Juniper

Prerequisites

• A Juniper device that supports dynamic address feeds.
• A Trusteed account with access to the Noise-Aware IP blocklist feed.

Setup Steps

1. Log in to your Trusteed Console.
2. Go to Integrations → Firewalls → Juniper.
3. Click Connect under the Juniper logo and assign a unique integration name.
4. Copy the credentials (displayed once) for your Juniper configuration.
5. On the Juniper device, define the Trusteed feed server:

set security dynamic-address feed-server trusteed-feed description "Trusteed Feed"
set security dynamic-address feed-server trusteed-feed url https://<username>:<password>@api.trusteed.io


1. Configure the feed path and update interval:

set security dynamic-address feed-server trusteed-feed feed-name trusteed-blocklist description "Trusteed Feed"
set security dynamic-address feed-server trusteed-feed feed-name trusteed-blocklist path /v1/integrations/<integration_id>/content
set security dynamic-address feed-server trusteed-feed feed-name trusteed-blocklist update-interval 120 hold-interval 43200


1. Map the feed to an address list and commit the configuration.

Blocklist Format Example

Plain text format, one IP per line:

192.168.38.187
192.168.38.186


Outcome

• Attacker IPs automatically blocked at the Juniper firewall.
• SOC and SIEM pipelines see fewer false positives.
• Analysts focus on enriched, high-fidelity signals instead of background noise.

Next Steps

• Explore Trusteed’s Blocklist Catalog for additional feeds.
• Combine Juniper enforcement with SIEM/SOAR integration for visibility.
• Automate playbooks with Trusteed’s IP intelligence for faster remediation.

‍

‍