February 26, 2024 Release

General

Japanese language support—You can now view the GUI on the Juniper Security Director Cloud portal in the Japanese language. To see the GUI in the Japanese language, go to http://sdcloud.juniperclouds.net and select the Japanese language from the Set Language drop-down menu, and log in with your credentials.

SSO with SAML 2.0—Juniper Security Director Cloud supports single sign-on (SSO) with SAML 2.0 protocol. SSO is an authentication method that you can use to securely log in to multiple applications and websites with a single set of credentials.

You can configure SSO to sign in to the Juniper Security Director Cloud portal using external identity providers (IdPs) such as Okta or Microsoft Azure. [See Single Sign-On Configuration Overview.]

Security Subscriptions

Support for Juniper NextGen Web filtering—Juniper NextGen intercepts the HTTP and HTTPS traffic and sends the URL or the destination IP address information to the Juniper NextGen Web Filtering (NGWF) Cloud. The SRX Series Firewall uses URL categorization and site reputation information from the NGWF Cloud to act on traffic.

To use this Web filtering option, you must have Junos OS Release 23.3R1 or later installed. Use these options on the Juniper Security Director Cloud portal to configure this Web filtering option:

• Engine Type and URL Categories fields on the Web Filtering Profiles page.

  Now, you can view Juniper NextGen in the Category column on the URL Categories page.

• Security Subscriptions field on the Security Policy Rules page.

• Web Filtering field on the Content Security Profiles page.

[See Create a Web Filtering Profile.]

Security Subscriptions

CASB inline cloud application activity controls—You can configure rules to control activities on the cloud applications for a Cloud Access Security Broker (CASB) profile. Juniper Secure Edge now supports the following newly added cloud applications and features:

• Gmail—Login, Read, Compose, Send, Upload Attachment, and Download Attachment

• SharePoint—Login, Upload, Download, and Share

• Slack—Login, Chat, Audio/Video, and File Transfer

[See Add Rules to a CASB Profile.]

Service Management

Sites—You can now see a hierarchy-based structure on the Sites page (Secure Edge > Service Management > Sites). You can also perform the following tasks:

• Expand the specific site name to view details about the customer premises equipment (CPE) devices on the Sites page.

• Enable external probe settings when creating a site.

• Configure the following Traffic Forwarding settings:

  • Two or more CPE devices for a single site

  • External interfaces to CPE devices

  • One or more tunnels to a CPE device depending on the number of users per site

  • Tunnel type as either IPsec or GRE to forward the traffic

• Configure CPE routing settings such as the primary service location.

[See About the Sites Page.]

External Probe

External Probe—You can now configure the probe settings to enable external probe for a site. With this configuration, customer premises equipment (CPE) devices can monitor the tunnel health status. To navigate to the External Probe page, select Secure Edge > Service Management > External Probe.

[See About the External Probe Page.]

Administration

Log streaming—With log streaming, you can now forward audit logs, session logs, and security events from Juniper Secure Edge Cloud to an external security information and event management (SIEM) system via webhook, such as Microsoft Sentinel. On the Log Streaming page, you can configure the type of log to forward to the external SIEM system. [See About the Log Streaming Page.]

Additionally, you can create a log stream report. You can create a report for the current or previous month or the entire period of data transfer to the SIEM system. [See Create Log Streaming Report Definitions.]

Identity Management

User group retrieval from Microsoft Entra ID and Okta—You can now configure the identity provider (IdP) settings in Juniper Secure Edge to retrieve user group information from Microsoft Entra ID (previously known as Azure Active Directory) and Okta. Prior to this release, you had to deploy on-premises Juniper® Identity Management Service (JIMS) collector to retrieve user group information from Active Directory.

To retrieve user group information, log in to the Juniper Security Director Cloud portal, navigate to Secure Edge > Identity > User Authentication > SAML, and enter the required information to configure IdP. Juniper Secure Edge receives user group information from Microsoft Entra ID or Okta. You can use the user groups to manage security policies.

[See About the End User Authentication Page.]