Add SRX Series Devices to JATP Zones
Configure MSSP Multi-Tenancy Zones
These instructions pertain to JATP zones and the SRX Series device. The full section for JATP Zone configuration can be found in the Operator’s Guide. Configuring MSSP Multi-Tenancy Zones.
You can now add SRX Series devices to zones along with traffic collectors. All tenant collectors and SRX Series devices are connected to the JATP Core cluster hosted at the MSSP multi-tenancy site. All management of incidents is performed by the MSSP; tenants do not have access to the Core cluster.
A configured zone identifies incidents and events per tenant. The MSSP defines a zone per tenant and groups all collectors and SRX devices associated with a tenant to a tenant-specific Zone. JATP’s event correlation stages track all events per originating zone, and correlate events within the same zone. In this way, the multi-tenant MSSP manages incidents per zone/tenant and controls all zoned JATP Central Managers per tenant using the JATP Manager of Central Managers (MCM).
To configure MSSP Zones:
From the JATP Appliance Central Manager Web UI, navigate to Config>System Profiles>Zones.
Create the new MSSP Zone.
View Zone data from the JATP Appliance Central Manager Web UI Incidents page.
Generate Reports that include Zone analytics from the JATP Appliance Web UI Reports tab.
Add SRX Series Devices to Existing Zones
When an SRX Series device enrolls to JATP, it is automatically added to a “default zone.” Use the following instructions to move an SRX Series device to a different zone.
A zone must already exist in JATP before you can add an SRX Series device to it.
To move an SRX Series device to a different zone, do the following:
At the JATP Appliance Central Manager Web UI, navigate to Config>System Profiles>SRX Settings.
Select the SRX Series device and click Edit.
In the window that appears, select the Zone to which you want to add the SRX Series device and click Submit.
Note the following:
From the SRX Settings>Config tab, you can view a column that displays the zone to which the SRX Series device belongs.
From the Mitigation>Hosts tab, you can view a column in the list of infected hosts that displays the zone to which the SRX Series device belongs.
Infected host feeds are sent to SRX Series devices on a per zone basis.
View zone data from the JATP Appliance Central Manager Web UI Incidents page.
Generate reports that include zone analytics from the JATP Appliance Web UI Reports tab.