1610002 srx sales_deck

SRX Product Presentation

August 2010

LEGAL STATEMENT

This statement of product direction sets forth Juniper
Networks’ current intention and is subject to change at
any time without notice. No purchases are contingent upon
Juniper Networks delivering any feature or functionality
depicted on this statement.

2 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net

TABLE OF CONTENTS

Distributed Enterprise

SRX Series Services Gateways

AX411 Wireless LAN Access Point

3G Connectivity Solutions

Converged Services

MULTI YEAR TRENDS IN THE ENTERPRISE
Clients Global High-Performance Network Mega Data
(billions) Centers
(thousands)

Workforce Globalization
Mobile

Home

Branch
e ub rt s D e hT

Data/App Consolidation
t i i

4 Campus
Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net

DISTRIBUTED ENTERPRISE REALITIES

 Cost
 Complexity
 Risk
sr e r a uqdae H

y na p m c deri uqc A
r e ne C gn r ee n gn E

ec ff O se a S

rt C ec vr e S

se a S
l

l

PIXDM C-Works ASDM C-Works CNA C-Works ASDM
i

i

Linux IOS124 IPS IOS124 IOS122 Linux IPS
Firewall
High-performance WANOpt Switch enterprise networks:
WANOpt IPS
distributed WANOpt IPS
i

i
t

o

 Secure and reliable transactions
ASDM CNA MARS LMS
C-Works LMS
IPS 
IOS122 Responsive and private applications
PIXOS IOX
t

IOS IOX
IPS Access Firewall Router
 High-quality collaboration and communications
Router Router

LMS C-View MARS
M-IOS IOS123 PIXOS
Aggr’n Core Firewall

5 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

DELIVERING CONSISTENT NETWORK SERVICES

High-performance distributed enterprise networks:
 Responsive application access
 Secure and reliable transactions
 High-quality collaboration and communications
sr e r a uqdae H

y na p m c deri uqc A
r e ne C gn r ee n gn E

ec ff O se a S

rt C ec vr e S

se a S
l

l
i

i

Link Endpoints
i

i
t

o

Manage Endpoints
t

Manage the Links


JUNOS OPERATING SYSTEM
T Series
EX8216

SRX5800 EX8208

SRX5600

SRX3600 NSMXpress

MX Series
SRX650
M Series EX4200
SRX240
SRX220 J Series EX3200
SRX210
SRX100 EX2200
SECURITY ROUTERS SWITCHES

9.4 9.5 9.6
Frequent Releases Module
J Series Tx Matrix x

–API–
One OS One Release One Architecture


SRX SERVICES GATEWAYS

Highly configurable
– Fixed, semi-modular, and
modular form factors
– Choice of WAN, wireless,
and LAN interfaces
– Available voice media gateway

Extensive integration
– Full suite of JUNOS routing and
switching capabilities
Content
– Unmatched security, including FW, SIP FW/IPS
Model Configuration Security
VPN, UTM, UAC, and full IPS Gateway Performance
Acceleration
Exceptional performance SRX100 Fixed No No 600/60 Mbps
and availability
– Hardware-assisted Content Security SRX210 1 mini PIM slot Optional Optional 750/80 Mbps
Acceleration (CSA) for ExpressAV and
IPS
SRX220 2 mini PIM slots Optional Optional 950/100 Mbps
– Control & data plane separation,
redundant processing and power
SRX240 4 mini PIM slots Optional Optional 1500/250 Mbps
Priced at $699, $1099, $2199,
$2999, and $16000 (list) SRX650 8 GPIM slots Future Standard 7000/900 Mbps


AWARD WINNING!

SRX650 wins Best of Interop SRX210 wins Tokyo Interop Grand
Award, Infrastructure Category Prix (highest honor) for SMB
Infrastructure
 When: Wednesday, May 20th,
 When: Wednesday, June 10th,
2009 at Interop Las Vegas 2009 at Interop Tokyo
 Why: Judges praise the SRX650  Why: Judges are “amazed that
as a “Branch Office Swiss Army high-performance JUNOS
Knife” that “packs a bunch of software is installed in this small
horsepower and features” appliance” – the vote was
unanimous!


SRX BRANCH PORTFOLIO

SRX650
+ More LAN slots, dual
processors, dual P/S
SRX240
+ 4 WAN slots, 16 x GigE, PoE

SRX220
+ 2 WAN slots, 8 x GigE, PoE

SRX210
WAN slot, 2 x GigE, PoE

SRX100
Small Office Small to Medium Office Large Branch/Regional Office

SRX SERIES SPECIFICATION SUMMARY
FEATURES SRX100 SRX210 SRX220 SRX240 SRX650
On-board Ethernet 8 x FE 2 x GE + 6 x FE 8 x GE 16 x GE 4 x GE

4 ports—50 W 8 ports GE, 16 ports GE, 48 ports GE,
Power over Ethernet (802.3af, 802.3at) None
total 120 W 150 W 250 W or 500 W

2 x SRX mini 4 x SRX mini
WAN slots None 1 x mini PIM 8 x GPIM
PIM PIM
USB ports (flash) 1 2 2 2 2 per processor
Content Security Acceleration—
No YES YES YES YES
ExpressAV and Intrusion Detection and Prevention

JUNOS Software version support JUNOS 10.3 JUNOS 10.3 JUNOS 10.3 JUNOS 10.3 JUNOS 10.3
Routing Performance 75 Kpps 80 Kpps 120 Kpps 200 Kpps 900 Kpps
Firewall performance (Large Packets) 650 Mbps 750 Mbps 950 Mbps 1.5 Gbps 7.0 Gbps
Firewall performance (IMIX) 200 Mbps 250 Mbps 300 Mbps 500 Mbps 2.5 Gbps
VPN Performance—AES256+SHA-1 3DES+SHA 1 65 Mbps 75 Mbps 100 Mbps 250 Mbps 1.5 Gbps
Intrusion Prevention System 60 Mbps 80 Mbps 100 Mbps 250 Mbps 900 Mbps
Connections Per Second (CPS) 2K 2K 2.5K 9K 35K
Maximum Concurrent Sessions (512MB/1GB RAM) 16 K / 32K 32K / 64K 96K 64K / 128K 512 K
Antivirus 25 Mbps 30 Mbps 35 Mbps 85 Mbps 350 Mbps

A/A or A/P,
Hot swap GPIMs,
High Availability A/A or A/P A/A or A/P A/A or A/P A/A or A/P
Dual processors,
Dual power


TYPICAL DEPLOYMENT


SRX100

On-board Ethernet 8 x FE

Mini-PIM slot No

USB ports (flash) 1 Ideal for small sites and
Power over Ethernet No managed telecommuters
PSTN voice ports No Fixed I/O – 8 10/100 Ethernet
Routing Performance 75 Kpps ports
Firewall Performance 200 Mbps (IMIX) Full UTM features: Firewall,
VPN Performance 65 Mbps
antivirus, anti-spam, anti-
spyware, web filtering, IPS (IDP)
IDP Performance 60 Mbps

High Availability A/A or A/P
UTM requires High memory
version


SRX210

On-board Ethernet 2 x GE + 6 x FE

Mini-PIM slot 1

USB ports (flash) 2 Ideal for Small branches
Power over Ethernet 4 ports—50 W total Full UTM features: Firewall,
PSTN voice ports Yes antivirus, anti-spam, anti-
Routing Performance 80 Kpps
Firewall Performance 250 Mbps (IMIX) UTM requires High memory
version

IDP Performance 80 Mbps Available voice version with
mini-PIM options
High Availability A/A or A/P
 Factory-configured voice model


SRX220

On-board Ethernet 8 x GE

Mini-PIM slot 2

USB ports (flash) 2 Ideal for small to medium branches
8 ports GE, Full UTM features: Firewall, antivirus,
Power over Ethernet
120 W (Q4 2010)
anti-spam, anti-spyware, web
PSTN voice ports Yes (Q4 2010)
filtering, IPS (IDP)
2 Mini-PIM slots for WAN fail-over
Firewall Performance 300 Mbps (IMIX)
High memory version only

IDP Performance 100 Mbps Factory configured PoE version
High Availability A/A or A/P (Q4 2010)
Voice configuration (Q4 2010)


SRX240

On-board Ethernet 16 x GE

Mini-PIM slot 4

USB ports (flash) 2 Ideal for Small branches
16 ports GE,
Power over Ethernet
150 W Full UTM features: Firewall,
antivirus, anti-spam, anti-
PSTN voice ports Yes
UTM requires High memory
Firewall Performance 500 Mbps (IMIX)
version
Available voice version with
mini-PIM options
High Availability A/A or A/P  Factory-configured voice model


SRX650

On-board Ethernet 8 x FE

GPIM slot 8

USB ports (flash) 2 per SRE Ideal for regional sites, large branches

Up to 48 ports GE, Modular
Power over Ethernet
247 W  LAN switching
PSTN voice ports Future  Services Routing Processors with
optional redundancy (Future)
Routing Performance 900Kpps
 Power supplies with optional
Firewall Performance 2.5 Gbps (IMIX) redundancy (at FRS)
 Voice configurations (Future)
VPN Performance 1.5 Gbps

Full UTM features: Firewall, antivirus,
anti-spam, anti-spyware, web filtering,
High Availability A/A or A/P IPS (IDP)
Max GE 52 ports
(2 x 24 GE PIM + 4 integrated ports)

NEW MINI PIMS FOR SRX200 LINE
Single-port VDSL2 Single-port G.SHDSL Single-port DOCSIS3
 ADSL, ADSL2,  Standards-based  Compatible with
ADSL2+ G.991.2 versions 3.0, 2.0,
Compatible  8-wire, 4-wire or 2-
1.1 and 1.0 of the
 ITU-T G.933.2
standard
wire mode
 Support for 4
 Annex A, B, F & G  Provides symmetric
downstream/4
 Major DSLAM
speeds between 2.3
upstream channel
Mbps and 22.7
Interoperability bonding
Mbps
 Max 170 Mbps
down/120 Mbps up

VDSL2


NEW MINI PIMS FOR SRX200 LINE
Single-port SFP mPIM
 Provides Fiber or Copper connectivity @1Gbps throughput

 Jumbo frames support

1xSFP


NEW GPIMS FOR SRX650
2-port 10GE Fiber and Copper GPIM
• 10GE Fiber/SFP+ and Copper (10G BaseT)
• SFP+ ports can support direct-connect (10M) copper


SRX SERIES—FIREWALL, ZONES, AND POLICIES
ZONE “UNTRUST”
Originating Zone

INTERNET

Default Policy—Allow All Default Policy—Deny All

SRX

Originating Zone Originating Zone

ZONE “Trust” ZONE “Accounting” ZONE “Guest”

UNIFIED THREAT MANAGEMENT (UTM) FEATURES

External Internal
INTERNET Threats Threats

IPS Juniper IDP detects/stops Worms, Trojans,
Juniper IDP detects/stops Worms, Trojans,
DoS (L4 & L7), Scans DoS (L4 & L7), Scans

Web Filtering Websense to block to unapproved site
access

Antivirus Kaspersky Lab AV stops viruses, file-
Kaspersky Lab AV stops Viruses, file-based based trojans or spread of spyware,
Trojans, Spyware, Adware, Keyloggers adware, keyloggers
Antispam
Symantec stops Spam / Phishing

Content Filtering SRX Series blocks transmission of files
for Data Loss Prevention

Core Security
Firewall, VPN, Unified Access Control Firewall, VPN, Unified Access Control


UNIFIED ACCESS CONTROL (UAC)
POLICY SERVER

1
IC Series
Identity
Authenticate User, Stores
Profile Endpoint,
Determine Location 1 2 Dynamically
Provision 2
Policy APPLICATIONS
Enforcement
3

Control Data App Internet
ISG
UAC Agent EX Series Access to
L2 Switch
Protected
Resources
SSG NS
802.1X Switches & Juniper Firewall
Access Points Platforms

UAC Enforcement Points

Comprehensive, vendor-agnostic, standards-based access control across
heterogeneous environments delivering investment protection

REMOTE ACCESS VPN
Dynamic VPN Service –
Access Manager Client
A dynamic IPSEC Client that is automatically
downloaded
5-user, 10-user, 25-user, 50-user, 100-user, Wireless Wired
and 150-user license option with
simultaneous tunnel enforcement
Supported on the SRX100,
SRX210, SRX220, SRX240, and SRX650
3G Wireless
Automatic client upgrade capabilities
INTERNET
Self-provisioning from SRX100, SRX210,
SRX220, SRX240, and SRX650
IPSec with TCP-based fallback for NAT
traversal Dynamic VPN Services

Initial release to support Windows platforms—
XP, Vista, Win 2000

SRX210


UNIFIED MANAGEMENT

 Unified management
across Juniper’s SNMP, Syslog SNMP, Syslog, XML
network
infrastructure EMS NMS Visibility Diagnostics

 Network lifecycle
management— JUNOScope Network & Security Security Threat Advanced
Provision, Monitor, Manager (NSM) Response Manager Insight Manager

and Troubleshoot NETWORK MANAGEMENT
NetConf, DMI, Syslog, Sflow
 Consistent and Open
Telnet, HTTP /
standards NBI for SSH, XML ONE ONE HTTPS XML
easy integration with JUNOS Web UI
3rd party NMS CLI,
JUNOScript J-Web
ISG/IDP

SSL VPN

MX M Infranet
Series Series Controller SRX5600

25 Company Confidential Routing
Copyright © 2009 Juniper Networks, Inc. www.juniper.net Security Switching

NEWORK AND SECURITY MANAGER (NSM)

Along with SRX, NSM  NSM is a great way to port  Common
Manages Juniper’s ScreenOS customers over Management also
entire enterprise to a JUNOS solution and to offers
portfolio* help manage a mixed huge up-sell
environment opportunity

SECURITY THREAT RESPONSE MANAGER (STRM)

 STRM supports SRX Series
– Intrusion Prevention System (IPS)
– 220+ out-of-the box report templates
– Fully customizable reporting engine:
creating, branding and scheduling delivery of reports
– Compliance reporting packages for PCI, SOX, FISMA, GLBA, and HIPAA
– Reports based on control frameworks: NIST, ISO and CoBIT

RAPID DEPLOYMENT

Simplified deployment-
2. USB Loads startup config
 Eliminate need for- SRX 210
3. Validation of start up config
 Pre-staging device 4. Secure communication to NSM
 IT at point of installation 6. SRX In
Service
Reduce - 5. Download 1. Generate and export
 Provisioning time Running startup config to USB
Config • A Unique ID for tracking
 Installation cost purposes
• Untrust Interface
 No “truck roll” configuration
• Configuration parameters
to enable “registration”
of device to management
server
• User/Password
• Management Server IP
Address/Domain Name
• One time password

Network and Security
Manager


JUNIPER NETWORKS
AX SERIES WLAN ACCESS POINTS

JUNIPER’S NEW WIRELESS LAN SOLUTION

Dual radio, dual band high
speed (802.11n) wireless LAN
access point (AP)
Integrated JUNOS
management
Ideal for branch office
applications with up
to 16 APs and simple
WLAN architectures
AX411 WLAN
Access Point

WIRELESS LAN PAIN POINTS

Remote site management
is hard
 Few IT resources
 Physical distance

Wireless networks double
network operation overhead
 Different wired and wireless
policies
 Complex management

802.11n speeds create
downstream bottlenecks
 300 Mbps 802.11n
 Security and services can’t keep
pace

JUNIPER’S WIRELESS LAN SOLUTION

No compromises
Powerful blend of leading SRX
performance with high speed
802.11n wireless
Applications
Voice On line in record time
Video
Unattended remote configuration
Data
and troubleshooting

Radical simplicity
Devices One JUNOS for wired AND
Smart phones wireless policy, quality, and
Bar code readers access control
Laptops
Fewer boxes, more functionality


JUNIPER NETWORKS
SOLUTIONS FOR 3G CONNECTIVITY

JUNIPER’S NEW WIRELESS WAN SOLUTIONS
PoE powered 3G to Ethernet bridge
Supports up to four customer-
supplied 3G modems
Ideal backup for wired WAN or as
CX111 Cellular
primary connectivity where wired
WAN is not available Broadband Data Bridge

3G integrated on the SRX210
 Uses the SRX210
ExpressCard slot
Ideal backup for wired WAN or as
primary connectivity where wired
WAN is not available 3G ExpressCards
for the SRX210

WIRELESS WAN PAIN POINTS

Hard to get a high performance
signal
 Hard to locate gear where RF
reception is optimal
 New cables needed for
antenna extensions
Limited choice and integration
 Too integrated: network
vendor doesn’t offer preferred
3G card
 Not integrated enough: slow
or no failover from wired to
wireless


JUNIPER’S 3G WIRELESS WAN SOLUTION

Best signal
Bridge

Get the 3G antenna out of the
wiring closet to optimize reception*
More choices
Choose router-integrated 3G or
standalone 3G bridge
Choose 3G modems from every
major manufacturer*
Higher reliability
integrated 3G

Carrier’s
SRX210 with

Tightly coupled system speeds
3G Network wired to wireless failover
Redundant radio hardware and
provider diversity*

* Requires bridge solution

ORDERING, AVAILABILITY, AND HIGHLIGHTS
CX111 Cellular
3G ExpressCards
Broadband Data Bridge
for the SRX210

3xUSB, 1xExpressCard slot Ships with external antenna
50+ modem support Verizon
Simple plug & play Sprint
Multi-modem failover support GSM worldwide
PoE powered List: $850
LED signal indicator
List: $650

EXTEND YOUR REACH
WITH CONVERGENCE SERVICES
AT THE BRANCH

SRX SERIES WITH INTEGRATED CONVERGENCE SERVICES
SOLUTION
Problem Re-Architect Cost

PSTN PSTN Tolls At every
Excess
Telecomm
AnalogELIMINATE TDM
PRI/T1 Local/LD Branch

Costs

Router
CONSOLIDATE Firewall/VPN
Integrated Convergence
Services
Voice Gateway
Too Much
Gear
GEAR PoE Switch
Firewall/VPN, PoE Switch, Router,
Voice gateway,UTM, IPS,UAC
UTM
IPS
UAC

Client Feature
License License FLAT
Complex
&
FLAT SERVER SERVER
LICENSE
Server Survivable
Expensive License License
Licensing LICENSE


SRX SERIES WITH ICS

SRX210

SRX240

Voice elements SIP No. Slots Max DSP Base No. of Expansion
 Based on SIP standard Endpoints Channels Ports Slots

 Survivable VoIP (SIP) server SRX210 4PoE, 4 FE T1/E1
48 1 mPIM 16
2 FXO, 2FXS 4 FXO
 VoIP to analog gateway 4FXS
16 PoE
 VoIP security SRX240 144 4 mPIMs 42 2 FXS and
2 FXO, 2 FXS 2 FXO

SRX220 WITH ICS BETA

SRX220

SIP No. Slots Max DSP Base No. of Expansion
Endpoints Channels Ports Slots

SRX with ICS 4PoE, 4 FE
SRX210 48 1 mPIM 16 T1/E1
2 FXO, 2FXS
 Available Q4 2010 (NA) 4 FXO
8 Gigabit PoE
SRX220 48 2 mPIM 20 4FXS
 Survivable VoIP (SIP) server 2FXO, 2FXS
2 FXS and
 VoIP to analog gateway 16 Giabit PoE 2 FXO
SRX240 144 4 mPIMs 42
2 FXO, 2 FXS
 VoIP security


MINI-PIMS - ANALOG

VA-04 VA-40 VA-22
 4 port FXO  4 port FXS  2 port FXO

 2 port FXS

Shipping Shipping Shipping


EXCESS TELECOMM COSTS
Problem – expensive local voice circuits at each branch
1000 locations Requires 4 lines at each branch
10 users per location for acceptable user experience

Solution
WAN
 Migrate Network from standalone to
MPLS

Local PSTN lines
centralized IPSec

Benefit
 Management, features and employee
experience is seamless and consistent
 Significant Cost Savings

Solution - Centralized
Problem- All calls go back to headquarters even if they are local.
Result – Branch keeps running TDM/ Analog trunks at high cost.


EXCESS TELECOMM COSTS
Problem – expensive local voice circuits the branch
Problem – Circuit switch trunks at at each branch
Locations 1000
1000 locations Requires 4 each 4000
lines @ $50lines at each branch
Users per location 10
10 users per location for month $200,000
per acceptable user experience

Solution
 Local SIP Trunking WAN
MPLS

Local PSTN lines
IPSec
Benefit
 Save bandwidth, Increased QoS and service
reliability Local
SIP
 Management, features and employee
Trunk
experience is seamless and consistent
Go from 4,000 distributed circuits
to 1,000 locally-terminated SIP trunks

Benefits
Local calls stay local which means
better voice quality. Significantly
reduce costs by reducing local lines

EXPENSIVE AND COMPLEX LICENSING
Problem
Client Server Feature Survivable
License License License License

Proliferation of devices
Solution Proliferation of Server Licenses

Eliminate per seat and
voice feature licenses for
services at the branch VoIP Server License

SIP VoIP
SIP Client on SIP Client on handset
Smartphone Laptop

Benefits
All Features Included
Flat Server License

SURVIVABILITY IS A REQUIREMENT
Problem
. Survivability is a key feature
. Enterprises are paying for licenses they typically never use
“Rainy Day” “Sunny Day”
SIP Client is served by SRX Series is Served by HQ
SIP Client
Branch
Solution
SRX210 / SRX240
Eliminate PSTN

survivability 3G HQ
X
SIP Client
licenses Laptop

SIP VoIP
Handset

X
INTERNET
Dual Simultaneous MPLS

Registration

Benefits
Significant cost savings


SRX Series with Integrated Convergence Services
Goal Solution

Reduce Telecomm Cost
Increase call quality

Integrated Convergence
Services
Reduce Equipment Firewall/VPN, PoE Switch, Router,
Voice Gateway,UTM,

Ease Maintenance/support

No licenses FLAT
SERVER
Simplify branch deployment LICENSE


1610002 srx sales_deck

Recomendados

Recomendados

Más contenido relacionado

La actualidad más candente

La actualidad más candente (9)

Similar a 1610002 srx sales_deck

Similar a 1610002 srx sales_deck (20)

Último

Último (20)

1610002 srx sales_deck

Notas del editor