SRX3000 Services Gateways: Re-defining Network Security Price / Performance The most flexible, cost-effective solution for mid to large enterprises and.

SRX3000 Services Gateways: Re-defining Network Security Price / Performance
The most flexible, cost-effective solution for mid to large enterprises and service providers

Benefit: A Sustainable Competitive Advantage
Deliver a superior user experience Integrated Services Faster application and service deployment Scalable Performance Simultaneously Scale Integrated Services and Network Capabilities Carrier Grade Availability Operational Simplicity through a Single Network OS Operational Simplicity Total cost of ownership advantage FAST RELIABLE SECURE 2 2

SRX Dynamic Services Gateways
Sept 2008 Market Introduction SRX5000 Series Services Gateway Revolutionary Architecture Integrated Services Scalable Performance Operational Simplicity World’s Fastest Security Solution The heritage of ScreenOS on JUNOS

Dynamic Services Architecture ™
Dedicated Control Plane Built-on Terabit Fabric Interchangeable I/O and processing cards Any service, any card Feature integration on JUNOS Fast time to market Tightest integration between features Carrier-class Reliability Service Integration via JUNOS ™ Dedicated Management Fabric FW IDP NAT VPN DoS QoS Interface Scalability Processing Scalability

SRX Services Gateway Family of JUNOS-based Dynamic Services Gateways
Consolidate Management Framework App Layer Forwarding Threat Prevention Access Control Routing Firewall IPS IPSec VPN NAT SRX Dynamic Services Gateway 5

Juniper (mid to high-end) Enterprise Security Portfolio
SRX5800 150 Gbps Services Gateway Designed for integration and scalability Dynamic Services Architecture Terabit Fabric Technology Dynamic Processing Pool Dynamic I/O Pool JUNOS SW feature delivery SRX5600 50 Gbps 30 Gbps Products addressing this segment? 10 Gbps NS5400 ISG/IDP FW and Integrated Security Designed for enhanced perimeter and DC security

Today’s Enterprise Requirements Enablement versus Constraint
Core / Infrastructure: 10 GigE More traffic, new/next gen apps, video and other streaming media Customers demand full-fledged security posture for network performance Deliver all security services at scale VPN IPSec IPS In the past, decisions were based on three perimeters: Have a tunnel/pipe and the security devices looked at 1) IP address, 2) port and 3) protocol FW 10+ Gbps

Business Challenges Performance and Flexibility Compromise
Traditional solutions based on performance/flexibility tradeoff Limited performance options Deploy more platforms Disable “expensive” features Limited flexibility options Deploy dedicated appliances Flexibility Performance

Pitfall of Today’s Security Adaptability
Limited flexibility in adapting to business requirements Poor service integration resulting in poor business operations Complex rack space planning Installation, management and maintenance overhead Rack Space Planning: High CAPEX: High OPEX: High 10 Security Requirements FW, IPS & VPN (Gbps) ASA 5540 5 Network Traffic Requirements TODAY Time FUTURE

No Compromise Security: SRX3000-line: The most cost-effective network security solution
Maximum Flexibility without Sacrificing Security Unmatched Price / Performance Powered by JUNOS and Juniper’s Dynamic Services Architecture (DSA) Based on Dynamic Services Architecture™ for accelerated new service deployment

SRX3400 Front Rear Hardware Modular chassis Fixed Interfaces
7 slots (4 front, 3 rear) MGT module – dual, hot swap 3U chassis height Fixed Interfaces 12 built-in (8-10/100/ SFP) 2 Ethernet Management Ports Modular Interfaces 16-10/100/1000 16-SFP 2-XFP Performance & Capacities FW – 10/20 Gbps VPN – 6 Gbps IDP – 6 Gbps Concurrent sessions – 1M New and sustained CPS – 175k Concurrent IPSec VPN tunnels – 10k Front Rear

SRX3600 Front Rear Hardware Modular chassis Fixed Interfaces
12 slots (6 front, 6 rear) MGT module – dual, hot swap 5U chassis height Fixed Interfaces 12 built-in (8-10/100/ SFP) 2 Ethernet Management Ports Modular Interfaces 16-10/100/1000 16-SFP 2-XFP Performance & Capacities FW – 10/20/30 Gbps VPN – 10 Gbps IDP – 10 Gbps Concurrent sessions – 2M New and sustained CPS – 175k Concurrent IPSec VPN tunnels – 20k Front Rear

Sample SRX3000 Base Configurations
Minimal Configuration SRX Chassis 1 SPC 1 NPC $50,000 (US List)* SRX3600 Minimal Configuration SRX 3600 Chassis 1 SPC 1 NPC $60,000 (US List)* *AC power cords are not included. One C19-Straight cable with appropriate wall-plug for the final destination of the system is required for each power supply.

System configuration flexibility
Flexible configuration of IOCs, NPCs and SPCs: SRX3400: 7 slots for Common Form-factor Modules (CFMs): 4 in the front for IOCs and SPCs 3 in the rear for NPCs and SPCs 4 SPCs max (1 min) 2 NPCs max (1 min) 4 IOCs max SRX3600: 12 slots for Common Form-factor Modules (CFMs): 6 in the front for IOCs and SPCs 6 in the rear for NPCs and SPCs 7 SPCs max (1 min) 3 NPCs max (1 min) 6 IOCs max SRX 3400-DC is limited by power supply capacity. No HA limitations.

SRX 3400-DC limited by power supply capacity. No HA limitations.
Total System Capacity SRX3400 maximum capacities AC (1000W – C19 straight) 4 SPCs, 2 NPCs, 1 IOCs: 20 Gbps Stateful Firewall 1M total sessions 175K Sessions / Second 6 Gbps IDP 8 Gbps IPSEC VPN DC (850W) 3 SPCs, 2 NPCs, 1 IOCs (optimized for FW performance): 4 Gbps IDP 6 Gbps IPSEC VPN SRX3600 Maximum capacities 7 SPCs, 3 NPCs, 2 IOCs 30 Gbps Stateful Firewall 2M total sessions 11 Gbps IDP 14 Gbps IPSEC VPN 1 NPC 2 NPCs 1 SPC 4 IOCs 2 SPCs 3 IOCs 3 SPCs 2 IOCs 4 SPCs 1 IOC 1 NPC 2 NPCs 1 SPC 4 IOCs 2 SPCs 3 IOCs 3 SPCs 2 IOCs 1 IOCs 4 SPCs 0 IOCs 1 NPC 2 NPCs 3 NPCs 1 SPC 6 IOCs 2 SPCs 3 SPCs 4 SPCs 5 IOCs 5 SPCs 4 IOCs 6 SPCs 3 IOCs 7 SPCs 2 IOCs SRX 3400-DC limited by power supply capacity. No HA limitations.

SRX 3K Packet Flow – Fully Integrated
Flow Lookup Classification DoS/DDoS Policing Network Processing Cards Routing / Device MGT RE Services FW/VPN/IDP NAT/Routing Integrated in SRX 5000 IOC Oversubscrptn. Control 1.5 Fabric Fabric  Ingress Packet  Egress Packet Services Processing Cards Input/Output Cards QoS/Shaping

Integrated Services Dynamic Services Architecture Differentiator
Juniper SRX Traditional Appliances Dedicated Control Plane   Buildable Processing Pool   Buildable I/O Pool   Scalable Service Engine   Single policy/configuration   Single device to manage  

Adapting to Changing Security Requirements
High integration supporting wide range of services Scales as your business grows Minimal/No policy changes required Rack Space Planning: NONE CAPEX: LOW OPEX: LOW 10 Security Requirements FW, IPS & VPN (Gbps) 5 Network Traffic Requirements TODAY Time FUTURE

10 Gbps FW, IPS & IPSec VPN Solution Price per Gbps FW/IPS/IPSec VPN
Industry’s Most cost-effective security solution Power Savings 10 Gbps FW, IPS & IPSec VPN Solution Price per Gbps FW/IPS/IPSec VPN 83% SAVINGS 84% SAVINGS 84% SPACE SAVINGS Price per FW Gbps 31 Appliances Cisco ASA 5580 44% SAVINGS Juniper SRX 3600 Juniper SRX 3600 Cisco ASA 5540

Juniper (mid to high-end) Enterprise Security Portfolio
SRX5800 150 Gbps Services Gateway Designed for integration and scalability Dynamic Services Architecture Terabit Fabric Technology Dynamic Processing Pool Dynamic I/O Pool JUNOS SW feature delivery SRX5600 50 Gbps SRX3600 30 Gbps SRX3400 10 Gbps NS5400 FW and Integrated Security Designed for enhanced perimeter and DC security ISG/IDP

JUNOS Future Direction Integrated security and networking on JUNOS
Continued leadership in security JUNOS Integrated security and networking on JUNOS Best-in-Class Security Continued leadership in networking Best-in-Class Routing

Juniper Networks Services and Support

Performance-Enabling Services
Accelerate Time to Value Manage Risks Fuel Growth Juniper’s performance-enabling services help you to achieve your business goals through accelerating, extending and optimizing the performance of your network. Control Costs Improve Operations Achieve Operational Excellence

Performance-Enabling Services & Support
Education Services Improve the productivity and self-sufficiency of your technical staff Education Services Technical Training and Certification Consulting Services Accelerate your network’s value with expert assistance Consulting Services Assessment and Analysis Design and Planning Project Implementation Installation and Configuration Services Startup Services Conversion Services Installation/Config Services Start your high-performance, high-value network rapidly, confidently Main points: you can choose from different types of support and services to best complement your staff and situation Technical Services J-Care Technical Services Resident Engineer Technical Services Protect your high-performance business investment through operational assistance 24

Installation and Configuration Services PLAN & DESIGN / OPTIMIZE
Services Portfolio Technical Services Installation and Configuration Services Consulting Services Education Services OPERATE IMPLEMENTATION PLAN & DESIGN / OPTIMIZE OPTIMIZE J-Care Essential Services J-Care Efficiency Services J-Care Continuity Services J-Care Agility Services Resident Engineer–Operations Resident Engineer—Design Startup Services Installation & Commissioning (Rack & Stack) Engineering Furnish and Installation Service (EF&I) QuickStarts (SSL, WX/WXC, FW Branch) Conversion Services Vendor Introduction Program (VIP) Juniper Enterprise Transition (JET) Assessment and Analysis Network Assessment & Risk Mitigation Security Assessment & Risk Mitigation Routing Policy Optimization Security Policy Optimization Access Control Policy Optimization Design and Planning Network Architecture & Design Project Implementation Switch Migrations Firewall Migrations Router Migrations Design Implementation Technical Certification JNCIS JNCIA JNCIP JNCIE Training Courses Juniper Delivered Training Information Additional details on services Technical Support J-Care Technical Support Technical Service Mgmt Resident Engineer Installation and Configuration Services Startup Services Conversion Services Consulting Services Assessment and Analysis Design and Planning Project Implementation Education Services Post Sales Technical Training and Certification 25

J-Care Technical Services Overview
Agility Services Provides the flexibility to adapt and evolve with business initiatives Continuity Services Focuses on high availability to increase network uptime Efficiency Services Designed to increase operational effectiveness and lower expenses Essential Services Protects high-performance networking investment NEED SPEAKER NOTES – Intro copy from each DS for each service product

J-Care Technical Services
Evolution & Adaptability Advanced Options Proactive Product Reports High Availability Service Management Desk Premium Service Management Desk Access to Insight JTAC Access to Insight JTAC Automated Incident Management Automated Incident Management Automated Incident Management Operational Efficiency Inventory Management Assistance Inventory Management Assistance Inventory Management Assistance Essential care for your network J-Care Essential Services provide the operational assistance you need to protect your high-performance investment Increased operational efficiency The automated features of the Efficiency, Continuity and Agility Services increase staff productivity and lower operating expenses through reduced time identifying problems, troubleshooting and communicating with Technical Support Engineers Up-to-date inventory information detailing your network improves staff knowledge and productivity Higher availability Automation features allow for quicker time to resolution, resulting in higher uptime for your network Designated teams of Technical Support Engineers with advanced knowledge and capabilities result in even more rapid problem resolution Evolution and Adaptability Proactive services help avoid incidents and assure your network is fully optimized to meet your business and growth needs Optional services provide greater insight into your present and future networking environment Knowledge Transfer Knowledge Transfer Knowledge Transfer Business Protection J-Care Essential Services Technical Support Technical Support Technical Support Technical Support J-Care Efficiency Services J-Care Continuity Services J-Care Agility Services

For complete details on our service offerings . . .
Juniper.net Consulting Services Education Services Installation and Configuration Services Technical Services

THANK YOU

SRX3000 Services Gateways: Re-defining Network Security Price / Performance The most flexible, cost-effective solution for mid to large enterprises and.

Similar presentations

Presentation on theme: "SRX3000 Services Gateways: Re-defining Network Security Price / Performance The most flexible, cost-effective solution for mid to large enterprises and."— Presentation transcript:

Similar presentations

About project

Feedback

Log in

Auth with social network:

SRX3000 Services Gateways: Re-defining Network Security Price / Performance The most flexible, cost-effective solution for mid to large enterprises and.

Similar presentations

Presentation on theme: "SRX3000 Services Gateways: Re-defining Network Security Price / Performance The most flexible, cost-effective solution for mid to large enterprises and."— Presentation transcript:

Similar presentations

About project

Feedback