Enable Mist Integration with Juniper ATP Cloud

You can integrate Mist with Juniper ATP Cloud to share threat alerts detected by Juniper SRX Series Firewalls and ATP Cloud with Mist customers. The threat alerts allows administrators to quickly assess security risks when users and devices are connected to wireless networks and take appropriate actions, such as quarantine or enforce security policies.

The threat alerts shared by Juniper ATP Cloud with Mist includes malware downloads from web sites, attempts to access malicious e-mail attachments, C&C hits (including Encrypted Traffic Insights C&C hits), and host status changes. The host status change includes mitigation events taken by the customer, such as resolving an event as Fixed, Ignored, or False Positive, on ATP Cloud Customer Portal.

Juniper ATP Cloud supports multiple Mist deployments that are connected to a single region. You can select the Mist to which you want to stream the security events.

Table 1 lists the Sample Mist cloud certificates that are used while deploying multiple Mist. The Mist cloud certificate is securely shared with the Mist customers for their current and future deployments.

Benefits of integrating Mist with Juniper ATP Cloud:

• Adds another layer of security to the robust mechanisms already in place within the Mist WLAN platform.

• Leverages artificial intelligence (AI) for tighter security, lower operational costs and optimized user experience.

• Quickly identifies devices on the network that are infected with malware and takes appropriate actions.

• Allows to track client hosts better as Mist supplies client MAC addresses to Juniper ATP Cloud.

  Note:

  MAC address is available with Mist integration even if Policy Enforcer is not used.