Use Case

Enterprise networks are exposed to many security risks. IT teams need to act rapidly to ensure that their networks have the sufficient level of security that will protect the integrity and confidentiality of their organization’s data. In addition, there is a necessity for a cost-efficient, reliable, and resilient solution.

The implementation of SD-WAN is gaining momentum and some organizations are opting for a multi-vendor solution, where a number of networking devices are service-chained to provide the desired services. This comes at the cost of increased power consumption as well as an increase in the number of networking devices collocated on site. In addition to these challenges, the increase in expenses to operate and maintain multiple hardware and software platforms also becomes a challenge.

The NFX150 NextGen uCPEs enable IT teams to run cost-efficient, reliable, resilient, secure, and SD-WAN-enabled branch locations. NFX150 devices leverage virtualization as a vehicle to host services that are typically provided by a server on site. An example of such services is the 802.1X authentication for corporate users. The 802.1X authentication ensures that only users that have the required permissions to access the corporate network are allowed to use the resources on the network. NFX150 service gateway also limits the power consumption to a single device.

NFX150 uCPE comes in two form factors–desktop and rack mountable 1U device, which ensures minimal real-estate occupation in branch offices. In addition to these advantages, NFX150 offers the well-adopted and widely-recognized SD-WAN features of Juniper Networks’ SRX series portfolio of products. The NFX150 uCPE comes equipped with easy and convenient single management point and offers in-line and out-of-band management interfaces, as well as a variety of WAN technologies, including LTE.

Figure 1: Typical Branch Office with Internet Connectivity

Figure 1 shows a typical branch office that has connection to the Internet wired or wireless-over-cellular network, such as LTE. The Internet connection terminates at the NFX150 NextGen device.

The NFX150 uCPE provides next-generation firewall (NGFW) capability along with wired and wireless infrastructure to provide services to employees on-site that include:

• SD-driven access to the Internet.

• Next-generation firewall includes:

  • Antivirus protection

  • Enhanced web filtering

  • Intrusion prevention system

  • Advanced application visibility and control

The 802.1X authentication is typically provided by a RADIUS server, which is run as a virtual machine on the NFX150 uCPE.