Help Center User GuideGetting StartedFAQsRelease Notes
 
X
User Guide
Getting Started
FAQs
Release Notes
Contents  

Policy Enforcer Installation Overview

Policy Enforcer is delivered as an OVA package to be deployed inside your VMware ESX network. As with other Juniper Networks virtual appliances, Policy Enforcer requires either a VMware ESX server version 4.0 or later or a VMware ESXi server version 4.0 or later that can support a virtual machine with the following configuration:

If you are not familiar with using VMware ESX or EXSi servers, see VMware Documentation and select the appropriate VMware vSphere version.

Table 195 lists the general steps to install and configure Policy Enforcer.

Table 195: Overview of Steps to Install and Configure Policy Enforcer

Step

Description

See

1

Install and configure Junos Space and Security Director 16.1 or later.

               

Note: After installing Junos Space and Security Director, you must update to the latest Junos Space device schema. See your Junos Space Security Director documentation for more information on upgrading your schema.

Junos Space Network Management Platform software download

               

Junos Space Security Director software download

2

Install and configure your SRX Series devices, EX Series switches or QFX Series switches. Switches are “discoverable” through Junos Space.

For information on discovering switches, see Using Quick Setup for Sky ATP with Policy Enforcer.

Juniper Tech Library

3

Download, deploy and configure the Policy Enforcer virtual machine.

Deploying and Configuring the Policy Enforcer Virtual Machine

4

Use the Policy Enforcer Settings screen in Security Director (Administration > PE Settings) to identify the Policy Enforcer virtual machine to communicate with.

Identifying the Policy Enforcer Virtual Machine In Security Director

5

Obtain a Sky ATP license and create a Sky ATP portal account.

Obtaining a Sky ATP License

               

Creating a Sky ATP Cloud Web Portal Login Account

6

Install the root CA on your Sky ATP-supported SRX Series devices.

Loading a Root CA

7

Use the Setup Wizard screens in Security Director to configure Threat Prevention policies and deploy to their devices. Optionally, you can configure policies without the setup wizard. Which option you use is based on the mode you select in the PE Setting page.

Using Quick Setup for Sky ATP with Policy Enforcer

               

Using Quick Setup for Sky ATP

Related Documentation

Ask questions in TechWiki

Check documentation in TechLibrary

Rating by you:      
X

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:
Email:

Need product assistance? Contact Juniper Support

Submit