Hello,
PFB the answers :
1)how do the anti-spam work ?
[Sarab] : Anti-spam checks the mail headers for SMTP traffic and sends the Domain/Ip info to its Anti-spam server for checking. And based on the reply it takes the action.
you can refer the below KBs for more details :
http://kb.juniper.net/KB/KB24876
2)how do the DI work?
[Sarab] : DI is a small scale IDP fuctionality available on FW. You apply it on policy and the traffic matching that policy is scanned.
3)what is the different between Di and IDP?
[Sarab] It is same as IDP however at small scale . It has a database of DI signatures which it uses to scan the traffic that matches the policy where DI is enabled.