- play_arrow Overview
- play_arrow Juniper Advanced Threat Prevention Cloud Overview
- play_arrow Juniper Advanced Threat Cloud Prevention Setup
-
- play_arrow Juniper ATP Cloud Web Portal
- play_arrow Juniper ATP Cloud Web Portal Overview
-
- play_arrow Enroll SRX Series Firewalls in Juniper ATP Cloud Web Portal
- play_arrow Monitor Juniper ATP Cloud Features
- play_arrow Reports
- play_arrow Hosts
- play_arrow Identify Infected Hosts
- play_arrow Threat Sources
- play_arrow Identify Hosts Communicating with Command and Control Servers
- play_arrow IoT Device Discovery and Classification
- play_arrow Reverse Shell
- play_arrow Files
- play_arrow E-mails
- play_arrow Statistics
- play_arrow DNS
- play_arrow Encrypted Traffic Insights
-
- play_arrow Administration
- play_arrow Juniper ATP Cloud Administration
- Modify My Profile
- Create and Edit User Profiles
- Set Password
- Application Tokens Overview
- Create Application Tokens
- Multi-Factor Authentication Overview
- Configure Multi-Factor Authentication for Administrators
- Set Up Single Sign-on with SAML 2.0 Identity Provider
- Configure SSO Settings
- View Audit Logs
-
- play_arrow More Documentation
- play_arrow ATP Cloud Tech Library Page Links
-
Enable Mist Integration with Juniper ATP Cloud
You can integrate Mist with Juniper ATP Cloud to share threat alerts detected by Juniper SRX Series Firewalls and ATP Cloud with Mist customers. The threat alerts allows administrators to quickly assess security risks when users and devices are connected to wireless networks and take appropriate actions, such as quarantine or enforce security policies.
The threat alerts shared by Juniper ATP Cloud with Mist includes malware downloads from web sites, attempts to access malicious e-mail attachments, C&C hits (including Encrypted Traffic Insights C&C hits), and host status changes. The host status change includes mitigation events taken by the customer, such as resolving an event as Fixed, Ignored, or False Positive, on ATP Cloud Customer Portal.
Juniper ATP Cloud supports multiple Mist deployments that are connected to a single region. You can select the Mist to which you want to stream the security events.
Table 1 lists the Sample Mist cloud certificates that are used while deploying multiple Mist. The Mist cloud certificate is securely shared with the Mist customers for their current and future deployments.
Region | Target Mist Cloud | Mist ID |
|---|---|---|
ATP Cloud US | manage.mist.com | us-west-1 |
manage.gc1.mist.com | us-west2-a | |
manage.ac2.mist.com | us-east-1 | |
ATP Cloud EU | manage.eu.mist.com | eu-central-1 |
Benefits of integrating Mist with Juniper ATP Cloud:
Adds another layer of security to the robust mechanisms already in place within the Mist WLAN platform.
Leverages artificial intelligence (AI) for tighter security, lower operational costs and optimized user experience.
Quickly identifies devices on the network that are infected with malware and takes appropriate actions.
Allows to track client hosts better as Mist supplies client MAC addresses to Juniper ATP Cloud.
Note:MAC address is available with Mist integration even if Policy Enforcer is not used.
Before you integrate Mist with ATP Cloud, you must enroll SRX Series Firewalls in both Juniper ATP Cloud realm and Mist sites.
For information about enrolling SRX Series Firewalls in Juniper ATP Cloud realm, see Enroll an SRX Series Firewall Using Juniper ATP Cloud Web Portal.
For information on enrolling SRX Series Firewalls in Mist sites, visit the SRX Adoption page.
To enable Juniper ATP Cloud in the Mist site:
In the Juniper Mist menu, select Organization > Site Configuration.
The Sites page appears.
Click the site in which you want to enable Juniper ATP Cloud.
The site information page appears.
Scroll down the page and select the Enabled option in the Juniper ATP section.
Juniper ATP Cloud is now enabled in the Mist site.
Select the check box Send IP-MAC Mapping to Juniper ATP to receive Host IP and MAC Address.
To enable Mist integration in Juniper ATP Cloud portal:
