Security: JUNIPER SRX SERIES

SERVICE GATEWAYS

Juniper Networks SRX Series Services Gateways provide the essential capabilities required to connect, secure, and manage business and service provider networks, from the smallest offices to the largest headquarters and data centres.

SRX Series for the branch

Network security segmentation – Security zone, virtual LANs (VLANs), IPSec VPNs and virtual routers allow system administrators to tailor security and networking policies for various internal and external groups.

Application Level Security – AppSecure uses advanced classification techniques to decode and identify applications including Web 2.0 encrypted and nested applications that run within trusted protocols such as HTTP. This suite of application-aware security services can classify traffic flows, bringing greater visibility, enforcement, control and protection to network security.

Fully integrated Unified Threat Management (UTM) – Allows organisations to utilise the appropriate level of security required at a particular site instead of deploying a multi-device solution. Includes two antivirus options (on-premise or cloud-based), intrusion prevention system (IPS), antispam, and Web filtering.

SRX Series for the infrastructure and data centre

System and network resiliency – Carrier-class reliability based on features ranging from redundant hardware and components to Junos software.

Interface flexibility – Flexible I/O configuration and independent I/O scalability to meet the needs of practically any network environment.

Scalable performance – Dynamic Services Architecture allows the SRX Series to take advantage of new services with appropriate processing capabilities without reducing overall system performance.

Robust routing engine – Carrier-class routing engine provides physical and logical separation of data and control planes to enable the deployment of consolidated routing and security devices and ensure the security of routing infrastructures.

complete threat protection – Integrated security features and services include a multigigabit firewall, intrusion detection and prevention, denial of service, network address translation, and quality of service.

Network segmentation – Security zone, virtual LANs (VLANs), and virtual routers allow administrators to adapt security and networking policies for various internal, external, and demilitarized zone (DMZ) subgroups.