Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation  Back up to About Overview 
  
[+] Expand All
[-] Collapse All

Changes in Behavior and Syntax

This section lists the changes in behavior of Sky ATP features and in Junos OS Release 15.1X49-D80 for Sky ATP.

HA Failover and Security Intelligence Daemon

Starting with Junos OS Release 15.1X49-D80, HA failover is not supported when the security intelligence daemon is disabled (set system processes security-intelligence disable.)

Match Condition

Starting in Junos OS Release 15.1X49-D80, the match-then condition has been deprecated from the Sky ATP policy configuration.

Prior to Junos OS Release 15.1X49-D80

Junos OS Release 15.1X49-D80 and later

policy po1 {
    inspection-profile insp_profile1;     
    match { # Deprecated
         application HTTP;
         verdict-threshold 8;
    }
    then { # Deprecated
        action block;
        notification log; 
    }
     default-notification {
        log;
    }
    whitelist-notification {
        log;
    }
    blacklist-notification {
        log;
    }
    fallback-options {
        action permit;
        notification log;
    }
}
policy po1 {
    http {
        inspection-profile default_profile;
        action block;
    }
    verdict-threshold 8;
    fallback-options {
        action permit;
    }
    default-notification {
        log;
    }
    whitelist-notification {
        log;
    }
    blacklist-notification {
        log;
    }    
    default-notification {
        fallback-options {
        action permit;
    }
}

Existing policies with the match-then condition are supported, but you can no longer create policies with those parameters.

Modified: 2017-03-15