1. A “Future-Proof” Firewall: Juniper SRX 5800
Proposal overview for the CSU UTFAB
Steve Lovaas, ACNS
February 10, 2012
A “Future-Proof” Firewall: Juniper SRX 5800

2. Presentation overview
Split costs with ACNS for a pair of 10-gigabit firewalls for the CSU datacenter
Threats and protection
Network capacity: the need for speed
The solution: Juniper SRX 5800
Costs, support, sustainability

3. Protection: student data at risk
Central servers
RamWeb, AriesWeb, Banner
SSNs, bank account numbers, grades
Threats increasing
Targeted attacks, automated toolkits
Protection: a network firewall
Very powerful computer to analyze traffic
Keeps the bad stuff out, lets the good stuff in

4. The problem? Speed! Today: 10 gigabits per second
Within a few years: 100 gigabits per second
Protection has become the bottleneck

5. Solution: the Juniper SRX-5800
Familiar company, OS, features
Engineering support
10-gig interfaces now
100-gig supported for future
SRX series in use at CU, DU, UW
High-availability failover pair
(two firewalls for near 100% uptime)

6. Cost, support, sustainability
Hardware: $177,469.50
2 Chassis, power supplies, service & line cards
Support: $92,644
3-yr next-day support for all hardware
No additional staffing or professional services
Total 3-year cost: $270,133.50
ACNS 50% cost-sharing offer
UTFAB request: $135,066.75

7. Questions? Steve Lovaas, IT Security Manager, ACNS