srx product presentation l.
Download
Skip this Video
Loading SlideShow in 5 Seconds..
SRX Product Presentation PowerPoint Presentation
Download Presentation
SRX Product Presentation

Loading in 2 Seconds...

play fullscreen
1 / 34

SRX Product Presentation - PowerPoint PPT Presentation


  • 157 Views
  • Uploaded on

SRX Product Presentation. TABLE OF CONTENTS. Distributed Enterprise. SRX Series Services Gateways. AX411 Wireless LAN Access Point. 3G Connectivity Solutions. Converged Services. JUNOS Operating System. T Series. EX8216. EX8208. SRX5800. SRX5600. SRX3600. NSMXpress. MX Series.

loader
I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
capcha
Download Presentation

PowerPoint Slideshow about 'SRX Product Presentation' - garry


An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript
table of contents
TABLE OF CONTENTS

Distributed Enterprise

SRX Series Services Gateways

AX411 Wireless LAN Access Point

3G Connectivity Solutions

Converged Services

junos operating system
JUNOS Operating System

T Series

EX8216

EX8208

SRX5800

SRX5600

SRX3600

NSMXpress

MX Series

SRX650

EX4200

M Series

SRX240

EX3200

J Series

SRX220

SRX210

EX2200

SRX100

SECURITY

ROUTERS

SWITCHES

9.4

9.5

9.6

–API–

Module

x

Frequent Releases

J Series

Tx Matrix

One OS

One Release

One Architecture

srx services gateways
SRX Services Gateways
  • Highly configurable
    • Fixed, semi-modular, and modular form factors
    • Choice of WAN, wireless, and LAN interfaces
    • Available voice media gateway
  • Extensive integration
    • Full suite of JUNOS routing and switching capabilities
    • Unmatched security, including FW, VPN, UTM, UAC, and full IPS
  • Exceptional performance and availability
    • Hardware-assisted Content Security Acceleration (CSA) for ExpressAV and IPS
    • Control & data plane separation, redundant processing and power
  • Priced at $699, $1099, $2199, $2999, and $16000 (list)
award winning
SRX650 wins Best of Interop Award, Infrastructure Category

When: Wednesday, May 20th, 2009 at Interop Las Vegas

Why: Judges praise the SRX650 as a “Branch Office Swiss Army Knife” that “packs a bunch of horsepower and features”

Award Winning!
  • SRX210 wins Tokyo Interop Grand Prix (highest honor) for SMB Infrastructure
    • When: Wednesday, June 10th, 2009 at Interop Tokyo
    • Why: Judges are “amazed that high-performance JUNOS software is installed in this small appliance” – the vote was unanimous!
srx branch portfolio
SRX BRANCH PORTFOLIO

SRX650

+ More LAN slots, dual processors, dual P/S

SRX240

+ 4 WAN slots, 16 x GigE, PoE

SRX220

+ 2 WAN slots, 8 x GigE, PoE

SRX210

WAN slot, 2 x GigE, PoE

SRX100

Large Branch/Regional Office

Small Office

Small to Medium Office

srx series firewall zones and policies
SRX SERIES—FIREWALL, ZONES, AND POLICIES

ZONE “UNTRUST”

Originating Zone

INTERNET

Default Policy—Deny All

Default Policy—Allow All

SRX

Originating Zone

Originating Zone

ZONE “Trust”

ZONE “Accounting”

ZONE “Guest”

unified threat management utm features
UNIFIED THREAT MANAGEMENT (UTM) FEATURES

External Threats

Internal Threats

INTERNET

IPS

Juniper IDP detects/stops Worms, Trojans, DoS (L4 & L7), Scans

Juniper IDP detects/stops Worms, Trojans, DoS (L4 & L7), Scans

Websense to block to unapproved site access

Web Filtering

Antivirus

Kaspersky Lab AV stops viruses, file-based trojans or spread of spyware, adware, keyloggers

Kaspersky Lab AV stops Viruses, file-based Trojans, Spyware, Adware, Keyloggers

Antispam

Symantec stops Spam / Phishing

SRX Series blocks transmission of files for Data Loss Prevention

Content Filtering

Core Security

Firewall, VPN, Unified Access Control

Firewall, VPN, Unified Access Control

unified access control uac
UNIFIED ACCESS CONTROL (UAC)

ISG

SSG

NS

POLICY SERVER

Comprehensive, vendor-agnostic, standards-based access control across heterogeneous environments delivering investment protection

1

IC Series

Identity Stores

Authenticate User,

Profile Endpoint, Determine Location

1

2

Dynamically Provision Policy Enforcement

2

APPLICATIONS

3

Control Access to Protected Resources

Data

App

Internet

UAC Agent

EX Series

L2 Switch

Juniper Firewall Platforms

802.1X Switches & Access Points

UAC Enforcement Points

remote access vpn
Dynamic VPN Service – Access Manager Client

A dynamic IPSEC Client that is automatically downloaded

5-user, 10-user, 25-user, 50-user, 100-user, and 150-user license option with simultaneous tunnel enforcement

Supported on the SRX100, SRX210, SRX220, SRX240, and SRX650

Automatic client upgrade capabilities

Self-provisioning from SRX100, SRX210, SRX220, SRX240, and SRX650

IPSec with TCP-based fallback for NAT traversal

Initial release to support Windows platforms—XP, Vista, Win 2000

REMOTE ACCESS VPN

Wireless

Wired

3G Wireless

INTERNET

Dynamic VPN Services

SRX210

unified management
UNIFIED MANAGEMENT

ONE

Web UI

J-Web

ONE

JUNOS

CLI, JUNOScript

  • Unified management across Juniper’s network infrastructure
  • Network lifecycle management—Provision, Monitor, and Troubleshoot
  • Consistent and Open standards NBI for easy integration with 3rd party NMS

SNMP, Syslog, XML

SNMP, Syslog

EMS

NMS

Visibility

Diagnostics

JUNOScope

Network & Security Manager (NSM)

Security Threat Response Manager

Advanced Insight Manager

NETWORK MANAGEMENT

NetConf, DMI, Syslog, Sflow

HTTP / HTTPS XML

Telnet, SSH, XML

ISG/IDP

SSL VPN

M Series

MX Series

Infranet Controller

SRX5600

Routing

Security

Switching

nework and security manager nsm
NEWORK AND SECURITY MANAGER (NSM)

Along with SRX, NSM Manages Juniper’s entire enterprise portfolio*

  • NSM is a great way to port ScreenOS customers over to a JUNOS solution and to help manage a mixed environment
  • Common Management also offers huge up-sell opportunity
security threat response manager strm
SECURITY THREAT RESPONSE MANAGER (STRM)
  • STRM supports SRX Series
    • Intrusion Prevention System (IPS)
    • 220+ out-of-the box report templates
    • Fully customizable reporting engine: creating, branding and scheduling delivery of reports
    • Compliance reporting packages for PCI, SOX, FISMA, GLBA, and HIPAA
    • Reports based on control frameworks: NIST, ISO and CoBIT
rapid deployment
RAPID DEPLOYMENT

Simplified deployment-

Eliminate need for-

Pre-staging device

IT at point of installation

Reduce -

Provisioning time

Installation cost

No “truck roll”

  • USB Loads startup config
  • Validation of start up config
  • Secure communication to NSM

SRX 210

6. SRX In Service

5. Download Running Config

1. Generate and export startup config to USB

  • A Unique ID for tracking purposes
  • Untrust Interface configuration
  • Configuration parameters to enable “registration” of device to management server
  • User/Password
  • Management Server IP Address/Domain Name
  • One time password

Network and Security Manager

juniper s new wireless lan solution
Juniper’s new wireless LAN solution
  • Dual radio, dual band high speed (802.11n) wireless LAN access point (AP)
  • Integrated JUNOS management
  • Ideal for branch office applications with up to 16 APs and simple WLAN architectures

AX411 WLANAccess Point

wireless lan pain points
Wireless LAN pain points
  • Remote site management is hard
    • Few IT resources
    • Physical distance
  • Wireless networks double network operation overhead
    • Different wired and wireless policies
    • Complex management
  • 802.11n speeds create downstream bottlenecks
    • 300 Mbps 802.11n
    • Security and services can’t keep pace
juniper s wireless lan solution
Juniper’s wireless LAN solution
  • No compromises
      • Powerful blend of leading SRX performance with high speed 802.11n wireless
    • On line in record time
      • Unattended remote configuration and troubleshooting
    • Radical simplicity
      • One JUNOS for wired AND wireless policy, quality, and access control
      • Fewer boxes, more functionality

Applications

Voice

Video

Data

Devices

Smart phones

Bar code readers

Laptops

juniper s new wireless wan solutions
Juniper’s new wireless WAN solutions

PoE powered 3G to Ethernet bridge

Supports up to four customer-supplied 3G modems

Ideal backup for wired WAN or as primary connectivity where wired WAN is not available

CX111 Cellular Broadband Data Bridge

  • 3G integrated on the SRX210
    • Uses the SRX210 ExpressCard slot
  • Ideal backup for wired WAN or as primary connectivity where wired WAN is not available

3G ExpressCardsfor the SRX210

slide23

WIRELESS WAN PAIN POINTS

  • Hard to get a high performance signal
    • Hard to locate gear where RF reception is optimal
    • New cables needed for antenna extensions
  • Limited choice and integration
    • Too integrated: network vendor doesn’t offer preferred 3G card
    • Not integrated enough: slow or no failover from wired to wireless
slide24

JUNIPER’s 3g wireless WAN solution

  • Best signal
      • Get the 3G antenna out of the wiring closet to optimize reception*
    • More choices
      • Choose router-integrated 3G or standalone 3G bridge
      • Choose 3G modems from every major manufacturer*
    • Higher reliability
      • Tightly coupled system speeds wired to wireless failover
      • Redundant radio hardware and provider diversity*

Bridge

Carrier’s3G Network

SRX210 with integrated 3G

* Requires bridge solution

ordering availability and highlights
3xUSB, 1xExpressCard slot

50+ modem support

Simple plug & play

Multi-modem failover support

PoE powered

LED signal indicator

List: $650

Ordering, availability, and highlights

CX111 Cellular Broadband Data Bridge

3G ExpressCardsfor the SRX210

Ships with external antenna

Verizon

Sprint

GSM worldwide

List: $850

srx100
Ideal for small sites and managed telecommuters

Fixed I/O – 8 10/100 Ethernet ports

Full UTM features: Firewall, antivirus, anti-spam, anti-spyware, web filtering, IPS (IDP)

UTM requires High memory version

SRX100
srx210
SRX210

Ideal for Small branches

Full UTM features: Firewall, antivirus, anti-spam, anti-spyware, web filtering, IPS (IDP)

UTM requires High memory version

Available voice version with mini-PIM options

Factory-configured voice model

srx220
SRX220

Ideal for small to medium branches

Full UTM features: Firewall, antivirus, anti-spam, anti-spyware, web filtering, IPS (IDP)

2 Mini-PIM slots for WAN fail-over

High memory version onlyFactory configured PoE version (Q4 2010)

Voice configuration (Q4 2010)

srx240
SRX240

Ideal for Small branches

Full UTM features: Firewall, antivirus, anti-spam, anti-spyware, web filtering, IPS (IDP)

UTM requires High memory version

Available voice version with mini-PIM options

Factory-configured voice model

srx650
SRX650

Ideal for regional sites, large branches

Modular

LAN switching

Services Routing Processors with optional redundancy (Future)

Power supplies with optional redundancy (at FRS)

Voice configurations (Future)

Full UTM features: Firewall, antivirus, anti-spam, anti-spyware, web filtering, IPS (IDP)

Max GE 52 ports (2 x 24 GE PIM + 4 integrated ports)

new mini pims for srx200 line
New mini pims for srx200 line

Single-port VDSL2

  • ADSL, ADSL2, ADSL2+ Compatible
  • ITU-T G.933.2
  • Annex A, B, F & G
  • Major DSLAM Interoperability
  • Single-port G.SHDSL
    • Standards-based G.991.2
    • 8-wire, 4-wire or 2-wire mode
    • Provides symmetric speeds between 2.3 Mbps and 22.7 Mbps
  • Single-port DOCSIS3
    • Compatible with versions 3.0, 2.0, 1.1 and 1.0 of the standard
    • Support for 4 downstream/4 upstream channel bonding
    • Max 170 Mbps down/120 Mbps up

VDSL2

new mini pims for srx200 line32
New mini pims for srx200 line

Single-port SFP mPIM

  • Provides Fiber or Copper connectivity @1Gbps throughput
  • Jumbo frames support

1xSFP

new gpims for srx650
New gpims for srx650
  • 2-port 10GE Fiber and Copper GPIM
  • 10GE Fiber/SFP+ and Copper (10G BaseT)
  • SFP+ ports can support direct-connect (10M) copper