Policy-based threat profiling

You can add the user source identity (username) to a security policy to generate security feeds. Juniper ATP Cloud service consolidates the generated feeds from device and shares the duplicated results back with that security device. The security device uses the feeds to perform actions against the designated traffic. You can enable the security device to use the feeds by configuring security policies with the feeds as matching criteria. When traffic matches policy conditions, the device applies policy actions.