1. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 1 SRX Product Presentation Mike Flaum Product Marketing Manager May 14, 2009

2. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 2 Table of contents SRX Series Services Gateways - Product SRX Series - Competitive This statement of product direction sets forth Juniper Networks’ current intention and is subject to change at any time without notice. No purchases are contingent upon Juniper Networks delivering any feature or functionality depicted on this statement.

3. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 3 SRX SERIES SERVICE GATEWAYS

4. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 4 CONSOLIDATION CONVERGENCE CONNECTIVITY Three key market drivers VoIP Analog Fax WLAN AP Security Camera Power Over Ethernet Antispam Antivirus IPS Web filtering UTM  Network migration to multi-service platform—“Secure Router” instead of multiple appliances  Secure Router = –Router + Firewall + VPN + Switching –Unified Threat Management UAC Content Filtering Routing Ethernet Switching Firewall IPSec VPN 3G PSTN MPLS Internet Metro NETWORK SECURITY Voice  VoIP Gateway and VoIP handsets  Power over Ethernet  Wireless Access Points  Internet  Metro Ethernet  MPLS FREE LICENSED  Wireless WAN 3G  PSTN

5. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 5 Solution portfolio – What’s New EX8208 EX8216 M Series MX Series SRX650 SRX3000 Series SRX240 SRX210 J Series EX2200 EX4200 EX3200 SRX100 SERVICES GATEWAYS ROUTERS SRX5000 Series Unified Management (NSM) SWITCHES

6. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 6  Highly configurable –Fixed, semi-modular, and modular form factors –Choice of WAN, wireless, and LAN interfaces –Available voice media gateway   Extensive integration –Full suite of JUNOS routing and switching capabilities –Unmatched security, including FW, VPN, UTM, UAC, and full IPS  Exceptional performance and availability –Hardware-assisted Content Security Acceleration for ExpressAV and IPS –Control & data plane separation, redundant processing and power  Priced at $699 , $1099, $2999, and $16000 (list) New SRX Services Gateways Leveraging Juniper’s Dynamic Services Architecture ModelConfiguration SIP Gateway Content Security Acceleration FW/IPS Performance SRX100  FixedNo 600/50 Mbps SRX2101 mini PIM slot Optional  Optional750/80 Mbps SRX2404 mini PIM slots Optional  Optional1500/250 Mbps SRX6508 GPIM slots Optional  Standard7000/900 Mbps Advanced FW / VPN /ROUTING license included 16 X Gigabit Ethernet Full UTM 20X IPS performance Up to 80% lower price  Roadmap

7. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 7 Key customer requirements Performance- –Gigabit Ethernet and port density –Firewall and VPN performance –“Content Security Accelerator” –“ExpressAV” – Anti virus stream matching Functionality – Networking –Routing – OSPF, BGP, Multi-cast –Voice and VoIP –Wireless – WLAN and WAN 3G –Switching- PoE, VLANs Security –Firewall – Performance –IPSec VPN – Client and Site to Site –Unified Threat Management (License) –Antivirus, Anti-spam, Web Filtering, IPS –Intrusion Prevention System (License) –UAC SRX 100 SRX 210 SRX 240 SRX 650

8. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 8 SRX Series Specification Summary FEATURES SRX100 (target)SRX210SRX240SRX650 On-board Ethernet 8 x FE2 x GE + 6 x FE16 x GE4 x GE Power over Ethernet (802.3af, 802.3at) None 4 ports—50 W total 16 ports GE, 150 W 48 ports GE, 250 W or 500 W WAN slots None1 x mini PIM4 x SRX mini PIM8 x GPIM USB ports (flash) 1222 per processor Content Security Acceleration— ExpressAV and Intrusion Detection and Prevention NoYES JUNOS Software version support JUNOS 9.6JUNOS 9.5 Routing Performance 60 Kpps80Kpps200Kpps900Kpps Firewall performance (Large Packets) 600 Mbps750 Mbps 1.5 Gbps7.0 Gbps Firewall performance (IMIX) 175 Mbps250 Mbps500 Mbps2.5 Gbps Firewall performance (Firewall + Routing PPS 64byte) 65 Kpps75 Kpps150 Kpps900Kpps VPN Performance — AES256+SHA-1 3DES+SHA 1 65 Mbps75 Mbps250 Mbps1.5 Gbps Intrusion Prevention System 50 Mbps80 Mbps250 Mbps900 Mbps Connections Per Second (CPS) 2K 9K35K Maximum Concurrent Sessions (512MB/1GB RAM) 16 K / 32K32K / 64K64K / 128K512 K Antivirus TBD30 Mbps85 Mbps350 Mbps High Availability A/A or A/P A/A* or A/P A/A* or A/P, Hot swap GPIMs, Dual processors*, Dual power * Supported in JUNOS 9.6

9. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 9 Typical Deployment

10. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 10 SRX210 with Integrated Convergence Services SRX Voice Elements  Survivable SIP server  SIP Media Gateway  SIP Security  Base and expandable voice ports  PoE Ports  PoE Ports scaling with EX switch Target Branch Size (# users) No. Slots Base DSP Channels Base No. of Ports Expansion Slots SRX210 2–25 1 mPIM 8–16 (codec dependent) 2 FXO, 2FXS T1/E1 4 FXO 2 FXS + 2 FXO SRX240 10–50 4 mPIMs 30–48 2 FXO, 2 FXS SRX650 50–200 8 gPIMs Requires gPIM 0 T1/E1 Dual T1/E1 6 FXO + 2 FXS 2 FXO + 6 FXS Q4 2009 FXS ports – connect your analog phone or FAX machine here FXO ports – connect to your wall phone socket E1/T1 or FXOs for carrier trunk or FXS for additional analog phones/ fax machines

11. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 11 SIP Server CORPORATE OFFICE SRX210 / SRX240 SIP Soft Switch SERVICE PROVIDER VOIP Analog PBX, Key System Channelized T-1 / E1/ FXO Local PSTN INTERNET SIP VoIP handset Digital Q4 2009 Juniper Integrated Convergence Services Stage 1: Survivable Media Gateway WAN MPLS Soft Phones FAX SIP VoIP handset SIP VoIP handset to digital or analog phone 1 1 Enterprise choice and flexibility  SIP standards  Choice of sip phones, call servers and applications  SIP Server and SIP Soft switch 22 SIP Trunking “Toll bypass”, “extension” 2 3 3 3 SIP Trunking to Corporate to PSTN (typical) 3 4 4 4 SIP Trunking “VoIP to PSTN” S.P. VoIP 5 5 Failover to PSTN X X

12. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 12 SRX Series—Firewall, Zones, and Policies ZONE “UNTRUST” Originating Zone SRX ZONE “TRUST” Default Policy—Deny All Default Policy—Allow All INTERNET Originating Zone

13. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 13 Unified Threat Management (UTM) Features Websense to block to unapproved site access Web Filtering Kaspersky Lab AV stops Viruses, file-based Trojans, Spyware, Adware, Keyloggers Kaspersky Lab AV stops viruses, file- based trojans or spread of spyware, adware, keyloggers Antivirus Symantec stops Spam / Phishing Anti-spam Juniper IDP detects/stops Worms, Trojans, DoS (L4 & L7), Scans IPS Firewall, VPN, Unified Access Control Core Security Firewall, VPN, Unified Access Control SRX Series blocks transmission of files for Data Loss Prevention Content Filtering Internal Threats External Threats INTERNET Juniper IDP detects/stops Worms, Trojans, DoS (L4 & L7), Scans

14. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 14 Juniper Networks Unified Access Control (UAC) UAC AgentEX Series L2 Switch 802.1X Switches & Access Points APPLICATIONS Juniper Firewall Platforms POLICY SERVER Identity Stores IC Series 1 UAC Enforcement Points DataAppInternet NSSSG ISG 2 2 3 Control Access to Protected Resources Dynamically Provision Policy Enforcement Authenticate User, Profile Endpoint, Determine Location Comprehensive, vendor-agnostic, standards-based access control across heterogeneous environments delivering investment protection 1 SRX

15. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 15 SRX210 Remote Access Dynamic VPN Service – Access Manager Client  A dynamic IPSEC Client that is automatically downloaded  5-user, 10-user, 25-user, 50-user (SRX240) license option with simultaneous tunnel enforcement  Supported on the SRX100, SRX210, and SRX240  Not supported on SRX650  Automatic client upgrade capabilities  Self-provisioning from SRX210, SRX240  IPSec with TCP-based fallback for NAT traversal  Initial release to support Windows platforms—XP, Vista, Win 2000 WiredWireless 3G Wireless Dynamic VPN Services INTERNET Q2 2009

16. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 16 SRX210 3G Wireless WAN Deployments-  Primary connection where wired broadband is not available  Back up connectivity with wired primary.  Out of band management, remote deployment.  Available on SRX210 HQDatacenter 3G Wireless Dynamic VPN Services INTERNET 2H 2009 Retail Branch Regional

17. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 17 Branch Wireless AP Solution  Juniper 802.11n indoor Solution –Backwards compatible to.11a/b/g –Dual mode radio support 300Mbps (Aggregate) –Single radio 200Mbps (160Mbps typical) –Spatial Streams: 2x2:2, 2x3:2, 3x3:2 –UL2043 Plenum rated for over ceiling mounting. –50 Meter range (indoor) –Unit can be mounted on ceiling or wall –Virtual AP technology – Support of up to 16 simultaneous SSIDs –802.11e WMM capable  1 Gigabit Ethernet POE support  Optional External Power Supply  Serial Consol Support  L2 Managed by SRX Branch Products  Additional licensing cost for Branch SRX to manage multiple access points – Clusters of 4,8,16 APs. Q4 2009

18. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 18 Software Features  802.1Q VLAN support –Up to 4,096 VLAN support (platform dependent) –Routed VLAN Interface (RVI) –GARP VLAN Registration Protocol (GVRP) –QOS on VLAN interface  L3 Strict priority queuing (LLQ)  L3 Smoothed Deficit Weighted Round Robin (SDWRR)  L3 Weighted Random Early Discard (WRED)  L3 Per port and per queue shaping  802.1x Port based Authentication  802.3ad (AX) link aggregation*  STP, Spanning Tree Protocol –802.1D Spanning Tree Protocol –802.1S Multiple STP –802.1w Rapid STP  Jumbo Frame Support (9,216 Byte)* Ethernet Switching SRX210 SRX240 SRX650 Hardware (Onboard Ethernet)  SRX100 –8 Fixed 10/100 (Switched or Routed)  SRX210 –Fixed 2 10/100/1000 + 6 10/100 (Switched or Routed) –802.3af optional POE (2FE + 2GE)  SRX240 –Fixed 16 Ports 10/100/1000 (Switched or Routed) –Power over Ethernet (optional all ports) –802.3af, 802.3at  SRX650 –Fixed 4 ports 10/100/1000 (Routed) Hardware Ethernet PIMs  SRX Mini-PIM (SRX210/SRX240) –1 Port SFP  16 port GigE XPIM for SRX650 –Double-high –Full-duplex 20 Gbps backplane –16 port GE and optional PoE  24 port GigE including 4 SFP slots XPIM for SRX650 –Double-high - double-wide –Optional POE - 24 port GE with PoE incl 4 SFP slots –Full-duplex 20 Gbps backplane  Optics –SRX GE SFP LH | SRX GE SFP LX | SRX GE SFP SX | SRX GE SFP 1000 Base-T | SRX FE FX SFP SRX100 * Not supported on SRX100

19. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 19 Network and Security Manager  Along with SRX, NSM Manages Juniper’s entire enterprise portfolio*  NSM is a great way to port ScreenOS customers over to a JUNOS solution and to help manage a mixed environment  Common Management also offers huge up-sell opportunity

20. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 20 Security Threat Response Manager  STRM supports SRX Series –Intrusion Prevention System (IPS) –220+ out-of-the box report templates –Fully customizable reporting engine: creating, branding and scheduling delivery of reports –Compliance reporting packages for PCI, SOX, FISMA, GLBA, and HIPAA –Reports based on control frameworks: NIST, ISO and CoBIT

21. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 21 Juniper Branch Products SSG, SRX, and J Series Products SSG Family  FW, VPN, NAT, UAC  IPv6 Security  Wireless (WLAN)  Unified Threat Management –Intrusion Prevention: DI –Antivirus—Kaspersky –Web filtering—Websense –Anti-spam—Symantec J Series  FW, VPN, NAT, UAC  Routing, Switching, QOS, MPLS  WX—ISM 200 Application Acceleration  VoIP—Avaya Integ. Gway  Unified Threat Management –Full IDP—Juniper –Antivirus—Kaspersky –Web filtering—Websense –Anti-spam—Symantec SRX  Unified Threat Management –Full IDP—Juniper –Antivirus—Kaspersky –Web filtering—Websense –Anti-spam—Symantec  VoIP –Juniper OpenCommunications –Power over Ethernet  FW, VPN, NAT, UAC SSG320M SSG5 Wireless SSG20 Wireless J2320 J2350 SSG140 SSG350M SSG520 SSG520M J6350 SSG550 SSG550M J4350 SRX 100 SRX 210 SRX 240 SRX 650

22. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 22 SRX COMPETITIVE COMPARISON

23. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 23 Competitive Advantage Technical features –New Capabilities  CSA / ExpressAV  3G  VoIP  PoE –Existing features  JUNOS  IPS / Antivirus  UTM –Cross portfolio  SRX  EX  STRM  NSM Business Features –Deploy new technology where it was not feasible due to cost / availability –Deployment and Management –Solution instead of boxes

24. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 24 Cisco installed base is a huge opportunity Cisco RouterNumber SoldLifecycle Status 1600 Series 1 millionEnd of support 1700 Series 2 millionEnd of sales 2500 Series 2 millionEnd of support 2600 Series 2.5 millionEnd of SW / End of sales 3600 Series 680,000End of SW 3700 Series 200,000End of sales 7200 Series 330,000Obsolete technology 7500 Series 100,000End of sales Know your opportunity  ~$40 Billion install base of Cisco product has been end-of-lifed in the last 24 months  The opportunity for Juniper has never been better

25. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 25 Competitive Platform Comparison Cisco 800 Series  Cisco 870 Series Fixed platforms ($649 - $949) Cisco 1800 Series  Cisco 1801 – 1812 Fixed platforms ($1,000 - $1,995)  Cisco 1841 Modular platform ($1,395) Cisco 2800 Series  Cisco 2801 ($1,995 - $2,370)  Cisco 2811 ($2,495 - $2,895)  Cisco 2821 ($3,895 - $4,395)  Cisco 2851 ($6,495 - $6,995) Cisco 3800 Series  Cisco 3825 ($9,500 - $10,250)  Cisco 3845 ($13,000 - 14,000) Cisco 7200 VXR Series  4 Chassis, $4,000 - $7,500  4 Proc Eng, $4,500 - $19,000 SRX (Entry-Level)  SRX 100 Fixed platforms –$699 - $1,149  SRX 210 Modular platforms –$1,099 - $1,699  SRX 240 Modular platforms –$2,999 - $3,699 SRX (Mid-Range)  SRX 650 - $16,000

26. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 26 Competitive Financial — Cisco ISR 1841 vs. SRX210  $1,395  $ 425 4 port FE Module  $1,820 BASE PLATFORM  $1,099 (2GE + 6FE included)  $1,800* ENTERPRISE LICENSE  FREE* *ISR Advanced Enterprise License *Routing/Firewall/VPN  $3,000* IPS  $250* *AIM Module *High-memory version with Content Security Accelerator  NO Antivirus  NO Anti-spam UTM  Antivirus  Anti-spam  Web filtering TOTAL  $6,620  $1,349 80% Savings Does not take into account Maintenance and Management

27. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 27 Competitive Financial — Cisco ISR 2811 vs. SRX240  $2,495  $2,295 16 port FE Module  $4,790 BASE PLATFORM  $2,999 (16GE included)  $2,400 ENTERPRISE LICENSE  FREE* *ISR Advanced Enterprise License *Routing/Firewall/VPN  $3,000 IPS  $700* *AIM Module *High-memory version with Content Security Accelerator  NO Antivirus  NO Anti-spam UTM  Antivirus  Anti-spam  Web filtering TOTAL  $10,190  $3,699 74% Savings Does not take into account Maintenance and Management

28. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 28 Competitive Financial — Cisco ISR 3845 vs. SRX650  $13,000 BASE PLATFORM  $16,000  $3,500 ENTERPRISE LICENSE  FREE* *ISR Advanced Enterprise License *Routing/Firewall/VPN  $3,000 IPS  Included *AIM Module  NO Antivirus  NO Anti-spam UTM  Antivirus  Anti-spam  Web filtering TOTAL  $19,500  $16,000 18% Savings Does not take into account Maintenance and Management

29. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 29 FAT – Financial Analysis Tools Financial Analysis Tools –Data Center –Campus –Branch

30. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 30 Branch Financial Analysis Tool (B-FAT) v.15

31. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 31 Competitive Financial — Cisco ISR Next Generation vs. SRX Series  Possibly similar port counts BASE PLATFORM  $1,500 - $3,500 ENTERPRISE LICENSE  FREE* *ISR Advanced Enterprise License *Routing/Firewall/VPN  Replace existing ISR IPS  Opportunity for Juniper  NO Antivirus ?  NO Anti-spam ? UTM  Antivirus  Anti-spam  Web filtering TOTAL  Unknown  10% - 70% Savings Does not take into account Maintenance and Management  SRX Series

32. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 32 Cisco Traps  Cisco pitches product without licenses and customer purchased product based on price. Customer realizes after the purchase they need the license. –Juniper includes Routing / Firewall / VPN license  Cisco pitches the products with license and offers a substantial discount. Customer asks Juniper to match X% discount. This NOT applicable since we are significantly less expensive. –Educate customer on total price not discount %.  Cisco pitches a software based solution and performance is undocumented or substandard. –Juniper builds performance into SRX Series and document it publicly  Cisco pitches multiple product lines. –JUNOS

33. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 33 How to set a Juniper Trap  Make security part of the buying process, whether they actually deploy it or not.  IPS is now affordable at branch locations, can you deal with a breach?  Will you get budget for add-on hardware in the future?  If Cisco rolls out a new product, its an opportunity to re-evaluate the networking vendor since you have to replace the Cisco product anyway.

34. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 34 SRX Series Summary (Hot sheet) Feature Cisco ISR 1841 Juniper SRX210 Cisco ISR 2811 Juniper SRX240 Cisco ISR 3845 Juniper SRX650 On-board Ethernet 2 x 10/1002 x GE + 6 x FE2 x 10/10016 x GE2 x GE4 x GE Firewall PerformanceNot stated 750 Mbs Not Stated 1.5 Gbps Not Stated 7.0 Gbps Security Acceleration AIM Module High memory version AIM Module High Memory version AIM ModuleStandard Antivirus NONE30MbpsNONE85MbsNONE350Mbs Acceleration of IPS 45Mbs85Mbs45Mbs250Mbs45Mbs900Mbs Security Acceleration Hardware $3,000$250$3,000$700$3000$0 Chassis Price $1,395$1,099$2,495$3,699$13,000$16,000 Additional Ethernet ports $425 (4 FE)$0 $2,295 (16FE + 1GE) $0 $3,295 (24FE + 1GE) $5,500 (24GE) Advanced Enterprise License $1,800$0$2,400$0$3,500$0 Total MSRP $6,620$1349$10,190$3,699$22,795$21,500 Juniper price advantage 80%64%6% Juniper IPS advantage 1.8X5.6X20X

35. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 35  Highly configurable –Fixed, semi-modular, and modular form factors –Choice of WAN, wireless, and LAN interfaces –Available voice media gateway   Extensive integration –Full suite of JUNOS routing and switching capabilities –Unmatched security, including FW, VPN, UTM, UAC, and full IPS  Exceptional performance and availability –Hardware-assisted Content Security Acceleration for ExpressAV and IPS –Control & data plane separation, redundant processing and power  Priced at $699 , $1099, $2999, and $16000 (list) New SRX Services Gateways Leveraging Juniper’s Dynamic Services Architecture ModelConfiguration SIP Gateway Content Security Acceleration FW/IPS Performance SRX100  FixedNo 600/50 Mbps SRX2101 mini PIM slot Optional  Optional750/85 Mbps SRX2404 mini PIM slots Optional  Optional1500/250 Mbps SRX6508 GPIM slots Optional  Standard7000/900 Mbps Advanced FW / VPN / Routing license included 16 X Gigabit Ethernet Full UTM 20X IPS performance Up to 80% lower price  Roadmap

36. | Copyright © 2009 Juniper Networks, Inc. | www.juniper.net 36 THANK YOU