Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Configure File Type Profiles

File type profiles let you define which files to send to ATP Appliance for inspection. You can group types of files to be scanned together (such as .tar, .exe, and .java) under a common name and create multiple profiles based on the content you want scanned. You then enter the profile names on eligible SRX Series Firewalls to apply them.

Benefits of File Inspection Profiles

  • Allows you to create file categories to send ATP Appliance for scanning rather than having to list every single type of file you want scanned.

  • Allows you to configure multiple scanning categories based on file type, adding and removing file types when necessary, increasing or decreasing granularity.

  • You can manually submit files for inspection using the ATP Appliance file_submit API. Refer to the following document on Juniper.net for instructions: Juniper ATP HTTP API Guide. See the “file_submit” command in the guide for instructions.

To configure a file type profile, do the following:

  1. From the Config tab, navigate to System Profiles > SRX settings. The File Type Profile settings are near the bottom of the page.
  2. Click the Add New Profile button to create a new file type profile. A window opens from which you can select file types and size limits in megabytes.
    Note:

    The maximum file size limit for all file types is 32MB.

    Note:

    ATP Appliance ships with a default profile already defined, which you can use. Click on the default profile in the ATP Appliance Web UI to view its contents.

  3. Click Save.
Note:

Once the profile is created, use the set services advanced-anti-malware policy CLI command to associate it with the ATP Appliance profile. See Getting Started with ATP Appliance and the SRX Series Firewall.

To verify your updates are on your SRX Series Firewalls, enter the following CLI command:

You can compare the version numbers or the contents to verify your profile is current.

Advanced Anti-malware inspection profile: Profile Name:default_profile version: 1573769866 disabled_file_types: { ...

Related Documentation