Cloud Security: Juniper vSRX and cSRX
Data centers are increasingly relying on server virtualization to provide services faster and more efficiently than before. However, with data center virtualization, there are also new problems that require additional security measures, the requirements for which are higher than for physical resources.
For many organizations, virtual security is increasingly on the list of top priorities. Indeed, on the one hand, it is easy to create, move and modify highly dynamic virtual machines in virtual data centers, and on the other hand, it can complicate the maintenance of the installation of virtual machines with security policies, as well as monitoring security policies when moving them. In fact, the agility and flexibility inherent in virtualization can lead to the loss of accessibility and control familiar to physical environments.
This pushes the IT departments of companies to implement firewalls, which allows for flexibility, adaptability and lower costs. Juniper Networks' vision for a secure software-defined network (SDSN) includes end-to-end network observability, which ensures its security from both a physical and virtual point of view, increasing the efficiency of using the cloud to detect and prevent threats in real time. As part of this concept, Juniper announced two new products - the industry's first virtual firewall with a bandwidth of 100 Gb / s and the service gateway of the SRX series, based on Docker (cSRX), providing advanced L4-L7 application level services (Content Security, unified threat protection UTM).
vSRX
Juniper vSRX is a complete virtual firewall solution. As the industry's fastest virtual security platform, vSRX offers bandwidth up to 100 Gb / s, providing scalable and reliable protection for high-performance applications.
The vSRX solution is designed for enterprises in need of security for virtual data centers located in a private and hybrid cloud environment. Such organizations have a need for segmentation of security policies, as well as the simultaneous management of security policies and configurations on physical and virtual platforms from a single control center (the management tool in this case is Junos Space Security Director.
vSRX is perfect for hosting service providers that offer security services and connectivity for virtual machines hosted by customers. Each client is provided with a separate vSRX firewall to keep its resources safe. Also, the solution will be a good choice for Managed Security Services Providers (MSSPs). In this case, the key requirements put forward to requests for services will be flexibility and the ability to quickly adapt, which will allow, depending on customer requirements, to expand and narrow the range of security services provided. By automatically delivering services as required, vSRX delivers the right reach and agility.
Juniper vSRX delivers industry-leading core firewall performance of 17 Gb / s and 4 Gb / s for IMIX traffic for large packets. Performance scalability up to 100 Gb / s and 25 Gb / s for IMIX traffic with 12 virtual CPUs. The solution has a wide range of security features: unified protection against UTM threats, specialized IPS tools, full-fledged antivirus, anti-spam, content filtering and AppSecure services (visibility and application management). vSRX is centrally managed (as mentioned above using the Junos Space Security Director), as well as automated initialization and lifecycle management through the Junos Space Virtual Director. It is possible to connect to virtual private networks and routing functions in the format of an adaptive virtual machine based on the Junos OS. It is worth noting Full HA - saving sessions when switching to a standby device.
Key Competitive Advantages Juniper vSRX
- Highest Performance Virtual Firewall with Highest Performance
- Lowest Total Cost of Ownership (CER)
- Integration with SRX Series Physical Firewalls for Centralized Management, Configuring Security and Management Policies
- Built-in Debugged Routing, Network Connectivity and High Functionality Availability
- Flexible Pricing Model
Using vSRX software is offered as a perpetual license or as a subscription. The pricing model varies depending on the type of license for bandwidth (instead of the existing one, where the number of virtual CPUs was taken as the basis). The vSRX license will be offered in three different packages with the possibility of increasing throughput by 10 MB, 100 MB, 1 GB, 2 GB and 4 GB.
- Basic firewall package (STD), including a firewall, support for virtual private network and routing functions;
-Application Protection Package (ASEC), which includes all the features of the STD package plus IPS and AppSecure;
-Package protection package (CS), which includes all the functions of the packages STD and ASEC plus antivirus, filtering web content and antispam.
In addition, a choice of features will be available as line items for advanced security services.
cSRX The cSRX
firewall provides advanced L4-L7 application layer security features (Content Security, AppSecure Services, Unified Threat Protection UTM) in a compact form factor that allows increased density on the x86 infrastructure with a boot time of less than a second.
cSRX allows security professionals to deploy and scale security with firewalls in a highly dynamic environment. The solution provides containers with Security Services VNF. The boxed version of the Juniper SRX series of firewalls allows both enterprises and service providers to significantly increase the flexibility of deploying advanced security services. Compactness, high density, and fast acceleration to working speed (fast spin-up times) are key advantages of cSRX.
Docker software containers share a single host operating system for all application containers running on that server. Containers reduce resource consumption by applications, eliminating the need for multiple copies of the OS. Thanks to this, cSRX can work faster, takes up less space, scales in both directions and, along with vSRX, provides a density level that significantly exceeds full-fledged virtual machines.
Boosting efficiency by using Docker as a container management solution, the cSRX Series service gateways provide simple, adaptive, and highly scalable deployment options, encompassing many different applications. cSRX also supports Juniper Networks Contrail, OpenContrail, and other third-party solutions, and can integrate with next-generation cloud orchestration tools like OpenStack, both directly and through APIs.
The solution does not take up too much space, which saves free space and does not require reserving resources. In addition, cSRX can be extended to meet the highest requirements. With boot / restart speeds of less than 1 second, the firewall gives the client infrastructure more flexibility. At the same time, the use of cSRX helps reduce costs for companies, as customers can choose the necessary functions, focusing on their reasonable cost.
Bonus for integrators
By adding vSRX and cSRX services to their portfolio, MUK partners can get a number of benefits. So, it becomes possible to offer a virtual firewall for enterprise customers who transfer their networks to the cloud or virtualize them in whole or in part. The offer covers the needs of both physical and virtual security. A simple download and 60-day trial version of vSRX allows you to attract new customers and additional sources of profit.
All this expands partners' access to new accounts and market verticals, where the development of cloud technology leads to an increase in the need for virtual security solutions.
For questions, contact: juniper@muk.ua .
For many organizations, virtual security is increasingly on the list of top priorities. Indeed, on the one hand, it is easy to create, move and modify highly dynamic virtual machines in virtual data centers, and on the other hand, it can complicate the maintenance of the installation of virtual machines with security policies, as well as monitoring security policies when moving them. In fact, the agility and flexibility inherent in virtualization can lead to the loss of accessibility and control familiar to physical environments.
This pushes the IT departments of companies to implement firewalls, which allows for flexibility, adaptability and lower costs. Juniper Networks' vision for a secure software-defined network (SDSN) includes end-to-end network observability, which ensures its security from both a physical and virtual point of view, increasing the efficiency of using the cloud to detect and prevent threats in real time. As part of this concept, Juniper announced two new products - the industry's first virtual firewall with a bandwidth of 100 Gb / s and the service gateway of the SRX series, based on Docker (cSRX), providing advanced L4-L7 application level services (Content Security, unified threat protection UTM).
vSRX
Juniper vSRX is a complete virtual firewall solution. As the industry's fastest virtual security platform, vSRX offers bandwidth up to 100 Gb / s, providing scalable and reliable protection for high-performance applications.
The vSRX solution is designed for enterprises in need of security for virtual data centers located in a private and hybrid cloud environment. Such organizations have a need for segmentation of security policies, as well as the simultaneous management of security policies and configurations on physical and virtual platforms from a single control center (the management tool in this case is Junos Space Security Director.
vSRX is perfect for hosting service providers that offer security services and connectivity for virtual machines hosted by customers. Each client is provided with a separate vSRX firewall to keep its resources safe. Also, the solution will be a good choice for Managed Security Services Providers (MSSPs). In this case, the key requirements put forward to requests for services will be flexibility and the ability to quickly adapt, which will allow, depending on customer requirements, to expand and narrow the range of security services provided. By automatically delivering services as required, vSRX delivers the right reach and agility.
Juniper vSRX delivers industry-leading core firewall performance of 17 Gb / s and 4 Gb / s for IMIX traffic for large packets. Performance scalability up to 100 Gb / s and 25 Gb / s for IMIX traffic with 12 virtual CPUs. The solution has a wide range of security features: unified protection against UTM threats, specialized IPS tools, full-fledged antivirus, anti-spam, content filtering and AppSecure services (visibility and application management). vSRX is centrally managed (as mentioned above using the Junos Space Security Director), as well as automated initialization and lifecycle management through the Junos Space Virtual Director. It is possible to connect to virtual private networks and routing functions in the format of an adaptive virtual machine based on the Junos OS. It is worth noting Full HA - saving sessions when switching to a standby device.
Key Competitive Advantages Juniper vSRX
- Highest Performance Virtual Firewall with Highest Performance
- Lowest Total Cost of Ownership (CER)
- Integration with SRX Series Physical Firewalls for Centralized Management, Configuring Security and Management Policies
- Built-in Debugged Routing, Network Connectivity and High Functionality Availability
- Flexible Pricing Model
Using vSRX software is offered as a perpetual license or as a subscription. The pricing model varies depending on the type of license for bandwidth (instead of the existing one, where the number of virtual CPUs was taken as the basis). The vSRX license will be offered in three different packages with the possibility of increasing throughput by 10 MB, 100 MB, 1 GB, 2 GB and 4 GB.
- Basic firewall package (STD), including a firewall, support for virtual private network and routing functions;
-Application Protection Package (ASEC), which includes all the features of the STD package plus IPS and AppSecure;
-Package protection package (CS), which includes all the functions of the packages STD and ASEC plus antivirus, filtering web content and antispam.
In addition, a choice of features will be available as line items for advanced security services.
cSRX The cSRX
firewall provides advanced L4-L7 application layer security features (Content Security, AppSecure Services, Unified Threat Protection UTM) in a compact form factor that allows increased density on the x86 infrastructure with a boot time of less than a second.
cSRX allows security professionals to deploy and scale security with firewalls in a highly dynamic environment. The solution provides containers with Security Services VNF. The boxed version of the Juniper SRX series of firewalls allows both enterprises and service providers to significantly increase the flexibility of deploying advanced security services. Compactness, high density, and fast acceleration to working speed (fast spin-up times) are key advantages of cSRX.
Docker software containers share a single host operating system for all application containers running on that server. Containers reduce resource consumption by applications, eliminating the need for multiple copies of the OS. Thanks to this, cSRX can work faster, takes up less space, scales in both directions and, along with vSRX, provides a density level that significantly exceeds full-fledged virtual machines.
Boosting efficiency by using Docker as a container management solution, the cSRX Series service gateways provide simple, adaptive, and highly scalable deployment options, encompassing many different applications. cSRX also supports Juniper Networks Contrail, OpenContrail, and other third-party solutions, and can integrate with next-generation cloud orchestration tools like OpenStack, both directly and through APIs.
The solution does not take up too much space, which saves free space and does not require reserving resources. In addition, cSRX can be extended to meet the highest requirements. With boot / restart speeds of less than 1 second, the firewall gives the client infrastructure more flexibility. At the same time, the use of cSRX helps reduce costs for companies, as customers can choose the necessary functions, focusing on their reasonable cost.
Bonus for integrators
By adding vSRX and cSRX services to their portfolio, MUK partners can get a number of benefits. So, it becomes possible to offer a virtual firewall for enterprise customers who transfer their networks to the cloud or virtualize them in whole or in part. The offer covers the needs of both physical and virtual security. A simple download and 60-day trial version of vSRX allows you to attract new customers and additional sources of profit.
All this expands partners' access to new accounts and market verticals, where the development of cloud technology leads to an increase in the need for virtual security solutions.
For questions, contact: juniper@muk.ua .