You want to block executable files ("exe) from being downloaded onto your network. Which UTM feature would you use in this scenario?

Content filtering is the Unified Threat Management (UTM) feature designed to enforce policies based on the content of network traffic. It inspects data and can block or permit traffic based on specific criteria such as file extension (e.g., .exe), MIME type, or protocol commands. This allows an administrator to create a policy that specifically prevents executable files from being downloaded, regardless of their source or whether they contain known malware.

A. IPS: An Intrusion Prevention System (IPS) primarily detects and blocks network traffic associated with known exploits, vulnerabilities, and anomalous behavior, not enforce policies based on general file types.

B. Web filtering: Web filtering controls access to websites based on their URL, category, or reputation. It determines where a user can go, not what specific file types they can download from an allowed site.

D. antivirus: The antivirus feature scans files for known malware signatures. It would only block an .exe file if it were identified as malicious, not all .exe files as required by the policy.

1. Juniper Networks TechLibrary

UTM Feature Guide for Security Devices: "Content filtering blocks or permits certain types of traffic based on the MIME type

file extension

and protocol command. For HTTP

you can configure a list of blocked MIME types and a list of blocked file extensions." This directly supports using content filtering to block .exe files.

URL: https://www.juniper.net/documentation/us/en/software/junos/utm/topics/concept/utm-content-filtering-overview.html

2. Juniper Networks TechLibrary

UTM Feature Guide for Security Devices: "Web filtering lets you manage Internet usage by preventing access to inappropriate Web content... It evaluates each request for a Web page and determines whether to block or permit the request based on the information returned by the Web filtering category server." This confirms Web filtering is for URL/category control.

URL: https://www.juniper.net/documentation/us/en/software/junos/utm/topics/concept/utm-web-filtering-understanding.html

3. Juniper Networks TechLibrary

Intrusion Detection and Prevention (IDP) Overview: "IDP provides a comprehensive set of attack detection and prevention features. IDP policies enforce the rules for traffic passing through your network

taking preventive actions against attacks." This defines the role of IPS/IDP in attack prevention

not file type policy enforcement.

URL: https://www.juniper.net/documentation/us/en/software/junos/idp-policy/topics/concept/idp-overview.html