Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Overview Of Supported Virtual Appliances

 

A virtual appliance is an JSA system that consists of JSA software that is installed on a VMWare ESX virtual machine.

A virtual appliance provides the same visibility and function in your virtual network infrastructure that JSA appliances provide in your physical environment.

After you install your virtual appliances, use the deployment editor to add your virtual appliances to your deployment. For more information on how to connect appliances, see the Juniper Secure Analytics Administration Guide.

JSA Virtual All-in-One

This virtual appliance is a Juniper Secure Analytics system that profiles network behavior and identifies network security threats. The JSA Virtual All-in-One or JSA Virtual console deployment virtual appliance includes an on-board Event Collector and internal storage for events.

The JSA Virtual All-in-One virtual appliance supports the following items:

  • 600k flows per minute max depending on the configuration of the VM

  • 750 event feeds (additional devices can be added to your licensing)

  • External flow data sources for NetFlow, sFlow, J-Flow, Packeteer, and Flowlog files

  • Flow Processor and Layer 7 network activity monitoring

To expand the capacity of the JSA Virtual All-in-One beyond the license-based upgrade options, you can add one or more of the JSA Virtual Distributed Event or Flow processors virtual appliances.

JSA Virtual Distributed Event Processors

This virtual appliance is a dedicated Event Processor that allows to scale your Juniper Secure Analytics (JSA) deployment to manage higher EPS rates. The JSA Virtual Distributed Event or Flow processors includes an onboard Event Collector, Event Processor, and internal storage for events.

JSA Virtual Distributed Flow processors appliance supports the following items:

  • Up to 20k events per second, depending on the amount of CPU and RAM allocated

  • 2 TB or larger dedicated event storage

The JSA Virtual Distributed Event processor is a distributed Event Processor virtual appliance and requires a connection to JSA console. Event Processor appliance and requires a connection to any series appliance.

JSA Virtual Distributed Flow Processors

JSA Virtual Distributed Flow processors appliance supports the following items:

  • 600k flows per minute max depending on the amount of CPU and RAM allocated

  • 2 TB or larger dedicated flow storage

  • Flow Processor and Layer 7 network activity monitoring

You can add JSA Virtual Distributed Event or Flow processors appliances to any series appliance to increase the storage and performance of your deployment.