Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Configure Secure Edge Connector with Juniper Secure Edge (Auto)

Follow this workflow to set up and verify auto-provisioning for Juniper® Secure Edge.

The Juniper Mist cloud integrates with Juniper Secure Edge (JSE) to inspect traffic from WAN Edge devices. The Secure Edge Connector configuration in Mist enables Session Smart Routers and SRX Series Firewalls deployed as a WAN Edge device to send a portion of traffic to JSE for inspection.

Mist now offers automated Juniper Secure Edge connector tunnel provisioning. This feature allows you to effortlessly establish connections using predefined settings.

Prerequisites

Configure Secure Edge Connector Auto-Provisioning

Watch the following video to understand how to set up Secure Edge Connector auto provisioning:

Add Juniper Secure Edge Connector Credentials in Juniper Mist Portal

Provide the Juniper Secure Edge credential details in the Mist portal.

  1. From the left menu, select Organization > Settings.
  2. Scroll down to the Secure WAN Edge Integration section and click Add Credentials.
  3. In the Add Credentials window, enter the details.
    Figure 1: Add Credentials for Juniper Secure Edge Add Credentials for Juniper Secure Edge
    • Provider—Select JSE.
    • Email Address—Enter an e-mail address. There are the credentials of the user created on the Juniper Security Director Cloud portal.
    • Password—Enter password for the e-mail address you provided.
  4. Click Save to continue.

Configure Juniper Secure Edge Tunnel Auto-Provisioning

  1. On the Mist portal, go to Organization > WAN Edge Templates and click an existing template.
  2. Scroll to the Secure Edge Connectors section.
  3. Click Add Provider.
    Figure 2: Add Provider Add Provider
  4. In Add Provider side panel, select Juniper Secure Edge (Auto) as the Provider for automatic provisioning.
    Figure 3: Select Juniper Secure Edge as Provider Select Juniper Secure Edge as Provider
    Enter the following details:
    • Name—Enter a name for the JSE tunnel.
    • Provider—Select Juniper Secure Edge (Auto).
    • Probe IP—Enter probe IPs (primary and secondary). Enter probe IP 8.8.8.8 or any other well-known probe IP address.
    • WAN Interface—Assign WAN interfaces under Primary and Secondary for provisioning of primary and secondary tunnels.
  5. Click Add.
  6. In the Secure Edge Connector Auto Provision Settings section, click JSE, then enter the details. This option is available only if you have configured Juniper Secure Edge as provider in the previous step.
    Figure 4: Secure Edge Connector Auto Provision Settings Secure Edge Connector Auto Provision Settings
    • Number of Users—Enter the maximum number of users supported by the JSE tunnel.

    • Organization Name—Enter the organization name. The drop-down box displays all organizations associated with the user name in Juniper Secure Edge account. This is the same user name that you have entered in Juniper Secure Edge credential in Organization > Settings > Secure WAN Edge Integration > Add Credentials. See step 1 for details.

  7. Click Add to continue.

When a WAN Edge template enabled with the Juniper Secure Edge (Auto) gets assigned to a site, an associated JSE site (location object) is automatically created and a tunnel from the device to the closest network point of presence (POP) is brought up.

For the Secure Edge Connector configuration to take effect, you must create an application policy directs traffic from the Mist Secure Edge Connector to the Juniper Secure Edge via the appropriate traffic steering. See Traffic Steering and Configure an Application Policy for more information.

Verify Juniper Secure Edge Tunnels

On the Mist portal, you can verify the established tunnel's details in WAN Edges > WAN Edges, then click WAN Edge Insights. You should see the WAN Edge Tunnel Auto Provision Succeeded event under WAN Edge Events.

Figure 5: WAN Edge Events WAN Edge Events

Get the established tunnel's status details by navigating to WAN Edges > WAN Edges, then scroll down to the Secure Edge Connector Details section.

Figure 6: Established Secure Edge Tunnels Established Secure Edge Tunnels

You can check the established tunnels in the Juniper Security Director Cloud dashboard and in the service location.