April, 2018 Release
New and Changed Features: April, 2018
IPv6 support
IPv6 addresses are now supported for all Juniper Sky ATP features including Command and Control, Blacklist, Whitelist, IP filtering, and GeoIP feeds. Note that references to “IPv4” in open API calls have changed to “IP.” This may impact your current API configurations.
Office365 feed
Push Microsoft Office 365 services endpoint information to the SRX Series Firewall for use in security policies. The office365 feed works differently from other third-party feeds and requires specific configuration parameters, including a pre-defined name of “ipfilter_office365.” Enable the Office365 feed on Juniper Sky ATP through Configure > Third Party Feeds.
User Notification of Infected Hosts
This is configured using the CLI on the SRX Series Firewall (support starting in Junos OS 18.1R1). During the processing of a session IP address, if the IP address is on the infected hosts list and HTTP traffic is using ports 80 or 8080, infected hosts HTTP redirection to a specified URL can be configured.
[See Juniper Advanced Threat Prevention Cloud CLI Reference Guide.]