Configure Encrypted Traffic Insights

date_range 07-Apr-25

arrow_backward

arrow_forward

Before You Begin

Enroll the SRX Series Firewall to Juniper ATP Cloud. For more information, see Enroll an SRX Series Firewall Using the CLI.

To enable encrypted traffic insights on SRX Series Firewalls, include the following CLI configurations:

Configure the security-metadata-streaming policy.

content_copy zoom_out_map
set services security-metadata-streaming policy sms_policy http detections encryptedc2 action permit
set services security-metadata-streaming policy sms_policy http detections encryptedc2 notification log

Attach the security-metadata-streaming policy to a security firewall policy.

content_copy zoom_out_map
set security policies from-zone trust to-zone untrust application-services security-metadata-streaming-policy sms_policy
set security policies from-zone untrust to-zone trust application-services security-metadata-streaming-policy sms_policy

Commit the configuration.
```
commit
```

Use the show services security-metadata-streaming http statistics command to view the statistics of security metadata streaming policy.

show services security-metadata-streaming http statistics

content_copy zoom_out_map
show services security-metadata-streaming http statistics
Security Metadata Streaming session statistics:
  Session inspected:    10
  Session whitelisted:   0
  Session detected:      6

Security Metadata Streaming submission statistics:
  Records submission success:         8
  Records submission failure:         2

To view the list of servers that are allowlisted for encrypted traffic insights, use the show services security-metadata-streaming http whitelist command.

show services security-metadata-streaming http whitelist

content_copy zoom_out_map
show services security-metadata-streaming http whitelist

No. IP-start IP-end Feed Address
1 192 0.5.0 192.0.5.1 eta_custom_whitelist ID-80001400

arrow_backward PREVIOUS Encrypted Traffic Insights Overview

NEXT arrow_forward Adaptive Threat Profiling Overview

Juniper ATP Cloud Administrator Guide

Configure Encrypted Traffic Insights

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry