Description

AppSecure's Application Identification (AI) recognizes traffic at different layers using characteristics other than the port number. Once the application is determined, AppSecure service modules can be configured to monitor and control traffic for tracking, prioritization, access control, detection, and prevention based on the application ID of the traffic. The AppSecure service modules are:

  • Application Firewall (AppFW)
  • AppTrack
  • AppQoS
  • Intrusion Detection and Prevention (IDP)

This jumpstation focuses on the  Application Firewall (AppFW) service module.  Administration, configuration, and troubleshooting assistance for Application Firewall (AppFW) features on SRX devices running Junos OS 12.1X47 and above are provided.

 

Solution

Click a topic link to view references to the technical documentation and KB articles that help you with Application Firewall (AppFW) administration, configuration, and troubleshooting:

JumpStation - Application Firewall (AppFW)
AppSecure
AppSecure
Overview

 
Understanding
Application
Identification (AI)

Application
Identification (AI)
Prerequisites & Installation

 

Application
Identification (AI) Install Issues (KB31161)
[juniper.net]
 
Understanding application-system-cache output
(KB31091)
[juniper.net]
AppFW
Configuration
AppFW
Overview
AppFW
Configuration

Configuration Examples
for Common Scenarios
(KB31038)
[juniper.net]
 
   
AppFW
Troubleshooting

Configure & Troublehoot AppFW
(KB25255)
[juniper.net]
Verify AppFW config
(KB31097)
[juniper.net]

Verify AppFW signature
matching a rule-set
(KB31095)
[juniper.net]
 
Troubleshoot apps
not blocked
(KB26781)
[juniper.net]

Correlate Firewall apps with AppID apps
(KB26780)
[juniper.net]

Identify apps consuming bandwidth
(KB31092)
[juniper.net]

Enable heuristics detection for encrypted data packets
(KB31093)
[juniper.net]
 
Obtain AppFW signature details
(KB31089)
[juniper.net]
Optimize
AppFW ruleset
(KB31096)
[juniper.net]
 
What to collect for AppFW issues
(KB31042)
[juniper.net]
Quick
Links

SRX Technical Documentation

JTAC Recommended Releases
 
Learning Bytes (Videos)
PR
(Problem Report)
Search

 
 
Signature Links
Perform Offline
App Sig DB update
(TN83)

 

Update IDP/AppID signature offline with multiple SRX devices
(KB31150)
[juniper.net]
Generate License JDPI Decoder Release Notes

Modification History

2019-06-23: Content reviewed for accuracy.