Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.
  • 1.  SSG-350m with DP,anti-virus,anti-spam,webfilter

    Posted 10-05-2012 22:49

    hi ,

    we have 350m firewall with screen os 6.3 and we are going to buy another one to use high availability but i have some question of them jorisk had asked but the other is  :

     

    1)how do the anti-spam work ?

    2)how do the DI work?

    3)what is the different between Di and IDP?

     

    Many thanks!



  • 2.  RE: SSG-350m with DP,anti-virus,anti-spam,webfilter

     
    Posted 10-06-2012 01:00

    Hello,

     

    PFB the answers :

     

    1)how do the anti-spam work ?

     

    [Sarab] : Anti-spam checks the mail headers for SMTP traffic and sends the Domain/Ip info to its Anti-spam server for checking. And based on the reply it takes the action.

    you can refer the below KBs for more details :

     

    http://kb.juniper.net/KB/KB24876

     

    2)how do the DI work?

     

    [Sarab] : DI is a small scale IDP fuctionality available on FW. You apply it on policy and the traffic matching that policy is scanned.

    3)what is the different between Di and IDP?

     

    [Sarab] It is same as IDP however at small scale . It has a database of DI signatures which it uses to scan the traffic that matches the policy where DI is enabled.



  • 3.  RE: SSG-350m with DP,anti-virus,anti-spam,webfilter

    Posted 10-06-2012 02:00

    ok

    but if i am going to change for srx do the :

    1)IDP

    2)Anti-virus

    3)web-filter

    4)Anti-spam

    still goin to be the same like ssg or going to be change 

    my main point here is if i will buy srx and use integrated webfilter is it going to have its own database or will be the same like ssg and whta about the IDP,AV,AS...

     

     



  • 4.  RE: SSG-350m with DP,anti-virus,anti-spam,webfilter
    Best Answer

     
    Posted 10-06-2012 02:37
    Though I haven't worked on SRX , however as per my knowledge the basic working principal will be similar to Screen OS only.