a telnet to port 80

a TCP packet with the SYN and ACK flags set

an SNMP getnext request

an ICMP packet larger than 1024 bytes

integrated Web filtering

local Web filtering

redirect Web filtering

content filtering

show security utm anti-virus status

show security anti-virus database status

show security utm anti-virus database

show security utm anti-virus update

from-zone UNTRUST to-zone TRUST { policy DenyServer { match { source-address any; destination-address any; application any; } then { deny; } } } from-zone TRUST to-zone UNTRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }

from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then {deny; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }

from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-ftp; } then { permit; } } }

from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then { permit; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match {source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }

pass-through with Web redirect

WebAuth with HTTP redirect

WebAuth

pass-through

Websense redirect Web filtering

local Web filtering (blacklist or whitelist)

firewall user authentication

ICAP

One UTM cluster license will activate UTM features on both members.

Each device will need a UTM license generated for its serial number.

Each device will need a UTM license generated for the cluster, but licenses can be applied to either member.

HA clustering automatically comes with UTM licensing, no additional actions are needed.

set apply-groups node$

set apply-groups (node)

set apply-groups $(node)

set apply-groups (node)all

security

functional

junos-global

management