Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

New and Changed Features


This section lists the changes in behavior of Juniper Sky ATP features and in Junos OS Release 18.2R1 for Juniper Sky ATP.

Unified Policy Support

Starting in Junos OS Release 18.2R1, unified policies are now supported on SRX Series devices, allowing granular control and enforcement of dynamic Layer 7 applications within the traditional security policy. Unified policies are security policies, where you can use dynamic applications as match conditions along with existing 5-tuple or 6-tuple matching conditions (with user firewall) to detect application changes over time, and you can enforce a set of rules for the transit traffic. Unified policies allow you to use dynamic application as one of the policy match criteria rule in each application. Application identification (AppID) is applied on the traffic, and the application is identified after several packets are checked.

Juniper Sky ATP is supported for unified policies. The set services security-intelligence default-policy and set services advanced-anti-malware default-policy commands are introduced to create default policies for each. Additionally, during the initial policy lookup phase, which occurs prior to a dynamic application being identified, if there are multiple policies present in the potential policy list, which contain different security intelligence or anti-malware policies, the SRX Series device applies the default policy until a more explicit match has occurred. See the Juniper Sky ATP Administration Guide for more information.

The Junos 18.2R1 documentation provides further information on Unified Policies. (Note that UTM configuration with Unified Policies is similar to Juniper Sky ATP.)

Explicit Web Proxy Support

Starting in Junos OS Release 18.2R1, you can configure SRX Series/Juniper Sky ATP HTTP(S) connections to use a web proxy. This is configured using the set services proxy profile command on the SRX Series device. To configure HTTP(S) connections to use a web proxy, you create one or more proxy profiles and refer to those profiles in your anti-malware and security intelligence policies. When using a web proxy, you must enroll your SRX Series devices to Sky ATP using a slightly different process. See the Juniper Sky ATP Administration Guide for details.

File Scanning PDF Reports

You can now download PDF reports from the HTTP File Downloads, Details page. Navigate to File Scanning > HTTP File Downloads and click on a file hash from the list. At the top of the page, click the Download PDF Report link.