Secure

Applications in the new service provider menu are increasingly versatile and rich. They not only unleash tremendous value for users in a wide range of devices and locations, they provide application "mashups" and the result is an array of entirely new vulnerabilities for both users' and providers' information and resources.

That means that today's data center security administrators must not only secure traffic flows between physical elements on the network, they must also secure increased traffic between the virtual elements in the network, such as between virtual machines within a single physical server. To address this "blind spot" as well as the increased sophistication of security threats in the cloud, providers must expand their security protection capabilities significantly. Effective security policies directly affect availability and integrity of 24x7 applications and business-critical services.

To maximize simplification and agility, security in the cloud-ready data center should be consolidated, virtualized and consistently managed, in order to improve the flexibility and efficiency of the entire data center solution.

Juniper Networks has developed a data center security portfolio that spans the physical and virtual network, is agile and adaptive to change, and is an integral part of the next-generation data center network fabric. Juniper delivers a rich set of protections that not only meet today's security and performance requirements, but also scales to address future on-demand growth. Services such as application-aware denial of service, stateful firewall, and intrusion detection and prevention systems are consolidated on a security platform and can be enforced on the physical network or even on the VM hypervisor itself, providing the flexibility required to dynamically assign resources to the services.

Leveraging a common operating system with an open network automation platform and a rich set of support services help to minimize risk and speed time to implementation when configuring security solutions for the cloud-ready data center.

Solution Components

Security

• SA Series SSL VPN Appliances: These appliances provide scalable, simplified, and secure remote access to data center resources from multiple remote networks and platforms.
• SRX Series Services Gateways: These gateways combine routing, switching, application services, and user- and application-aware security, within a modular, expandable chassis to deliver unprecedented performance and flexibility while reducing management overhead.
• Unified Access Control Solutions: These offer powerful identity- and role-based access control that increase agility in service deployment and increase the overall quality of user experience. Unified access control can be deployed within the data center or across the extended network to protect networks and applications.
• vGW Series: Secure the virtual data center and cloud computing environments in real-time through this high-performance, hypervisor-based stateful firewall, that provides virtual network visibility, monitoring, and reporting. vGW enforces a granular virtualized security policy consistent and integrated with physical server security, and automatically invokes policy enforcement as VMs change and move, all with zero VM host capacity drain.

Junos Platform

• Junos Pulse: A dynamic, standards-based multiservice network client that drastically simplifies user experiences by delivering integrated connectivity, access, application acceleration, and security.
• Junos Space: A suite of applications for network infrastructure automation including:
  • Junos Space Ethernet Design — Helps deploy an entire network just as easily as a single switch.
  • Junos Space Network Activate — Allows for full lifecycle management of MPLS services, and quick and easy set-up of VPLS services.
  • Junos Space Route Insight — Enables rapid planning, troubleshooting, and change simulation for L3 services.
  • Junos Space Service Now — Automates diagnostics to speed problem resolution.
  • Junos Space Service Insight — Delivers proactive, actionable network insight to manage risk and improve application reliability.
  • Junos Space Security Design — Enables bulk configuration and provisioning of complex security policies.
  • Junos Space Virtual Control — Provides access and visibility into the virtual network and automated orchestration between the physical and virtual networks for server virtualization deployments.

Network Operating System

• Junos OS: Integrates routing, switching, and security services to reduce complexity, achieve operational excellence, and deliver dynamic services with lower TCO.

Network Management

• Network and Security Manager (NSM): Provides a single pane of management for the entire network infrastructure, including routing, switching, and security devices.
• STRM Series Security Threat Response Managers: Collect events and alerts from different Juniper and third-party products and aggregate them in order to provide an enterprise-wide threat management view.

Technical Services

• Juniper Care: is a family of services that protects your investment in your high-performance network while increasing operational effectiveness and lowering operational cost. The services combine Juniper's service automation technology to increase productivity, reduce risk and increase network uptime by automating diagnostics and reducing time-to-resolution (TTR). This industry leading innovation increases operational efficiency by allowing your staff to concentrate on running the business, not fixing the equipment. By adding to these features an expert level of interaction with senior Juniper technical support engineers, Juniper Technical Services provide for extremely effective troubleshooting and service restoration resulting in higher availability.

A top J-Partner will help you get the most from Juniper's networking and security solutions, whether for a small enterprise or the largest, global IP backbone.