Help Center Security Services Advanced Threat Prevention

Contents

ContentsHide

J-Web User Guide for SRX Series Devices
- About the Documentation
- Juniper Web Device Manager
  - Getting Started
- Dashboard
  - J-Web Dashboard
    - Dashboard Overview
- Monitor
  - Interfaces
    - Monitor Interfaces
  - Logs
  - Maps and Charts
  - Statistics
  - Reports
    - About Reports Page
- Device Administration
  - Basic Settings
    - Configure Basic Settings
  - Cluster Management
  - User Management
  - Multi Tenancy—Resource Profiles
  - Multi Tenancy—Interconnect Ports
  - Multi Tenancy—Logical Systems
  - Multi Tenancy—Tenants
  - Certificate Management—Device Certificates
  - Certificate Management—Trusted Certificate Authority
  - Certificate Management—Certificate Authority Group
  - License Management
    - Manage Your Licenses
  - ATP Management
    - Enroll Your Device with Juniper ATP Cloud
    - About the Diagnostics Page
  - Operations
  - Software Management
  - Configuration Management
  - Alarm Management
    - Monitor Chassis Alarm
    - Monitor System Alarm
  - RPM
    - Setup RPM
    - View RPM
  - Tools
  - Reset Configuration
    - Configure Setup Wizard
- Network
  - Connectivity—Ports
    - About the Ports Page
    - Add a Logical Interface
    - Edit a Logical Interface
    - Delete Logical Interface
  - Connectivity—VLAN
    - About the VLAN Page
    - Add a VLAN
    - Edit a VLAN
    - Delete VLAN
    - Assign an Interface to VLAN
  - Connectivity—Link Aggregation
    - About the Link Aggregation Page
    - Link Aggregation Global Settings
    - Add a Logical Interface to Link Aggregation
    - Add a Link Aggregation
    - Edit an Aggregated Interface
    - Delete Link Aggregation
    - Search for Text in the Link Aggregation Table
  - Connectivity—PPPoE
    - Configure PPPoE
  - Connectivity—Wireless LAN
    - About the Settings Page
    - Create an Access Point
    - Edit an Access Point
    - Delete Access Point
    - Create an Access Point Radio Setting
    - Edit an Access Point Radio Setting
    - Delete Access Point Radio Settings
  - DHCP Client
    - About the DHCP Client Page
    - Add DHCP Client Information
    - Delete DHCP Client Information
  - DHCP Server
    - About the DHCP Server Page
    - Add a DHCP Pool
    - Edit a DHCP Pool
    - Delete DHCP Pool
    - DHCP Groups Global Settings
    - Add a DHCP Group
    - Edit a DHCP Group
    - Delete DHCP Group
  - Firewall Filters—IPv4
    - About the IPv4 Page
    - Add IPv4 Firewall Filters
  - Firewall Filters—IPv6
    - About the IPv6 Page
    - Add IPv6 Firewall Filters
  - Firewall Filters—Assign to Interfaces
    - About the Assign to Interfaces Page
  - NAT Policies
    - About the NAT Policies Page
    - Create a Source NAT
    - Edit a Source NAT
    - Delete Source NAT
  - NAT Pools
    - About the NAT Pools Page
    - Global Options
    - Create a Source NAT Pool
    - Edit a Source NAT Pool
    - Delete Source NAT Pool
    - Add a Destination NAT Pool
    - Edit a Destination NAT Pool
    - Delete Destination NAT Pool
  - Destination NAT
    - About the Destination Page
    - Add a Destination Rule Set
    - Edit a Destination Rule Set
    - Delete Destination Rule Set
  - Static NAT
    - About the Static Page
    - Add a Static Rule Set
    - Edit a Static Rule Set
    - Delete Static Rule Set
  - NAT Proxy ARP/ND
    - About the Proxy ARP/ND Page
    - Add a Proxy ARP
    - Edit a Proxy ARP
    - Delete a Proxy ARP
    - Add a Proxy ND
    - Edit a Proxy ND
    - Delete Proxy ND
  - Static Routing
    - About the Static Routing Page
    - Add a Static Route
    - Edit a Static Route
    - Delete Static Route
  - RIP Routing
    - About the RIP Page
    - Add a RIP Instance
    - Edit a RIP Instance
    - Delete RIP Instance
    - Edit RIP Global Settings
    - Delete RIP Global Settings
  - OSPF Routing
    - About the OSPF Page
    - Add an OSPF
    - Edit an OSPF
    - Delete OSPF
  - BGP Routing
    - About the BGP Page
    - Add a BGP Group
    - Edit a BGP Group
    - Delete a BGP Group
    - Edit Global Information
  - Routing Instances
    - About the Routing Instances Page
    - Add a Routing Instance
    - Edit a Routing Instance
    - Delete Routing Instance
  - Routing—Policies
    - About the Policies Page
    - Global Options
    - Add a Policy
    - Clone a Policy
    - Edit a Policy
    - Delete Policy
    - Test a Policy
  - Routing—Forwarding Mode
    - About the Forwarding Mode Page
  - CoS—Value Aliases
    - About the Value Aliases Page
    - Add a Code Point Alias
    - Edit a Code Point Alias
    - Delete Code Point Alias
  - CoS—Forwarding Classes
    - About the Forwarding Classes Page
    - Add a Forwarding Class
    - Edit a Forwarding Class
    - Delete Forwarding Class
  - CoS Classifiers
    - About the Classifiers Page
    - Add a Classifier
    - Edit a Classifier
    - Delete Classifier
  - CoS—Rewrite Rules
    - About the Rewrite Rules Page
    - Add a Rewrite Rule
    - Edit a Rewrite Rule
    - Delete Rewrite Rule
  - CoS—Schedulers
    - About the Schedulers Page
    - Add a Scheduler
    - Edit a Scheduler
    - Delete Scheduler
  - CoS—Scheduler Maps
    - About the Scheduler Maps Page
    - Add a Scheduler Map
    - Edit a Scheduler Map
    - Delete Scheduler Map
  - CoS—Drop Profile
    - About the Drop Profile Page
    - Add a Drop Profile
    - Edit a Drop Profile
    - Delete Drop Profile
  - CoS—Virtual Channel Groups
    - About the Virtual Channel Groups Page
    - Add a Virtual Channel
    - Edit a Virtual Channel
    - Delete Virtual Channel
  - CoS—Assign To Interface
    - About the Assign To Interface Page
    - Edit a Port
    - Add a Logical Interface
    - Edit a Logical Interface
    - Delete Logical Interface
  - Application QoS
    - About the Application QoS Page
    - Add an Application QoS Profile
    - Edit an Application QoS Profile
    - Clone an Application QoS Profile
    - Delete Application QoS Profile
    - Add a Rate Limiter Profile
    - Edit a Rate Limiter Profile
    - Clone a Rate Limiter Profile
    - Delete Rate Limiter Profile
- Security Policies and Objects
- Security Services
  - UTM Default Configuration
    - About the Default Configuration Page
    - Edit a Default Configuration
    - Delete Default Configuration
  - UTM Antivirus Profiles
    - About the Antivirus Profiles Page
    - Add an Antivirus Profile
    - Clone an Antivirus Profile
    - Edit an Antivirus Profile
    - Delete Antivirus Profile
  - UTM Web Filtering Profiles
    - About the Web Filtering Profiles Page
    - Add a Web Filtering Profile
    - Clone a Web Filtering Profile
    - Edit a Web Filtering Profile
    - Delete Web Filtering Profile
  - UTM Web Filtering Category Update
    - About the Category Update Page
    - Category Update Settings
    - Download and Install Settings
  - UTM Antispam Profiles
    - About the Antispam Profiles Page
    - Add an Antispam Profile
    - Clone an Antispam Profile
    - Edit an Antispam Profile
    - Delete Antispam Profile
  - UTM Content Filtering Profiles
    - About the Content Filtering Profiles Page
    - Add a Content Filtering Profile
    - Clone a Content Filtering Profile
    - Edit a Content Filtering Profile
    - Delete Content Filtering Profile
  - UTM Custom Objects
    - About the Custom Objects Page
    - Add a MIME Pattern List
    - Add a File Extension List
    - Add a Protocol Command List
    - Add a URL Pattern List
    - Add a URL Category List
    - Add a Custom Message List
    - Clone Custom Objects
    - Edit Custom Objects
    - Delete Custom Objects
  - UTM Policies
    - About the UTM Policies Page
    - Add a UTM Policy
    - Clone a UTM Policy
    - Edit a UTM Policy
    - Delete UTM Policy
  - IPS Signature Update
    - About the Signature Update Page
    - Download an IPS Signature
    - Install an IPS Signature
    - Check Status of the IPS Signature
    - IPS Signature Download Setting
  - IPS Sensor
    - About the Sensor Page
  - IPS Policy
    - About the Policy Page
    - IDP Policy Template
    - Check Status of the IDP Policy
    - Add an IDP Policy
    - Clone an IDP Policy
    - Edit an IDP Policy
    - Delete IDP Policy
  - ALG
    - About the ALG Page
  - Advanced Threat Prevention
    - About the Advanced Threat Prevention Page
    - Add a Threat Prevention Policy
    - Edit a Threat Prevention Policy
    - Delete Threat Prevention Policy
  - SSL Initiation Profiles
    - About the SSL Initiation Profile Page
    - Add an SSL Initiation Profile
    - Edit an SSL Initiation Profile
    - Delete SSL Initiation Profile
  - SSL Proxy Profiles
    - About the SSL Proxy Page
    - Add an SSL Proxy Profile
    - Clone an SSL Proxy Profile
    - Edit an SSL Proxy Profile
    - Delete SSL Proxy Profile
  - Firewall Authentication—Access Profile
    - About the Access Profile Page
    - Add an Access Profile
    - Edit an Access Profile
    - Delete an Access Profile
  - Firewall Authentication—Address Pools
    - About the Address Pools Page
    - Add an Address Pool
    - Edit an Address Pool
    - Delete Address Pool
    - Search for Text in an Address Pools Table
  - Firewall Authentication Settings
    - About the Authentication Settings Page
  - Firewall Authentication—UAC Settings
    - About the UAC Settings Page
  - Firewall Authentication—Active Directory
    - About the Active Directory Page
  - Firewall Authentication—Local Authentication
    - About the Local Authentication Page
    - Add a Local Auth Entry
    - Delete a Local Auth Entry
  - Firewall Authentication—Authentication Priority
    - About the Authentication Priority Page
  - Firewall Authentication—Identity Management
    - About the Identity Management Page
    - Add an Identity Management Profile
    - Edit an Identity Management Profile
    - Delete Identity Management Profile
  - ICAP Redirect
    - About the ICAP Redirect Profile Page
    - Add an ICAP Redirect Profile
    - Edit an ICAP Redirect Profile
    - Delete ICAP Redirect Profile
- VPN

ContentsHide

J-Web User Guide for SRX Series Devices
- About the Documentation
- Juniper Web Device Manager
  - Getting Started
- Dashboard
  - J-Web Dashboard
    - Dashboard Overview
- Monitor
  - Interfaces
    - Monitor Interfaces
  - Logs
  - Maps and Charts
  - Statistics
  - Reports
    - About Reports Page
- Device Administration
  - Basic Settings
    - Configure Basic Settings
  - Cluster Management
  - User Management
  - Multi Tenancy—Resource Profiles
  - Multi Tenancy—Interconnect Ports
  - Multi Tenancy—Logical Systems
  - Multi Tenancy—Tenants
  - Certificate Management—Device Certificates
  - Certificate Management—Trusted Certificate Authority
  - Certificate Management—Certificate Authority Group
  - License Management
    - Manage Your Licenses
  - ATP Management
    - Enroll Your Device with Juniper ATP Cloud
    - About the Diagnostics Page
  - Operations
  - Software Management
  - Configuration Management
  - Alarm Management
    - Monitor Chassis Alarm
    - Monitor System Alarm
  - RPM
    - Setup RPM
    - View RPM
  - Tools
  - Reset Configuration
    - Configure Setup Wizard
- Network
  - Connectivity—Ports
    - About the Ports Page
    - Add a Logical Interface
    - Edit a Logical Interface
    - Delete Logical Interface
  - Connectivity—VLAN
    - About the VLAN Page
    - Add a VLAN
    - Edit a VLAN
    - Delete VLAN
    - Assign an Interface to VLAN
  - Connectivity—Link Aggregation
    - About the Link Aggregation Page
    - Link Aggregation Global Settings
    - Add a Logical Interface to Link Aggregation
    - Add a Link Aggregation
    - Edit an Aggregated Interface
    - Delete Link Aggregation
    - Search for Text in the Link Aggregation Table
  - Connectivity—PPPoE
    - Configure PPPoE
  - Connectivity—Wireless LAN
    - About the Settings Page
    - Create an Access Point
    - Edit an Access Point
    - Delete Access Point
    - Create an Access Point Radio Setting
    - Edit an Access Point Radio Setting
    - Delete Access Point Radio Settings
  - DHCP Client
    - About the DHCP Client Page
    - Add DHCP Client Information
    - Delete DHCP Client Information
  - DHCP Server
    - About the DHCP Server Page
    - Add a DHCP Pool
    - Edit a DHCP Pool
    - Delete DHCP Pool
    - DHCP Groups Global Settings
    - Add a DHCP Group
    - Edit a DHCP Group
    - Delete DHCP Group
  - Firewall Filters—IPv4
    - About the IPv4 Page
    - Add IPv4 Firewall Filters
  - Firewall Filters—IPv6
    - About the IPv6 Page
    - Add IPv6 Firewall Filters
  - Firewall Filters—Assign to Interfaces
    - About the Assign to Interfaces Page
  - NAT Policies
    - About the NAT Policies Page
    - Create a Source NAT
    - Edit a Source NAT
    - Delete Source NAT
  - NAT Pools
    - About the NAT Pools Page
    - Global Options
    - Create a Source NAT Pool
    - Edit a Source NAT Pool
    - Delete Source NAT Pool
    - Add a Destination NAT Pool
    - Edit a Destination NAT Pool
    - Delete Destination NAT Pool
  - Destination NAT
    - About the Destination Page
    - Add a Destination Rule Set
    - Edit a Destination Rule Set
    - Delete Destination Rule Set
  - Static NAT
    - About the Static Page
    - Add a Static Rule Set
    - Edit a Static Rule Set
    - Delete Static Rule Set
  - NAT Proxy ARP/ND
    - About the Proxy ARP/ND Page
    - Add a Proxy ARP
    - Edit a Proxy ARP
    - Delete a Proxy ARP
    - Add a Proxy ND
    - Edit a Proxy ND
    - Delete Proxy ND
  - Static Routing
    - About the Static Routing Page
    - Add a Static Route
    - Edit a Static Route
    - Delete Static Route
  - RIP Routing
    - About the RIP Page
    - Add a RIP Instance
    - Edit a RIP Instance
    - Delete RIP Instance
    - Edit RIP Global Settings
    - Delete RIP Global Settings
  - OSPF Routing
    - About the OSPF Page
    - Add an OSPF
    - Edit an OSPF
    - Delete OSPF
  - BGP Routing
    - About the BGP Page
    - Add a BGP Group
    - Edit a BGP Group
    - Delete a BGP Group
    - Edit Global Information
  - Routing Instances
    - About the Routing Instances Page
    - Add a Routing Instance
    - Edit a Routing Instance
    - Delete Routing Instance
  - Routing—Policies
    - About the Policies Page
    - Global Options
    - Add a Policy
    - Clone a Policy
    - Edit a Policy
    - Delete Policy
    - Test a Policy
  - Routing—Forwarding Mode
    - About the Forwarding Mode Page
  - CoS—Value Aliases
    - About the Value Aliases Page
    - Add a Code Point Alias
    - Edit a Code Point Alias
    - Delete Code Point Alias
  - CoS—Forwarding Classes
    - About the Forwarding Classes Page
    - Add a Forwarding Class
    - Edit a Forwarding Class
    - Delete Forwarding Class
  - CoS Classifiers
    - About the Classifiers Page
    - Add a Classifier
    - Edit a Classifier
    - Delete Classifier
  - CoS—Rewrite Rules
    - About the Rewrite Rules Page
    - Add a Rewrite Rule
    - Edit a Rewrite Rule
    - Delete Rewrite Rule
  - CoS—Schedulers
    - About the Schedulers Page
    - Add a Scheduler
    - Edit a Scheduler
    - Delete Scheduler
  - CoS—Scheduler Maps
    - About the Scheduler Maps Page
    - Add a Scheduler Map
    - Edit a Scheduler Map
    - Delete Scheduler Map
  - CoS—Drop Profile
    - About the Drop Profile Page
    - Add a Drop Profile
    - Edit a Drop Profile
    - Delete Drop Profile
  - CoS—Virtual Channel Groups
    - About the Virtual Channel Groups Page
    - Add a Virtual Channel
    - Edit a Virtual Channel
    - Delete Virtual Channel
  - CoS—Assign To Interface
    - About the Assign To Interface Page
    - Edit a Port
    - Add a Logical Interface
    - Edit a Logical Interface
    - Delete Logical Interface
  - Application QoS
    - About the Application QoS Page
    - Add an Application QoS Profile
    - Edit an Application QoS Profile
    - Clone an Application QoS Profile
    - Delete Application QoS Profile
    - Add a Rate Limiter Profile
    - Edit a Rate Limiter Profile
    - Clone a Rate Limiter Profile
    - Delete Rate Limiter Profile
- Security Policies and Objects
- Security Services
  - UTM Default Configuration
    - About the Default Configuration Page
    - Edit a Default Configuration
    - Delete Default Configuration
  - UTM Antivirus Profiles
    - About the Antivirus Profiles Page
    - Add an Antivirus Profile
    - Clone an Antivirus Profile
    - Edit an Antivirus Profile
    - Delete Antivirus Profile
  - UTM Web Filtering Profiles
    - About the Web Filtering Profiles Page
    - Add a Web Filtering Profile
    - Clone a Web Filtering Profile
    - Edit a Web Filtering Profile
    - Delete Web Filtering Profile
  - UTM Web Filtering Category Update
    - About the Category Update Page
    - Category Update Settings
    - Download and Install Settings
  - UTM Antispam Profiles
    - About the Antispam Profiles Page
    - Add an Antispam Profile
    - Clone an Antispam Profile
    - Edit an Antispam Profile
    - Delete Antispam Profile
  - UTM Content Filtering Profiles
    - About the Content Filtering Profiles Page
    - Add a Content Filtering Profile
    - Clone a Content Filtering Profile
    - Edit a Content Filtering Profile
    - Delete Content Filtering Profile
  - UTM Custom Objects
    - About the Custom Objects Page
    - Add a MIME Pattern List
    - Add a File Extension List
    - Add a Protocol Command List
    - Add a URL Pattern List
    - Add a URL Category List
    - Add a Custom Message List
    - Clone Custom Objects
    - Edit Custom Objects
    - Delete Custom Objects
  - UTM Policies
    - About the UTM Policies Page
    - Add a UTM Policy
    - Clone a UTM Policy
    - Edit a UTM Policy
    - Delete UTM Policy
  - IPS Signature Update
    - About the Signature Update Page
    - Download an IPS Signature
    - Install an IPS Signature
    - Check Status of the IPS Signature
    - IPS Signature Download Setting
  - IPS Sensor
    - About the Sensor Page
  - IPS Policy
    - About the Policy Page
    - IDP Policy Template
    - Check Status of the IDP Policy
    - Add an IDP Policy
    - Clone an IDP Policy
    - Edit an IDP Policy
    - Delete IDP Policy
  - ALG
    - About the ALG Page
  - Advanced Threat Prevention
    - About the Advanced Threat Prevention Page
    - Add a Threat Prevention Policy
    - Edit a Threat Prevention Policy
    - Delete Threat Prevention Policy
  - SSL Initiation Profiles
    - About the SSL Initiation Profile Page
    - Add an SSL Initiation Profile
    - Edit an SSL Initiation Profile
    - Delete SSL Initiation Profile
  - SSL Proxy Profiles
    - About the SSL Proxy Page
    - Add an SSL Proxy Profile
    - Clone an SSL Proxy Profile
    - Edit an SSL Proxy Profile
    - Delete SSL Proxy Profile
  - Firewall Authentication—Access Profile
    - About the Access Profile Page
    - Add an Access Profile
    - Edit an Access Profile
    - Delete an Access Profile
  - Firewall Authentication—Address Pools
    - About the Address Pools Page
    - Add an Address Pool
    - Edit an Address Pool
    - Delete Address Pool
    - Search for Text in an Address Pools Table
  - Firewall Authentication Settings
    - About the Authentication Settings Page
  - Firewall Authentication—UAC Settings
    - About the UAC Settings Page
  - Firewall Authentication—Active Directory
    - About the Active Directory Page
  - Firewall Authentication—Local Authentication
    - About the Local Authentication Page
    - Add a Local Auth Entry
    - Delete a Local Auth Entry
  - Firewall Authentication—Authentication Priority
    - About the Authentication Priority Page
  - Firewall Authentication—Identity Management
    - About the Identity Management Page
    - Add an Identity Management Profile
    - Edit an Identity Management Profile
    - Delete Identity Management Profile
  - ICAP Redirect
    - About the ICAP Redirect Profile Page
    - Add an ICAP Redirect Profile
    - Edit an ICAP Redirect Profile
    - Delete ICAP Redirect Profile
- VPN

Add a Threat Prevention Policy

You are here: Security Services > Advanced Threat Prevention.

Procedure

To add a threat prevention policy:

Click the add icon (+) on the upper right side of the Threat Prevention Policy page.
The Create Threat Prevention Policy page appears.
Complete the configuration according to the guidelines provided in Table 235.
Click OK to save the changes. If you want to discard your changes, click Cancel.

Table 235: Fields on the Create Threat Prevention Policy Page

Field	Action
Name	Displays the threat prevention policy name.
Description	Displays the threat prevention policy description.
Profiles
Include C&C profile in policy	Select the check box.
Include infected host profile in policy	Select the check box.
Include malware profile in policy	Select the check box.
Log Setting
Log Setting	Select an option from the list. The available options are: Log all traffic Log only blocked traffic Do not log any traffic

Related Documentation

Help us to improve. Rate this article.

Feedback Received. Thank You!

Previous

About the Advanced Threat Prevention Page

Next

Edit a Threat Prevention Policy

Related Topics

Need more help?

Ask questions in TechWiki

Contact Customer Support

Check documentation in TechLibrary

Rating by you:

X