Juniper Advanced Threat Prevention Series

Juniper Advanced Threat Prevention (ATP) finds and blocks both known and unknown cyberthreats. Using machine learning and dynamic advanced malware analysis, ATP provides zero-day malware detection and uncovers botnet and command and control (C&C) threats hiding in encrypted traffic. Using SecIntel, Juniper's curated security threat intelligence feed across the network, ATP stops threats in their tracks by enforcing protection mechanisms at all points of connection on the network.

The Juniper Advanced Threat Prevention on-premises appliance collects and processes security events identified by the SRX and third-party security products. These ATP deployments offer you several benefits:

• Improve response times by automatically discovering and mitigating known and unknown threats.
• Use your existing infrastructure with an open ecosystem for detection and mitigation.
• Prioritize incidents quickly through clear and detailed context of an attack.

ATP products provide malware behaviors, C2 networks, file and domain reputation, and attack sequences through a combination of machine learning and globally sourced security intelligence, which is constantly updated to keep you a step ahead of the latest threats. ATP natively integrates with SRX Series and third-party firewalls to provide automated detection and remediation.

ATP also stops threats from spreading and causing collateral damage. It logs and keeps track of compromised hosts within your network, automatically quarantining them via the firewall, network access control, or switching infrastructure.

ATP Cloud includes Encrypted Traffic Insights, giving you visibility into threats in encrypted traffic without the burden of full TLS/SSL decryption. The SRX Series firewall collects the relevant data about the TLS/SSL connection, including certificates, negotiated cipher suites, and connection behavior. ATP Cloud processes this information and uses network behavioral analysis and machine learning to determine if the connection is benign or malicious. You can configure policies on the SRX firewall to block traffic identified as malicious.

The Juniper Advanced Threat Prevention on-premises appliance includes optional add-on comprehensive analytics, enabling it to ingest and correlate detection data from your secure web gateways, firewalls, endpoint security software, and other third-party security tools. In addition to helping protect and validate your security investments, the analytics are delivered in a consolidated view so your security analysts can quickly identify what's happened and focus on the highest-priority threats.