About Security Intelligence

Security Intelligence describes a security solution comprised of several Juniper Networks security products. An essential part of the solution is the Spotlight Connector which is a virtual appliance. The Spotlight Connector is an on-premise component which serves as an intermediary between the SRX series and various sources of security intelligence feeds. The Spotlight Connector publishes the submitted threat data as a standard feed to the SRX series device for automatically filtering traffic on both network and application layers.

WebApp Secure contributes to the effectiveness of Security Intelligence by publishing attacker information to the Spotlight Connector. The Spotlight Connector can then determine SRX series security actions to take against known attackers and publish these actions to SRX series devices.

Note: In the WebApp Secure Web UI, under the Juniper Spotlight menu item, you can choose to enable Spotlight Secure and/or Spotlight Connector if you are using these services. Both are part of Security Intelligence, although they are different types of services. Spotlight Secure provides a database of known attackers to WebApp Secure for use throughout the appliance. See About Spotlight Secure for more information.

In overview, the flow of information between components is as follows:

Figure 54: WebApp Secure-Spotlight Connector Data Flow

WebApp Secure-Spotlight Connector Data Flow

Related Documentation