Navigation
Table of Contents
Guide That Contains This Content
[+] Expand All
[-] Collapse All
Junos OS AppSecure Services Library for Security Devices
An individual can connect to the network using multiple devices simultaneously, making it impractical to identify a user, application, or device by a group of statically allocated IP addresses and port numbers. Junos OS application identification recognizes traffic at different network layers using characteristics other than port number.
Once the application is determined, AppSecure service modules can be configured to monitor and control traffic for tracking, prioritization, access control, detection, and prevention based on the application ID of the traffic.
- AppTrack—Tracks and reports applications passing through the device.
- AppFW—Implements an application firewall using application-based rules.
- AppQoS—Provides quality of service prioritization based on application awareness.
- Intrusion Detection and Prevention (IDP)—Applies appropriate attack objects to applications running on nonstandard ports. Application identification improves IDP performance by narrowing the scope of attack signatures for applications without decoders.
- Application-Level Distributed Denial of Service—Identifies malicious bot clients, and drops or denies traffic if requests exceed configured thresholds.
Junos OS for SRX Series Services Gateways, Release 12.1X46
