`Case 3:17-cv-05659-WHA Document 415-4 Filed 04/05/19 Page 1 of 2
`
`
`
`
`
`EXHIBIT 3
`EXHIBIT 3
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`9/10/2018
`
`Case 3:17-cv-05659-WHA Document 415-4 Filed 04/05/19 Page 2 of 2
`Case 3:1sky@dv@p&59rAAlPidventiooeenseMbeblFechnichlihediMcht@bAlSuphdagenibepNAworks
`
`TechLibrary > Sky Advanced Threat Prevention Administration Guide
`
`Sky Advanced Threat Prevention License Types
`
`Sky ATP hasthree service levels:
`
`«
`
`e
`
`e
`
`) and for
`Free—Thefree model solutionis available on all supported SRX Series devices (see the Supported Platforms Guide
`customers that have a valid support contract, but only scans executable file types (see Sky Advanced Threat Prevention Profile
`Overview). Based onthis result, the SRX Series device can allow thetraffic or perform inline blocking.
`
`Basic—Includes executable scanning and adds filtering Using the following threat feed types: Commandand Control, GeolP,
`Custom Filtering, and Threat Intel feeds. Threat Intel feeds use APIs that allow youto injects feeds into Sky ATP.
`
`Premium—lIncludesall features provided in the Free and Basic-Threat Feedslicenses, but provides deeper analysis.All file types
`are examined using several analysis techniques to give better coverage. Full reporting provides details about the threats found on
`your network.
`
`@
`
`Note: You do not need to download any additional software to run Sky ATP.
`
`Table 1 shows a comparison between the free model and the premium model.
`
`Table i: Comparing the SkyATP Free Model, Basic-ThreatFeed, andPremium Model
`
`Free Model
`
`Basic-Threat Feeds Model
`
`Premium Model
`
`Management through cloud
`interface. Zero-on premise
`footprint beyond the SRX
`Series device.
`
`Management through cloud
`interface. Zero-on premise
`footprint beyond the SRX
`Series device.
`
`Management through cloud interface.
`Zero-on premise footprint beyond the SRX
`Series device.
`
`Inbound protection.
`
`Inbound protection.
`
`Inbound protection.
`
`Outbound protection.
`
`Outbound protection.
`
`Outbound protection.
`
`C&C feeds.
`
`C&C feeds.
`
`GeolP filtering.
`
`GeolP filtering.
`
`Custom feeds
`
`Custom feeds
`
`Infected host based on C&C
`
`feed, but not malware hit
`
`Infected host feed/endpoint quarantine
`
`Threat Intelligence APIs only
`
`All APIs including File/Hash
`
`C&C protection with event data returned to
`the Sky ATP cloud.
`
`
`
`https:/Avww.juniper.net/documentation/en_US/release-independent/sky-atp/topics/reference/general/sky-atp-licenses-overview.html
`
`1/2
`
`FINJAN-JN 400271
`
`