security director insight

Security Director Insights

© 2020 Juniper Networks

Juniper Business Use Only

1

Juniper Connected Security SEE Dynamic detection, protection & mitigation

Extend security to all points of connection across the network— safeguard users, applications, and infrastructure.

© 2020 Juniper Networks

AUTOMATE Continuous enforcement and remediation

PROTECT Streamlined security operations

Juniper Business Use Only

2

Security Director Insights

Monitor

Combine the power of network and security monitoring of SD with advanced threat insights from ATP to create mitigation playbooks for maximum management efficiency

Threataware Orchestrate

© 2020 Juniper Networks

Juniper Business Use Only

3

SD Insights Value Proposition

Unify security infrastructures

Increase SOC productivity

Leverage existing investments

• Consolidated incident management • Cross product alert coordination to improve security posture

• Mindful automation • High fidelity signal assurance

• Robust 3rd party integrations • Simplify and validate security investment across disparate products

© 2020 Juniper Networks

Juniper Business Use Only

4

SD Insights Use Case: Incident Management

Ingest and normalize

© 2020 Juniper Networks

Map context

Correlate events

Juniper Business Use Only

Simplify mitigation

5

SD Insights Use Case: Automated mitigation

Raw data events Risk triage Is it real? Remediate © 2020 Juniper Networks

Juniper Business Use Only

6

SD Insights Use Case: Security Analytics Command and Control

Encrypted Command and Control

Dynamic Detection

Network anomalies

Authentication anomalies © 2020 Juniper Networks

Juniper Business Use Only

7

Adding Security Director Insights Node

© 2020 Juniper Networks

Juniper Business Use Only

8

Add SDI Node Navigate: Administration à Insight Management à Insight Nodes Provide IP of SDI Insights nodes along with username and password.

© 2020 Juniper Networks

Juniper Business Use Only

9

Mitigation Settings

© 2020 Juniper Networks

Juniper Business Use Only

10

Adding Mitigation Navigate: Administration à Insight Management à Mitigation Settings Add your ATP Cloud Application Token or Policy Enforcer as the mitigation option If you are using Policy Enforcer for mitigation, then please make sure you create custom feeds in Policy Enforcer. For creating custom feeds please navigate to Configure-->Threat Prevention--> Feed Source

© 2020 Juniper Networks

Juniper Business Use Only

11

Incident Visibility

© 2020 Juniper Networks

Juniper Business Use Only

12

© 2020 Juniper Networks

Juniper Business Use Only

1313

© 2020 Juniper Networks

Juniper Business Use Only

1414

© 2020 Juniper Networks

Juniper Business Use Only

15

© 2020 Juniper Networks

Juniper Business Use Only

16

© 2020 Juniper Networks

Juniper Business Use Only

17

© 2020 Juniper Networks

Juniper Business Use Only

18

© 2020 Juniper Networks

Juniper Business Use Only

19

© 2020 Juniper Networks

Juniper Business Use Only

20

© 2020 Juniper Networks

Juniper Business Use Only

21

Thank you

© 2020 Juniper Networks

Juniper Business Use Only

22