Network is the Firewall
0 likes115 views
Juniper Networks provides networking and cybersecurity products and services. Their Software Defined Secure Networks (SDSN) approach uses the network as a firewall by combining Juniper's SRX firewalls and Sky Advanced Threat Prevention software to detect and contain threats across the network. Juniper also introduced their new Sky Enterprise cloud-based management platform to centrally manage enterprise campus and branch networks with simplified configuration, monitoring, and reporting capabilities.
Network is the Firewall
- 1. Network is the Firewall Martti Saramies, Sr Partner Account Manager Juniper Networks
- 2. Network is the Firewall = Software Defined Secure Networks = SDSN ☺
- 3. S o u r c e : I H S M a r k i t , D e c e m b e r 2 0 1 7 Content • Juniper Networks at a glance • Network is the firewall = Software Defined Secure Networks • Introducing Sky Enterprise Management
- 4. S o u r c e : I H S M a r k i t , D e c e m b e r 2 0 1 7 Content • Juniper Networks at a glance • Network is the firewall = Software Defined Secure Networks • Introducing Sky Enterprise Management
- 5. Juniper Networks at a glance Founded: February 1996 Headquarters: Sunnyvale, California Employees: 9,300+ Revenue: USD $4.99 billion (2016) JUNIPER NETWORKS SUPPORTS • The Top 10 telecom companies in the world • 10 of the top 12 global technology companies • More than 1,400 national government organizations around the world. • We operate 16 24/7 technical support centers around the world • World’s Top 5 Social Media Properties run on Juniper OPEN AND AUTOMATED CLOUD Spine & Leaf Switching SDN Automation Network Analytics HIGH PERFORMANCE AGILE WAN Core & Edge Routing Branch SD-WAN Data Centre Interconnect Optical Transport SECURE NETWORKS Virtual & Physical Security Dynamic Anti-Malware Protection Software Defined Security 3 PRIMARY SOLUTION AREAS WE AUTOMATE IT 76% 24% 46% 54% 100% 80% 60% 40% 20% 0% Before Juniper With Juniper Keeping the lights on Innovation IT NETWORKING STAFF EFFICIENCY IMPROVEMENT* WE CONNECT IT WE SECURE IT NETWORKING SPECIALISTS * IDC White Paper, sponsored by Juniper, Juniper Networks: Proving the Business Value of Network Transformation, September 2016 Juniper calculations based on IDC estimates for savings per 100 usersRouting Switching Security Software Who are we? What do we do? Why work with us?
- 6. S o u r c e : I H S M a r k i t , D e c e m b e r 2 0 1 7 Content • Juniper Networks at a glance • Network is the firewall = Software Defined Secure Networks • Introducing Sky Enterprise Management
- 7. Multiple vendors and interfaces Enable detection and enforcement anywhere Isolated security functions Advanced Threat Prevention Intrusion Prevention Application Security Specialized Security Doesn’t Work Data Loss Prevention 010101001010101 010111011011101 010110101001010 111001101110101 Endpoint Protection Realize threats are already inside
- 8. Infection is Easy ! Arrivals Departures www.pdf.com
- 9. And Can Spread Without Resistance !
- 10. Unified Cybersecurity Stops the Threat Command & Control Server Quarantined Security Director + Policy Enforcer 01010101010101010 01110101 01101110 01101001 01110000 SRX/vSRX Sky Advanced Threat Prevention Juniper or 3rd Party Switch Infected Laptop MAC: 3A-34-52-C4-69-b4 IP: 172.16.254.3
- 11. Sky Advanced Threat Prevention (ATP) 101110000 SRX/vSRX Sandbox Analysis Machine Learning Sky ATP Custom and Third Party Intelligence C&C Geo IP Zero Days Malware 01101010 011 • Protects against advanced malware like ransomware • Stops advanced persistent threats • Analyses web and email files • European Data Center for data sovereignty • FedRAMP certified
- 12. Sky ATP
- 13. Security Director • Application as a match • Threat condition visibility • Reduced effort by 20x • Reduced user error • Improved remediation time Firewall Policy Threat Map Events and Logs Dashboard Application Behavior
- 14. Policy Enforcer • Automated containment via Policy Enforcer in Security Director • Extended containment to access switches • Updates enforcement criteria automatically with new threat data • Tracks infected host/endpoint movement from site to site via MAC address vs IP address • Block, quarantine, release and track
- 15. SDSN Portfolio Branch Campus Data Center Service Provider SRX5800SRX5600SRX300 SRX1500SRX500 SRX4100 SRX4200 SRX5400 1RU 5Gb/s 1RU 20Gb/s 1RU 40Gb/s 5RU 480Gb/s 8RU 960Gb/s 2RU 5.5Gb/s vSRX 4Gb/s (2 vCPU) 25Gb/s (16 vCPU) Cloud Security Director Policy Enforcer 16RU 2Tb/s Application Security SSL Inspection Intrusion Prevention User Firewall UTM Sky Advanced Threat Prevention Secure Analytics Management, Visibility, Automation SIEM Advanced Malware Defense Service Next Gen Security Services cSRX* Beta*
- 16. S o u r c e : I H S M a r k i t , D e c e m b e r 2 0 1 7 Content • Juniper Networks at a glance • Network is the firewall = Software Defined Secure Networks • Introducing Sky Enterprise Management
- 17. INTRODUCING JUNIPER SKY ENTERPRISE… “Manage your modern enterprise from the cloud without locking yourself into a walled garden”
- 18. CLOUD MANAGED SERVICE • Simple and intuitive web UI • Reliable cloud service on SSAE certified data centers • Supports enterprise grade SRX secure router and EX switches • Auto-deployment without local IT staff • Includes JTAC support Centrally manage enterprise campus and branch with ease
- 19. SKY ENTERPRISE CONFIGURATION •Auto-discovery, provisioning •Switching and routing •Security policy management •Bulk configuration changes MONITORING •Site view with Google maps •Resource utilization •Alerts and alarms •Configuration change audit REPORTING •Application Network Risk (ANR) •System, interface graphs •License tracking •Security session tracking
- 20. SKY ENTERPRISE TARGET CUSTOMER SLED (STATE, LOCAL, EDUCATION) • K-12, local govt. offices • 2x medium firewall, 30-40 switches/site SMALL TO MEDIUM ENTERPRISE • < 500 employees • Limited IT staff, Low Capex/Opex • 2x medium firewall, 5-30 switches/site RETAIL / MULTIPLE LOCATIONS • Distributed enterprise, small HQ • Single IT Admin, Low Capex/Opex • Secure router, 1-3 switches/site
- 21. KEY FEATURES AND BENEFITS Benefits: • Quick setup and installation of devices and services. No management software to install. • Secure, redundant, and resilient datacenter infrastructure • Periodic refresh of new management features • Compete with other cloud based management vendors • Ideal for Enterprise customers looking for high quality network devices with simplified management SRX devices and service management User Administration with Role based Access Control (RBAC) Cyber Threat Visibility and Protection Switch Infrastructure and service management Centralized, Intuitive Web Dashboard Zero Touch Provisioning SaaS architecture with Management / JTAC support included
- 23. Sky Enterprise EX Key Feature Support • Zero Touch Provisioning • Configuring Interface/VLAN Management and Static Routes • Device Tags • Manage switches in Virtual Chassis Configuration • Monitor System, Interface and PoE Monitoring • Configuration change audit and backup • Automated commit confirmed • Bulk Configuration changes and Software upgrades • Troubleshooting tools like Ping, Show commands • Alerts and Alarms
- 25. Sky Enterprise SRX Key Feature Support • Zero Touch Provisioning • Interface/VLAN Management, DHCP Configuration and Static Routes • Device Tags • Security Policies, Zones, NAT, UTM, App Firewall • IDP Configuration • IPSec VPNs • Advanced Policy-based routing • Application Network Risk (ANR) reports
- 26. Security Reports for AppSecure, Sky ATP, UTM - Application Network Risk (ANR) Reports
- 27. Thank you
- 28. SUBSCRIPTION SERVICE SMALL SITE (GROUP A) MEDIUM SITE (GROUP B) CAMPUS (GROUP C) • Easy installation • Cloud management • 24/7 Sky Enterprise support • ANR reports • Device: EX2300, EX3400, SRX300, SRX320 All Group A features plus • Device: EX4300, SRX340, SRX345 All Group B features plus • Device: EX4600, SRX1500 $200/device 1 year SKY-ENT-GROUPA-1YR $400/device 3 year SKY-ENT-GROUPA-3YR Free Trial Free Trial Free Trial $400/device 1 year SKY-ENT-GROUPB-1YR $800/device 3 year SKY-ENT-GROUPB-3YR $1000/device 1 year SKY-ENT-GROUC-1YR $2000/device 3 year SKY-ENT-GROUPC-3YR