Datasheet

�

OneConfig’s Dynamic Security Feed enables devices to subscribe to a service to dynamically update their security policies. OneConfig’s Office 365 (O365) feed ensures customers can keep their security policies current without having to manually update their firewalls each time Microsoft makes a change to their O365 end point URLs and IP addresses.

Service Description OneConfig is a cloud based management platform for Juniper environments. The Dynamic Security Feed for O365 is a security feature within OneConfig’s platform for SRX and vSRX devices.

How it Works Juniper SRX and vSRX devices include a dynamic address feature within Junos that allows them to subscribe to feeds. Using this feature, the device is configured to subscribe to OneConfig’s O365 feed. OneConfig’s feed connection is secure and authenticated on a per device basis.

Once subscribed the SRX or vSRX pulls down regular updates on a pre-determined short-cycle interval to ensure the security policy updates are kept in sync with Microsoft’s changes.

Figure 1: OneConfig Dynamic Security Feed Overview

Data is pulled down by the SRX or vSRX from OneConfig and automatically added to the dynamic address list. No commits are required for the list updates to take affect. Once the device has been configured to receive feeds from OneConfig there is nothing further to install or maintain with this service.

OneConfig Copyright 2017-2018

Dynamic Security Feed for Office 365

Datasheet

�

Notes:  1. Recommended for SRX300, SRX550, SRX1500, SRX4000, SRX5000 Series devices, plus vSRX. (May also be suitable for some older SRX devices, dependent on Junos version support.) 2. OneConfig subscription required. 3. An initial reboot of the SRX may be require if enhanced services mode is not already activated.

More about OneConfig Cloud Based Management for Juniper Networks OneConfig’s Cloud based management platform enhances the power of Junos to make deployment, configuration and ongoing management of Juniper environments incredibly easy. Below are some key management and configuration features available in OneConfig:• Zero Touch Provisioning • Security Policies, Zones, NAT, Applications • IPSec VPNs • Advance Policy-Based Routing (APBR) • IDP Configuration • DHCP Pools and Bindings • Static Routes • Interfaces, Aggregated Ethernet • Configuration Audit and Backup • Bulk Updates • Automated Commit Confirmed

• Software Image Library • Automated Software Distribution • Performance Graphs • VLANs and VLAN Ranges • Alerts and Alarms • License Tracking • Granular Security Reports for AppSecure, Sky ATP,

UTM • Two factor authentication • Packet capture • Supported devices - NFX, SRX, vSRX, EX, QFX

About OneConfig OneConfig is a developer of innovative tools for the Juniper ecosystem and is headquartered in Sydney, Australia with offices in Cape Town, South Africa and London, UK. OneConfig solutions support companies from a broad range of industries including Retail, Education, Healthcare, Enterprise and Service Provider. Our goal is to help our customers to significantly increase their capabilities and efficiencies in managing virtual and physical Juniper devices, whether geographically dispersed or centralised, all through a single pane web-based portal. Juniper Networks is an investor in OneConfig.

Contact Details Suite 2, 1 Rialto Lane, Manly, NSW, 2095, Australia Phone: +61.2.8188.1022 Web: www.oneconfig.com Twitter: www.twitter.com/oneconfig Contact: info@oneconfig.com

OneConfig Copyright 2017-2018

Challenge Microsoft’s Office 365 offering requires internet connectivity to enable users to reach multiple O365 endpoints. The list of endpoints changes regularly making it hard for network administrators to keep security policies up to date.

Solution OneConfig’s Dynamic Security Feed solution provides a subscription service for security devices that enables effortless, dynamic updates. This ensures security policies are updated as soon as Microsoft changes it’s infrastructure endpoints.

Benefits OneConfig’s Dynamic Security Feed for O365 ensures service continuity for business users. It removes monotonous manual updates, freeing up senior engineers to focus on higher value tasks. Offered as a service, there is no hardware of software to buy, install or maintain.