Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

advanced-anti-malware connection

date_range 26-Jun-24

Syntax

content_copy zoom_out_map
set services advanced-anti-malware connection (authentication | source-address | source-interface | url)

Description

Configures the cloud connection, including the hostname, port number and authentication information. Once configured, a certificate-based mutual authentication and TLS connection is established between the SRX Series Firewall and Juniper ATP Cloud. The SRX Series Firewall receives configurations from the cloud and sends health data back to the cloud.

You can also use the op script to perform the same operations as the set services advanced-anti-malware connection command. To download the Junos op script, see Download and Run the Juniper ATP Cloud Script.

For SRX300, SRX320, SRX340, SRX345 and SRX500 Series Firewalls, you must run the set security forwarding-process enhanced-services-mode command before running the op script or before running the set services advanced-anti-malware connection command. For example:

content_copy zoom_out_map
user@host> set security forwarding-process enhanced-services-mode
user@host> set services advanced-anti-malware connection url https://xxx.xxxx.junipersecurity.net
user@host> set services advanced-anti-malware connection authentication tls-profile aamw-ssl
We recommend that you use the op script instead of using the set services advanced-anti-malware connection command.

Use the show services advanced-anti-malware status CLI command to verify that connection is made to the cloud server from the SRX Series Firewall. If you do not see entries, we recommend you rerun the op script.

Options

authentication tls-profile profile-name

Name of the TLS profile that contains settings for the TLS-secured connection.

source-address address

The source IP address to send files to the cloud.

source-interface interface

The source interface to send files to the cloud. If you configure the source-interface but not the source-address, the SRX Series Firewall uses the IP address from the specified interface for connections.

url url

The URL of the cloud. You can optionally specify a port if needed. For example, https://www.juniper-threat-prevent-cloud.net:443.

Required Privilege Level

View

Output Fields

This command produces no output.

Sample Output

set services advanced-anti-malware connection url

content_copy zoom_out_map
user@host# set services advanced-anti-malware connection url https://sky.junipersecurity.net

set services advanced-anti-malware connection authentication

content_copy zoom_out_map
user@host# set services advanced-anti-malware connection authentication tls-profile aamw-ssl

Release Information

Command introduced in Junos OS Release 15.1X49-D33.

footer-navigation