Juniper Junos OS, Руководство по началу работы

Страница: 65 / 158

CHAPTER 8
Configuring UTM for Branch SRX Series
• Understanding Unified Threat Management for Branch SRX Series on page 49
• Example: Configuring Unified Threat Management for a Branch SRX Series on page 51
•
Default UTM Policy for Branch SRX Series on page 54
•
Predefined UTM Profile Configuration for Branch SRX Series on page 54
Understanding Unified Threat Management for Branch SRX Series
Unified Threat Management (UTM) is an optional function for the branch SRX Series
that provides an integrated suite of network security features to protect against multiple
threat types including spam and phishing attacks, viruses, trojans and spyware infected
files, unapproved website access, and unapproved content.
With UTM, you can implement a comprehensive set of security features that include
antispam, antivirus, Web filtering, and content filtering protection.
The UTM features provide the ability to prevent threats at the SRX Series device before
the threats enter the network.
The following UTM modules are supported:
• Antispam—Antispam blocks and filters unwanted e-mail traffic by scanning inbound
and outbound SMTP e-mail traffic by using some combination of spam block lists
(SBL) and user-configured blacklists and whitelists.
•
Antivirus—Antivirus feature uses an integrated scanning engine and virus signature
databases to protect against viruses, trojans, rootkits, worms, and other types of
malicious code from reaching devices on your network.
•
Web filtering—Web filtering allows you to permit or block access to specific websites
individually or based on the categories to which the website belongs.
• Content filtering—Content filtering provides basic data loss prevention functionality.
Content filtering filters traffic based on MIME type, file extension, and protocol
commands.
The SRX Series has predefined system profiles (antispam, antivirus, or Web filtering)
designed to provide basic protection. You can use a predefined profile to bind to the UTM
policy or you can also create a component (antispam, antivirus, Web filtering, or content
filtering) profile.
49 Copyright © 2016, Juniper Networks, Inc.