Page Comparison

...

AppSec License

Code Block

title	show license

root@vsrx1> show services application-identification version
  Application package version: 0

root@vsrx1> request services application-identification download
Download failed. Error: Require application identification license

Check appID: status and version

version

show services application-identification version

Code Block

title	version
collapse	true

root@srx320> show services application-identification version
  Application package version: 3327

status

show services application-identification status

Code Block

title	status
collapse	true

root@srx320> show services application-identification status

Application Identification
 Status                            Enabled
 Sessions under app detection      25
 Max TCP session packet memory     0
 Force packet plugin               Disabled
 Force stream plugin               Disabled
 Statistics collection interval    1440 (in minutes)

Application System Cache
 Status                            Enabled
 Max Number of entries in cache    131072
 Cache timeout                     3600 (in seconds)

Protocol Bundle
 Download Server                   https://signatures.juniper.net/cgi-bin/index.cgi
 AutoUpdate                        Disabled
Slot 1:
 Application package version       3327
 Status                            Active
 PB Version                        1.460.2-46 (build date Oct 11 2020)
 Engine version                    4.20.0-111 (build date Oct 11 2020)
 Sessions                          29

2- download the IDP signatures

request services application-identification download

request services application-identification download status

Code Block

title	download
collapse	true

root@srx320> request services application-identification download
Please use command
        "request services application-identification download status" to check download status

root@srx320> request services application-identification download status
Fetching/Uncompressing https://signatures.juniper.net/xmlupdate/226/Libqmprotocols/1.460.2-46/libqmprotocols.tgz

root@srx320> request services application-identification download status
Downloading application package 3327 succeeded.

3- install the IDP signatures

request services application-identification install

request services application-identification install status

Code Block

title	install
collapse	true

root@srx320> request services application-identification install
re0:
--------------------------------------------------------------------------
Please use command
        "request services application-identification install status" to check install status

root@srx320> request services application-identification install status
Checking compatibility of application package version 3327 ...

root@srx320> request services application-identification install status
Checking compatibility of application package version 3327 ...

root@srx320> request services application-identification install status
Installed
        Application package (3327) and Protocol bundle successfully

4- show the application signatures

show services application-identification application summary
show services application-identification application summary | no-more

show services application-identification application summary | count

Code Block

title	application signature
collapse	true

root@srx320> show services application-identification application summary
Application(s): 4401
  Applications                                  Disabled         ID
  junos:POWER-BI                                No               3287
  junos:SLACKER                                 No               1179
  junos:TELETICA                                No               2876
  junos:AMJILT                                  No               2272
  junos:GOOGLE-TRUSTED-STORE                    No               2819
  junos:EKSISOZLUK                              No               2436
  junos:CRAZYSALOON                             No               1720

4- show the application's group

show services application-identification group summary

Code Block

title	app group
collapse	true

root@srx320> show services application-identification group summary
Application Group(s): 91
Application Groups                                Disabled  ID
  junos:behavioral                                 No        94
  junos:unassigned                                 No        89
  junos:web:proxy                                  No        48
  junos:remote-access:interactive-desktop          No        34

5- Configuration

set security zones security-zone Internet application-tracking

Code Block

title	application-tracking
collapse	true

root@srx320> show configuration security zones
security-zone Internal {
    host-inbound-traffic {
        system-services {
            all;
        }
        protocols {
            all;
        }
    }
    interfaces {
        irb.0;
    }
    inactive: application-tracking;
}
security-zone Internet {
    screen untrust-screen;
    interfaces {
        ge-0/0/0.0 {
            host-inbound-traffic {
                system-services {
                    tftp;
                    dhcp;
                }
            }
        }
        ge-0/0/7.0 {
            host-inbound-traffic {
                system-services {
                    tftp;
                    dhcp;
                    ssh;
                    http;
                    netconf;
                    snmp;
                }
            }
        }
    }
    application-tracking;
}

Counters

show services application-identification counter

Code Block

title	counter
collapse	true

root@srx320> show services application-identification counter
pic: 0/0
  Counter type                                                      Value
 Unknown applications                                                    1813
 Encrpted unknown applications                                           0
 Cache hits pkt-plugin                                                   16977
 Cache hits stream-plugin                                                0
 Cache misses pkt-plugin                                                 9155
 Cache misses stream-plugin                                              0
 Client-to-server packets processed                                      35996
 Server-to-client packets processed                                      39983
 Client-to-server bytes processed                                        10656429
 Server-to-client bytes processed                                        28708287
 Client-to-server encrypted packets processed                            0
 Server-to-client encrypted packets processed                            0
 Client-to-server encrypted bytes processed                              0
 Server-to-client encrypted bytes processed                              0
 Sessions bypassed due to resource allocation failure                    0
 Segment case 1 - New segment to left                                    10
 Segment case 2 - New segment overlap right                              14
 Segment case 3 - Old segment overlapped                                 0
 Segment case 4 - New segment overlapped                                 0
 Segment case 5 - New segment overlap left                               0
 Segment case 6 - New segment to right                                   68

statistics

application

show services application-identification statistics applications

Code Block

title	applications
collapse	true

root@srx320> show services application-identification statistics applications
Last Reset: 2020-11-03 07:11:51 GMT
                      Application           Sessions              Bytes    Encrypted
                      ACCUWEATHER                 16              45933           No
                           ADJUST                 24             163942           No
                       AKAMAI-SSL                  1             143107           No
                       AMAZON-AWS                221            5835304           No
                   ANDROID-CNXMGR                 14              18623           No
     ANDROID-MARKETPLACE-DOWNLOAD                164            1225760           No
             APPLE-IOS-UPDATE-SSL                 22              84462           No
                   APPLE-LOCATION                  1               6090           No
                       APPLE-PUSH                 11             185495           No
                           BRANCH                  6              50322           No
                        BYTEDANCE                  5              49088           No
                      CRASHLYTICS                378            2549047           No
                              DNS               9944            2246925           No
                  FACEBOOK-ACCESS                933            8660055           No
               FACEBOOK-MESSENGER               1224            6825118           No
                           FASTLY                 72             885141           No
                           GOOGLE                330            8136235           No
                  GOOGLE-ACCOUNTS                  1               9832           No
                       GOOGLE-ADS                 84             442821           No
        GOOGLE-ANALYTICS-TRACKING                 25             225186           No
                 GOOGLE-APPENGINE                  7              35117           No
                     GOOGLE-CACHE                 42             315990           No
                       GOOGLE-GEN                 57          199408864           No
                    GOOGLE-PHOTOS                  1               4977           No
            GOOGLE-SAFEBROWSE-SUB                  1               8124           No
                    GOOGLE-STATIC                241            1408398           No
                       GOOGLETALK                  9             884796           No
                   HOTSPOT-SHIELD                 78           69317250           No

application-group

show services application-identification statistics application-groups

Code Block

title	applciation-group
collapse	true

root@srx320> show services application-identification statistics application-groups
Last Reset: 2020-11-03 07:11:51 GMT
                                              Application Group           Sessions        Kilo Bytes
                                           junos:infrastructure              17839            906611
                                junos:infrastructure:encryption               5059            834700
                              junos:infrastructure:file-servers                  2                24
                                    junos:infrastructure:mobile                 47                46
                                junos:infrastructure:networking              12634              2618
                           junos:infrastructure:networking:icmp               2548               405
                                                junos:messaging               1385              9211
                              junos:messaging:instant-messaging                 31              1444
                                               junos:multimedia                 61              9747
                               junos:multimedia:audio-streaming                 44              9330
                               junos:multimedia:video-streaming                 17               416
                                            junos:remote-access                 18              7492
                                    junos:remote-access:command                 10              7433
                        junos:remote-access:interactive-desktop                  8                59
                                  junos:remote-access:tunneling                 10              7433
                                               junos:unassigned                112            121480
                                                      junos:web               4976           1589451
                                       junos:web:advertisements                 84               432
                                         junos:web:applications                574            193286
                                                  junos:web:cdn                240              1506
                                        junos:web:image-sharing                 36               313
                                       junos:web:infrastructure                 22                82
                       junos:web:infrastructure:software-update                 22                82
                                           junos:web:multimedia                484           1253062
                                     junos:web:multimedia:adult                  4               700
                                 junos:web:multimedia:web-based                480           1252362
                                               junos:web:portal                330              7945
                                             junos:web:shopping                  4               101
                                    junos:web:social-networking               1060              9983
                       junos:web:social-networking:applications                130              1548
                           junos:web:social-networking:facebook                930              8435

...

Versions Compared

Old Version 13

New Version 14

Key

2- download the IDP signatures

3- install the IDP signatures

4- show the application signatures

4- show the application's group