between an app, a content extension, and a content pack?
From within JSA, an extension is a term that is used for everything that you download from the IBM Security App Exchange. Sometimes that extension contains individual content items, such as custom AQL functions or custom actions, and sometimes the extension contains an app that is developed by using the GUI App Framework Software Development Kit. You use the Extensions Management tool to install extensions.
app is content that is created
when you use the GUI App Framework Software Development Kit. The app
extends or creates new functions in JSA.
A content extension is typically used to update JSA security template information or add new content such as rules, reports, searches, logos, reference sets, custom properties. Content extensions are not created by using the GUI Application Framework Software Development Kit.
You download content packs from JuniperCustomerSupportwebsite in RPM format.
Typically, content extensions differ from content packs because you download content packs (RPM files) from JuniperCustomerSupportwebsite.