Automation minimizes risks, and visibility increases security Junos Space June 2017

Different levels of automation Abstraction ICO Business layer: OSS/BSS & Business Apps Orchestration Multi-Domain: IT-wide Contrail Cloud Juniper Cloud- Based Manage- ment (CBM) Contrail Service Orchestration This Stack has increasing Abstraction as you climb it – from Devices level, up to the Business Layer (noted by the inverted triangle on the left). (Slide builds with Animation.) DEVICE/MULTI-DEVICE AND NETWORK LAYERS: Key IT Automation Tools and Technologies (like Programming Languages, e.g. Python, and Frameworks like Ansible and Salt-Stack) play to automate at the Network-aware and Device / Multi-Device level. Typically you want to automate at the Network level, aware of the Network as a System However, certain things instead exhibit the need to automate at the Device-level, such as deployment / ZTP where a new device has no concept of the Network yet VIRTUAL NETWORK AND SERVICES AUTOMATION: This is the SDN layer – where central policy, control and automation of networking above the hardware / fabric layers usually involves SDN.  This is below IT-wide orchestration, and it’s still within the Network domain, and of course below the Business layer. Software-Defined Networking operates on the network at the virtualized-network and services levels. Abstracted Services are controlled by SDN. Virtual Networks are provisioned and managed by SDN. Still within the purview of Network. Scope is in the Network, or as noted, in some case only Devices. Key IT Tools we care about are: Python, PyEZ, Ansible, SaltStack. Of course there are many-many others we can work with and care about situationally. ORCHESTRATION: Beyond the Network, and spanning across IT, but within the IT purview, Orchestration ties together the Compute, Storage and Network. Scope or domain is IT BUSINESS: At the level of business applications, we have several partners who present the CloudCPE solution with the BSS/OSS and business operations. Other “Business” solutions are things like … A Curriculum-Management System for School systems. This manages the learning-content and student performance for the school board. Under this, compute, storage and network all get sold and deployed. However, not a computer, storage device, router nor switch nor firewall are visible to the buyer. They see and buy a way to manage their school operations. A Building Security solution consists of various hardware for controlling door-locks and security-cameras, as well as software to control and manage all this – and includes or has extension and demands requirements for a WiFi network and related switching/routing. The solution, as sold with Aruba (by an Aruba partner and positioned by Aruba) is based on the business function of managing the physical security of the building, but includes software and hardware including network. Ultimately, the Juniper CBM (Cloud Based Management, [official name to come in future]) will encompass and incorporate all of the functions and purposes of Junos Space and its apps (ND, SD, CSD, CPP*) and also tie in the SDN and Orchestration layers (e.g. Contrail Networking, NorthStar, CSO, and Contrail Cloud) as a range of Cloud-based service components spanning this stack below the Business layer (of course with APIs to allow Business-layer apps to drive actions and also be prompted by events/actions). * CPP = Cross Provisioning Platform; Cloud Management Platform Virtual Networking & SDN Virtual Network & Services Contrail Networking Northstar NSX Network Network system-aware ND IT Tools SD JET: Junos Extension Toolkit CSD CPP Device & Multi-Device Element level

Junos Space Management Platform Efficiently Manage the “New Network” Junos Space consists of a network management platform for deep element management, domain-optimized management applications for reducing costs and provisioning new services quickly, and a programmable SDK for customization. Working cohesively, Junos Space offers a unified network management and orchestration solution to help you more efficiently manage the New Network. Key points are You need the SPACE platform which discovers all the Juniper devices including SRX’s, switches and routers. Any device Juniper manufactures can be discovered. SPACE is also the part of the solution you go to manage device related settings such as interfaces, zones, vlans, protocols settings, host name etc.. SPACE is a separate installation and has its own license SPACE applications plug-in to the SPACE platform and focus around features that are not device related, such as Security Director which manages the security features of the SRX. Network Director, which manages all switching products and here we show Service Now, which is a support automation tool to help you keep track of your support cases as well as auto package logs to send to JTAC for further investigation SPACE and all of its apps have a full set of restful API’s and SPACE has an SDK Junos Space SDK & APIs Programmable interface to customize apps/ Easy MoM & 3rd party integration Security Director Network Director ASAP SPACE Platform

Junos Space - Automated Support and Prevention (ASAP)

Automated Support and Prevention Typical Incident Resolution Process Customer Network Partner Support Juniper Networks Hadoop Infrastructure “Big Data” Improvements by Automated Support and Prevention Detailed Reports JTAC Workbench Level-1/2 Support Level-3 Support BU Engineering OPS Diagnosis Notes : PLM is responsible for the contents of the slide. This slide may be moved to the main deck in the “Project Plan” section. Incident Detection & Data Collection Case Creation Case Mgt. Case Closure Incident Data Case Management

Juniper’s Automated Support And Prevention Solution Market-leading Products with Integrated Support – Engineer-in-a-box Proactive notifications for planning and prevention of future issues: -Bug Notifications -EOL/EOS Notifications -Asset Management Customers Juniper JTAC Experts & Specialists I know how to diagnose problems and what resources are needed ASAP enables Juniper products to support themselves AI-Scripts: Technical support expertise installed in Juniper products Notes : PLM is responsible for the contents of the slide. This slide may be moved to the main deck in the “Project Plan” section. Juniper Routers, Switches, & Security Products Juniper products provide automated: -Issue identification -Data Collection -Case Creation -Case Attachment Juniper Technical Assistance Center (JTAC) Juniper Support tools provide automated: -Data Analysis -Root Cause Determination -Problem Resolution

Automated Response to Product Events Juniper’s Automated Support and Prevention (ASAP) solution automatically responds to product events so you don’t have to… Automated Support and Prevention automates all essential steps required for Zero-Touch Support Zero-Touch Support Problem Resolution +50% faster using ASAP! ASAP Delivers 100% Support Process Automation Juniper Routers, Switches, & Security Products Detects over 470 Junos events Event Detection Capture and collect all data needed for event diagnosis Data Capture Create support case for issue tracking and reference Case Creation Attach all data captured to case for analysis Case Attachment Rapidly analyze core files, logs and configs Data Analysis Case Update Update case with new data and status

Automated Support and Prevention Solution Partner Proxy Configuration Customer Site Juniper Service Partner Juniper Networks AI-Scripts Juniper Support Systems (JSS) Juniper Case Attachment Tool Suite (JCATS) Junos Space Service Now Junos Space Service Now Junos Product Automated Case Mgt Data Analysis Root Cause Determination Automated Event Detection Automated Data Collection Automated Case Creation Automated Case Attachment Level 1/2 Analysis Escalation To Juniper? Customer Report EOL/EOS Updates Proactive Bug Notification Asset Management Junos Space Service Insight Case Management Systems and Data Base Orchestration

Thank you