Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Content Security

  • Juniper NextGen Web Filtering (SRX Series and cSRX)—Starting in Junos OS Release 23.4R1, Juniper NextGen Web Filtering (NGWF) is available as the URL filtering infrastructure in the Juniper cloud. It uses the OEM Cloud for URL reputation and category. NGWF enables the SRX Series Firewall and cSRX Container Firewall to permit or deny access to specific URLs based on the reputation and category to which the URLs belong. It intercepts, scans, and acts upon HTTP or HTTPS traffic to prevent inappropriate Web content access. It also provides better visibility into the URL traffic.

    [See Juniper Web Filtering.]

  • Support for intelligent web filtering profile selection (SRX300, SRX320, SRX340, SRX345, and SRX380)—Starting in Junos OS Release 23.4R1, dynamic app information from Juniper Networks Deep Packet Inspection (JDPI) is used to retrieve policy information before the final policy match occurs.

    The Content Security profile that is retrieved based on the dynamic app information is more accurate than applying the default profile, which was the earlier approach.

    [See See Web Filtering.]

  • URL feed support for Content Security (SRX Series and vSRX)—Starting in Junos OS Release 23.4R1, we introduce URL feed for Content Security. The URL feed reduces your effort to add multiple URLs into a single URL pattern automatically. You should add the URLs that need to be added in the URL pattern to the URL feed file saved in the HTTPS server. When you configure the URL feed, the system downloads the file from the HTTPS server and creates the URL pattern automatically.

    [See url-feed, request security utm custom-objects url-feed update feed-name, request security utm custom-objects url-feed update feed-name force, and show security utm custom-objects url-feed status feed-name.]

  • Support for cache preload for Enhanced Web Filtering (EWF) (SRX300, SRX320, SRX340, SRX345, and SRX380)—Starting in Junos OS Release 23.4R1, we support preloading of cache with the top-rated, frequently visited URL list along with the classification information at the system startup stage. This feature is useful if your Internet connection is slow and you experience high latency while accessing the Web due to the remote categorization service.

    Because the Web-filter policy decision is based on the URL category information that is preloaded in the cache, you do not experience a lag even when you make the first request.

    [See Enhanced Web Filtering.]