1 / 34

SRX Product Presentation

SRX Product Presentation. TABLE OF CONTENTS. Distributed Enterprise. SRX Series Services Gateways. AX411 Wireless LAN Access Point. 3G Connectivity Solutions. Converged Services. JUNOS Operating System. T Series. EX8216. EX8208. SRX5800. SRX5600. SRX3600. NSMXpress. MX Series.

garry
Download Presentation

SRX Product Presentation

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. SRX Product Presentation

  2. TABLE OF CONTENTS Distributed Enterprise SRX Series Services Gateways AX411 Wireless LAN Access Point 3G Connectivity Solutions Converged Services

  3. JUNOS Operating System T Series EX8216 EX8208 SRX5800 SRX5600 SRX3600 NSMXpress MX Series SRX650 EX4200 M Series SRX240 EX3200 J Series SRX220 SRX210 EX2200 SRX100 SECURITY ROUTERS SWITCHES 9.4 9.5 9.6 –API– Module x Frequent Releases J Series Tx Matrix One OS One Release One Architecture

  4. SRX Services Gateways • Highly configurable • Fixed, semi-modular, and modular form factors • Choice of WAN, wireless, and LAN interfaces • Available voice media gateway • Extensive integration • Full suite of JUNOS routing and switching capabilities • Unmatched security, including FW, VPN, UTM, UAC, and full IPS • Exceptional performance and availability • Hardware-assisted Content Security Acceleration (CSA) for ExpressAV and IPS • Control & data plane separation, redundant processing and power • Priced at $699, $1099, $2199, $2999, and $16000 (list)

  5. SRX650 wins Best of Interop Award, Infrastructure Category When: Wednesday, May 20th, 2009 at Interop Las Vegas Why: Judges praise the SRX650 as a “Branch Office Swiss Army Knife” that “packs a bunch of horsepower and features” Award Winning! • SRX210 wins Tokyo Interop Grand Prix (highest honor) for SMB Infrastructure • When: Wednesday, June 10th, 2009 at Interop Tokyo • Why: Judges are “amazed that high-performance JUNOS software is installed in this small appliance” – the vote was unanimous!

  6. SRX BRANCH PORTFOLIO SRX650 + More LAN slots, dual processors, dual P/S SRX240 + 4 WAN slots, 16 x GigE, PoE SRX220 + 2 WAN slots, 8 x GigE, PoE SRX210 WAN slot, 2 x GigE, PoE SRX100 Large Branch/Regional Office Small Office Small to Medium Office

  7. SRX SERIES SPECIFICATION SUMMARY

  8. TYPICAL DEPLOYMENT

  9. SRX SERIES—FIREWALL, ZONES, AND POLICIES ZONE “UNTRUST” Originating Zone INTERNET Default Policy—Deny All Default Policy—Allow All SRX Originating Zone Originating Zone ZONE “Trust” ZONE “Accounting” ZONE “Guest”

  10. UNIFIED THREAT MANAGEMENT (UTM) FEATURES External Threats Internal Threats INTERNET IPS Juniper IDP detects/stops Worms, Trojans, DoS (L4 & L7), Scans Juniper IDP detects/stops Worms, Trojans, DoS (L4 & L7), Scans Websense to block to unapproved site access Web Filtering Antivirus Kaspersky Lab AV stops viruses, file-based trojans or spread of spyware, adware, keyloggers Kaspersky Lab AV stops Viruses, file-based Trojans, Spyware, Adware, Keyloggers Antispam Symantec stops Spam / Phishing SRX Series blocks transmission of files for Data Loss Prevention Content Filtering Core Security Firewall, VPN, Unified Access Control Firewall, VPN, Unified Access Control

  11. UNIFIED ACCESS CONTROL (UAC) ISG SSG NS POLICY SERVER Comprehensive, vendor-agnostic, standards-based access control across heterogeneous environments delivering investment protection 1 IC Series Identity Stores Authenticate User, Profile Endpoint, Determine Location 1 2 Dynamically Provision Policy Enforcement 2 APPLICATIONS 3 Control Access to Protected Resources Data App Internet UAC Agent EX Series L2 Switch Juniper Firewall Platforms 802.1X Switches & Access Points UAC Enforcement Points

  12. Dynamic VPN Service – Access Manager Client A dynamic IPSEC Client that is automatically downloaded 5-user, 10-user, 25-user, 50-user, 100-user, and 150-user license option with simultaneous tunnel enforcement Supported on the SRX100, SRX210, SRX220, SRX240, and SRX650 Automatic client upgrade capabilities Self-provisioning from SRX100, SRX210, SRX220, SRX240, and SRX650 IPSec with TCP-based fallback for NAT traversal Initial release to support Windows platforms—XP, Vista, Win 2000 REMOTE ACCESS VPN Wireless Wired 3G Wireless INTERNET Dynamic VPN Services SRX210

  13. UNIFIED MANAGEMENT ONE Web UI J-Web ONE JUNOS CLI, JUNOScript • Unified management across Juniper’s network infrastructure • Network lifecycle management—Provision, Monitor, and Troubleshoot • Consistent and Open standards NBI for easy integration with 3rd party NMS SNMP, Syslog, XML SNMP, Syslog EMS NMS Visibility Diagnostics JUNOScope Network & Security Manager (NSM) Security Threat Response Manager Advanced Insight Manager NETWORK MANAGEMENT NetConf, DMI, Syslog, Sflow HTTP / HTTPS XML Telnet, SSH, XML ISG/IDP SSL VPN M Series MX Series Infranet Controller SRX5600 Routing Security Switching

  14. NEWORK AND SECURITY MANAGER (NSM) Along with SRX, NSM Manages Juniper’s entire enterprise portfolio* • NSM is a great way to port ScreenOS customers over to a JUNOS solution and to help manage a mixed environment • Common Management also offers huge up-sell opportunity

  15. SECURITY THREAT RESPONSE MANAGER (STRM) • STRM supports SRX Series • Intrusion Prevention System (IPS) • 220+ out-of-the box report templates • Fully customizable reporting engine: creating, branding and scheduling delivery of reports • Compliance reporting packages for PCI, SOX, FISMA, GLBA, and HIPAA • Reports based on control frameworks: NIST, ISO and CoBIT

  16. RAPID DEPLOYMENT Simplified deployment- Eliminate need for- Pre-staging device IT at point of installation Reduce - Provisioning time Installation cost No “truck roll” • USB Loads startup config • Validation of start up config • Secure communication to NSM SRX 210 6. SRX In Service 5. Download Running Config 1. Generate and export startup config to USB • A Unique ID for tracking purposes • Untrust Interface configuration • Configuration parameters to enable “registration” of device to management server • User/Password • Management Server IP Address/Domain Name • One time password Network and Security Manager

  17. JUNIPER NETWORKS AX SERIES WLAN ACCESS POINTS

  18. Juniper’s new wireless LAN solution • Dual radio, dual band high speed (802.11n) wireless LAN access point (AP) • Integrated JUNOS management • Ideal for branch office applications with up to 16 APs and simple WLAN architectures AX411 WLANAccess Point

  19. Wireless LAN pain points • Remote site management is hard • Few IT resources • Physical distance • Wireless networks double network operation overhead • Different wired and wireless policies • Complex management • 802.11n speeds create downstream bottlenecks • 300 Mbps 802.11n • Security and services can’t keep pace

  20. Juniper’s wireless LAN solution • No compromises • Powerful blend of leading SRX performance with high speed 802.11n wireless • On line in record time • Unattended remote configuration and troubleshooting • Radical simplicity • One JUNOS for wired AND wireless policy, quality, and access control • Fewer boxes, more functionality Applications Voice Video Data Devices Smart phones Bar code readers Laptops

  21. JUNIPER NETWORKS SOLUTIONS FOR 3G CONNECTIVITY

  22. Juniper’s new wireless WAN solutions PoE powered 3G to Ethernet bridge Supports up to four customer-supplied 3G modems Ideal backup for wired WAN or as primary connectivity where wired WAN is not available CX111 Cellular Broadband Data Bridge • 3G integrated on the SRX210 • Uses the SRX210 ExpressCard slot • Ideal backup for wired WAN or as primary connectivity where wired WAN is not available 3G ExpressCardsfor the SRX210

  23. WIRELESS WAN PAIN POINTS • Hard to get a high performance signal • Hard to locate gear where RF reception is optimal • New cables needed for antenna extensions • Limited choice and integration • Too integrated: network vendor doesn’t offer preferred 3G card • Not integrated enough: slow or no failover from wired to wireless

  24. JUNIPER’s 3g wireless WAN solution • Best signal • Get the 3G antenna out of the wiring closet to optimize reception* • More choices • Choose router-integrated 3G or standalone 3G bridge • Choose 3G modems from every major manufacturer* • Higher reliability • Tightly coupled system speeds wired to wireless failover • Redundant radio hardware and provider diversity* Bridge Carrier’s3G Network SRX210 with integrated 3G * Requires bridge solution

  25. 3xUSB, 1xExpressCard slot 50+ modem support Simple plug & play Multi-modem failover support PoE powered LED signal indicator List: $650 Ordering, availability, and highlights CX111 Cellular Broadband Data Bridge 3G ExpressCardsfor the SRX210 Ships with external antenna Verizon Sprint GSM worldwide List: $850

  26. Ideal for small sites and managed telecommuters Fixed I/O – 8 10/100 Ethernet ports Full UTM features: Firewall, antivirus, anti-spam, anti-spyware, web filtering, IPS (IDP) UTM requires High memory version SRX100

  27. SRX210 Ideal for Small branches Full UTM features: Firewall, antivirus, anti-spam, anti-spyware, web filtering, IPS (IDP) UTM requires High memory version Available voice version with mini-PIM options Factory-configured voice model

  28. SRX220 Ideal for small to medium branches Full UTM features: Firewall, antivirus, anti-spam, anti-spyware, web filtering, IPS (IDP) 2 Mini-PIM slots for WAN fail-over High memory version onlyFactory configured PoE version (Q4 2010) Voice configuration (Q4 2010)

  29. SRX240 Ideal for Small branches Full UTM features: Firewall, antivirus, anti-spam, anti-spyware, web filtering, IPS (IDP) UTM requires High memory version Available voice version with mini-PIM options Factory-configured voice model

  30. SRX650 Ideal for regional sites, large branches Modular LAN switching Services Routing Processors with optional redundancy (Future) Power supplies with optional redundancy (at FRS) Voice configurations (Future) Full UTM features: Firewall, antivirus, anti-spam, anti-spyware, web filtering, IPS (IDP) Max GE 52 ports (2 x 24 GE PIM + 4 integrated ports)

  31. New mini pims for srx200 line Single-port VDSL2 • ADSL, ADSL2, ADSL2+ Compatible • ITU-T G.933.2 • Annex A, B, F & G • Major DSLAM Interoperability • Single-port G.SHDSL • Standards-based G.991.2 • 8-wire, 4-wire or 2-wire mode • Provides symmetric speeds between 2.3 Mbps and 22.7 Mbps • Single-port DOCSIS3 • Compatible with versions 3.0, 2.0, 1.1 and 1.0 of the standard • Support for 4 downstream/4 upstream channel bonding • Max 170 Mbps down/120 Mbps up VDSL2

  32. New mini pims for srx200 line Single-port SFP mPIM • Provides Fiber or Copper connectivity @1Gbps throughput • Jumbo frames support 1xSFP

  33. New gpims for srx650 • 2-port 10GE Fiber and Copper GPIM • 10GE Fiber/SFP+ and Copper (10G BaseT) • SFP+ ports can support direct-connect (10M) copper

More Related