`Case 3:17-cv-05659-WHA Document 96-15 Filed 06/07/18 Page 1 of 3
`
`EXHIBIT 11
`EXHIBIT 11
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`Case 3:17-cv-05659-WHA Document 96-15 Filed 06/07/18 Page 2 of 3
`
`Sky Advanced Threat Prevention License Types
`
`Sky ATP has three service levels:
`
`• Free—The free model solution is available on all supported SRX Series devices (see
`the Supported Platforms Guide) and for customers that have a valid support contract,
`but only scans executable file types (see Sky Advanced Threat Prevention Profile
`Overview). Based on this result, the SRX Series device can allow the traffic or perform
`inline blocking.
`
`• Basic—Includes executable file scanning and adds filtering using the following threat
`feed types: Command and Control, GeoIP, Custom Filtering, and Threat Intel feeds.
`Threat Intel feeds use APIs that allow you to injects feeds into Sky ATP.
`
`• Premium—Includes all features provided in the Free and Basic licenses, but provides
`deeper analysis. All supported file types are scanned and examined using several
`analysis techniques to give better coverage. Full reporting provides details about the
`threats found on your network.
`
`NOTE: You do not need to download any additional software to run Sky ATP.
`
`Table 1 shows a comparison between the free model and the premium model.
`
`Table 1: Comparing the Sky ATP Free Model, Basic-Threat Feed, and
`Premium Model
`
`Free Model
`
`Basic-Threat Feeds Model
`
`Premium Model
`
`Management through
`cloud interface. Zero
`on-premise footprint
`beyond the SRX Series
`device.
`
`Management through cloud
`interface. Zero on-premise
`footprint beyond the SRX
`Series device.
`
`Management through cloud
`interface. Zero on-premise footprint
`beyond the SRX Series device.
`
`Inbound protection.
`
`Inbound protection.
`
`Inbound protection.
`
`Outbound protection.
`
`Outbound protection.
`
`Outbound protection.
`
`—
`
`—
`
`C&C feeds.
`
`C&C feeds.
`
`GeoIP filtering.
`
`GeoIP filtering.
`
`Custom feeds
`
`Custom feeds
`
`Infected host feed/endpoint
`quarantine
`
`Threat Intelligence APIs only
`
`All APIs including File/Hash
`
`Copyright © 2018, Juniper Networks, Inc.
`
`1
`
`JNPR-FNJN_29031_00555803
`
`
`
`Case 3:17-cv-05659-WHA Document 96-15 Filed 06/07/18 Page 3 of 3
`
`Table 1: Comparing the Sky ATP Free Model, Basic-Threat Feed, and
`Premium Model (continued)
`
`Free Model
`
`Basic-Threat Feeds Model
`
`Premium Model
`
`—
`
`—
`
`—
`
`—
`
`C&C protection with event data
`returned to the Sky ATP cloud.
`
`Compromised endpoint dashboard.
`
`Inspects only executable
`file types. Executables go
`through the entire pipeline
`(cache, antivirus, static
`and dynamic).
`
`Inspects only executable file
`types. Executables go through
`the entire pipeline (cache,
`antivirus, static and dynamic).
`
`No restrictions on object file types
`inspected beyond those imposed
`by the Sky ATP service. You can
`specify which file types are sent to
`service for inspection.
`
`Reporting with rich detail
`on malware behaviors.
`
`Reporting with rich detail on
`malware behaviors.
`
`Reporting with rich detail on
`malware behaviors.
`
`For more information on analysis techniques, see How is Malware Analyzed and Detected?.
`For additional information on product options, see the Sky ATP datasheet.
`
`For more information on this and premium license SKUs, contact your local sales
`representative.
`
`Additional License Requirements
`
`AppSecure functionality on the SRX Series device is a pre-requisite for the Sky Advanced
`Threat Prevention feature. Depending on the SRX Series platform, a separate license
`may be required to enable AppSecure. Please consult the SRX Series platform datasheet
`for the most accurate information.
`
`Modified: 2018-03-27
`
`2
`
`Copyright © 2018, Juniper Networks, Inc.
`
`JNPR-FNJN_29031_00555804
`
`