1610002 srx sales_deck

SRX Product Presentation

August 2010

2 Copyright © 2009 Juniper Networks, Inc. www.juniper.net Company Confidential

This statement of product direction sets forth Juniper Networks’ current intention and is subject to change at any time without notice. No purchases are contingent upon Juniper Networks delivering any feature or functionality depicted on this statement.

LEGAL STATEMENT


TABLE OF CONTENTS

Distributed Enterprise

SRX Series Services Gateways

AX411 Wireless LAN Access Point

3G Connectivity Solutions

Converged Services


MULTI YEAR TRENDS IN THE ENTERPRISE

Mega Data Centers

(thousands)

Clients(billions)

Global High-Performance Network

Campus

Branch

Home

Mobile

Workforce Globalization

Data/App Consolidation

Th

e D

istr

ibu

ted

En

terp

rise

Th

e D

istr

ibu

ted

En

terp

rise

5 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

DISTRIBUTED ENTERPRISE REALITIES

Cost

Complexity

Risk

High-performance distributed enterprise networks: Secure and reliable transactions

Responsive and private applications High-quality collaboration and communications

PIXDM

Linux

Firewall

C-Works

IOS124

WANOpt

ASDM

IPS

IPS

CNA

IOS122

Access

LMS

M-IOS

Aggr’n

C-View

IOS123

Core

ASDM

IPS

IPS

C-Works

IOS124

WANOpt

CNA

IOS122

Switch

MARS

PIXOS

Firewall

LMS

IOX

Router

C-Works

Linux

WANOpt

ASDM

IPS

IPS

C-Works

IOS

Router

LMS

IOX

Router

MARS

PIXOS

Firewall

Hea

dq

uar

ters

En

gin

eeri

ng

Cen

ter

Acq

uir

ed c

om

pan

y

Sal

es O

ffic

e

Ser

vice

Ctr

Sal

es


DELIVERING CONSISTENT NETWORK SERVICESH

ead

qu

arte

rs

En

gin

eeri

ng

Cen

ter

Acq

uir

ed c

om

pan

y

Sal

es O

ffic

e

Ser

vice

Ctr

Sal

es

High-performance distributed enterprise networks: Responsive application access Secure and reliable transactions High-quality collaboration and communications

Manage Endpoints

Link Endpoints

Manage the Links


JUNOS OPERATING SYSTEM

NSMXpress

One OS One Release One Architecture

J Series Tx MatrixFrequent Releases

9.4 9.5 9.6

–AP

I–

Modulex

SECURITY ROUTERS

J Series

M Series

T Series

EX4200

EX8208

EX8216

SWITCHES

EX3200

MX Series

EX2200

SRX3600

SRX5800

SRX210

SRX240

SRX650

SRX100

SRX5600

SRX220


SRX SERVICES GATEWAYS

Highly configurable– Fixed, semi-modular, and

modular form factors

– Choice of WAN, wireless, and LAN interfaces

– Available voice media gateway

Extensive integration– Full suite of JUNOS routing and

switching capabilities

– Unmatched security, including FW, VPN, UTM, UAC, and full IPS

Exceptional performance and availability

– Hardware-assisted Content Security Acceleration (CSA) for ExpressAV and IPS

– Control & data plane separation, redundant processing and power

Priced at $699, $1099, $2199, $2999, and $16000 (list)

Model Configuration SIPGateway

ContentSecurity

Acceleration

FW/IPSPerformance

SRX100 Fixed No No 600/60 Mbps

SRX210 1 mini PIM slot Optional Optional 750/80 Mbps

SRX220 2 mini PIM slots Optional Optional 950/100 Mbps

SRX240 4 mini PIM slots Optional Optional 1500/250 Mbps

SRX650 8 GPIM slots Future Standard 7000/900 Mbps


AWARD WINNING!

SRX650 wins Best of Interop Award, Infrastructure Category

When: Wednesday, May 20th, 2009 at Interop Las Vegas

Why: Judges praise the SRX650 as a “Branch Office Swiss Army Knife” that “packs a bunch of horsepower and features”

SRX210 wins Tokyo Interop Grand Prix (highest honor) for SMB Infrastructure

When: Wednesday, June 10th, 2009 at Interop Tokyo

Why: Judges are “amazed that high-performance JUNOS software is installed in this small appliance” – the vote was unanimous!


SRX BRANCH PORTFOLIO

Large Branch/Regional OfficeSmall OfficeSRX100

Small to Medium Office

SRX210

SRX650

WAN slot, 2 x GigE, PoE

+ More LAN slots, dual processors, dual P/S

SRX240+ 4 WAN slots, 16 x GigE, PoE

SRX220+ 2 WAN slots, 8 x GigE, PoE


SRX SERIES SPECIFICATION SUMMARY

FEATURES SRX100 SRX210 SRX220 SRX240 SRX650

On-board Ethernet 8 x FE 2 x GE + 6 x FE 8 x GE 16 x GE 4 x GE

Power over Ethernet (802.3af, 802.3at) None 4 ports—50 W

total

8 ports GE,

120 W

16 ports GE,

150 W

48 ports GE,

250 W or 500 W

WAN slots None 1 x mini PIM2 x SRX mini

PIM 4 x SRX mini

PIM 8 x GPIM

USB ports (flash) 1 2 2 2 2 per processor

Content Security Acceleration—

ExpressAV and Intrusion Detection and Prevention No YES YES YES YES

JUNOS Software version support JUNOS 10.3 JUNOS 10.3 JUNOS 10.3 JUNOS 10.3 JUNOS 10.3

Routing Performance 75 Kpps 80 Kpps 120 Kpps 200 Kpps 900 Kpps

Firewall performance (Large Packets) 650 Mbps 750 Mbps 950 Mbps 1.5 Gbps 7.0 Gbps

Firewall performance (IMIX) 200 Mbps 250 Mbps 300 Mbps 500 Mbps 2.5 Gbps

VPN Performance—AES256+SHA-1 3DES+SHA 1 65 Mbps 75 Mbps 100 Mbps 250 Mbps 1.5 Gbps

Intrusion Prevention System 60 Mbps 80 Mbps 100 Mbps 250 Mbps 900 Mbps

Connections Per Second (CPS) 2K 2K 2.5K 9K 35K

Maximum Concurrent Sessions (512MB/1GB RAM) 16 K / 32K 32K / 64K 96K 64K / 128K 512 K

Antivirus 25 Mbps 30 Mbps 35 Mbps 85 Mbps 350 Mbps

High Availability A/A or A/P A/A or A/P A/A or A/P A/A or A/P

A/A or A/P,

Hot swap GPIMs,

Dual processors, Dual power


TYPICAL DEPLOYMENT


SRX100

Ideal for small sites and managed telecommuters

Fixed I/O – 8 10/100 Ethernet ports

Full UTM features: Firewall, antivirus, anti-spam, anti-spyware, web filtering, IPS (IDP)

UTM requires High memory version

On-board Ethernet 8 x FE

Mini-PIM slot No

USB ports (flash) 1

Power over Ethernet No

PSTN voice ports No

Routing Performance 75 Kpps

Firewall Performance 200 Mbps (IMIX)

VPN Performance 65 Mbps

IDP Performance 60 Mbps

High Availability A/A or A/P


SRX210

Ideal for Small branches



Available voice version with mini-PIM options

Factory-configured voice model

On-board Ethernet 2 x GE + 6 x FE

Mini-PIM slot 1

USB ports (flash) 2

Power over Ethernet 4 ports—50 W total

PSTN voice ports Yes







SRX220

Ideal for small to medium branches


2 Mini-PIM slots for WAN fail-over

High memory version only Factory configured PoE version (Q4 2010)

Voice configuration (Q4 2010)

On-board Ethernet 8 x GE

Mini-PIM slot 2

USB ports (flash) 2

Power over Ethernet 8 ports GE, 120 W (Q4 2010)

PSTN voice ports Yes (Q4 2010)







SRX240

Ideal for Small branches



Available voice version with mini-PIM options

Factory-configured voice model

On-board Ethernet 16 x GE

Mini-PIM slot 4

USB ports (flash) 2

Power over Ethernet 16 ports GE, 150 W

PSTN voice ports Yes







SRX650

Ideal for regional sites, large branches

Modular LAN switching Services Routing Processors with

optional redundancy (Future) Power supplies with optional

redundancy (at FRS) Voice configurations (Future)


Max GE 52 ports (2 x 24 GE PIM + 4 integrated ports)

On-board Ethernet 8 x FE

GPIM slot 8

USB ports (flash) 2 per SRE

Power over Ethernet Up to 48 ports GE, 247 W

PSTN voice ports Future

Routing Performance 900Kpps

Firewall Performance 2.5 Gbps (IMIX)

VPN Performance 1.5 Gbps




NEW MINI PIMS FOR SRX200 LINE

Single-port VDSL2

ADSL, ADSL2, ADSL2+ Compatible

ITU-T G.933.2

Annex A, B, F & G

Major DSLAM Interoperability

VDSL2

Single-port G.SHDSL

Standards-based G.991.2

8-wire, 4-wire or 2-wire mode

Provides symmetric speeds between 2.3 Mbps and 22.7 Mbps

Single-port DOCSIS3

Compatible with versions 3.0, 2.0, 1.1 and 1.0 of the standard

Support for 4 downstream/4 upstream channel bonding

Max 170 Mbps down/120 Mbps up


NEW MINI PIMS FOR SRX200 LINE

1xSFP

Single-port SFP mPIM

Provides Fiber or Copper connectivity @1Gbps throughput

Jumbo frames support


NEW GPIMS FOR SRX650

2-port 10GE Fiber and Copper GPIM

• 10GE Fiber/SFP+ and Copper (10G BaseT)

• SFP+ ports can support direct-connect (10M) copper


SRX SERIES—FIREWALL, ZONES, AND POLICIESZONE “UNTRUST”ZONE “UNTRUST”

Originating ZoneOriginating Zone

SRXSRX

ZONE “Accounting”ZONE “Accounting”ZONE “Trust”ZONE “Trust”

Default Policy—Deny AllDefault Policy—Deny AllDefault Policy—Allow AllDefault Policy—Allow All

INTERNETINTERNET


ZONE “Guest”ZONE “Guest”



UNIFIED THREAT MANAGEMENT (UTM) FEATURES

Websense to block to unapproved site access

Web Filtering

Kaspersky Lab AV stops Viruses, file-based Trojans, Spyware, Adware, Keyloggers

Kaspersky Lab AV stops viruses, file-based trojans or spread of spyware, adware, keyloggers

Antivirus

Symantec stops Spam / Phishing

Antispam

Juniper IDP detects/stops Worms, Trojans, DoS (L4 & L7), Scans

IPS

Firewall, VPN, Unified Access ControlCore Security

Firewall, VPN, Unified Access Control

SRX Series blocks transmission of files for Data Loss Prevention

Content Filtering

Internal Threats

External ThreatsINTERNETINTERNET

Juniper IDP detects/stops Worms, Trojans, DoS (L4 & L7), Scans


UNIFIED ACCESS CONTROL (UAC)

UAC Agent EX Series L2 Switch

802.1X Switches & Access Points

APPLICATIONS

Juniper Firewall Platforms

POLICY SERVER

Identity Stores

IC Series

1

UAC Enforcement Points

Data App Internet

NSSSG

ISG

22

3

Control Access to Protected Resources

Dynamically Provision

Policy Enforcement

Authenticate User, Profile Endpoint,

Determine Location

Comprehensive, vendor-agnostic, standards-based access control across heterogeneous environments delivering investment protection

1


SRX210

Dynamic VPN Service – Access Manager Client

A dynamic IPSEC Client that is automatically downloaded

5-user, 10-user, 25-user, 50-user, 100-user, and 150-user license option with simultaneous tunnel enforcement

Supported on the SRX100, SRX210, SRX220, SRX240, and SRX650

Automatic client upgrade capabilities Self-provisioning from SRX100, SRX210,

SRX220, SRX240, and SRX650 IPSec with TCP-based fallback for NAT

traversal Initial release to support Windows platforms—

XP, Vista, Win 2000

WiredWireless

3G Wireless

Dynamic VPN Services

INTERNET

REMOTE ACCESS VPN


UNIFIED MANAGEMENT

Unified management across Juniper’s network infrastructure

Network lifecycle management—Provision, Monitor, and Troubleshoot

Consistent and Open standards NBI for easy integration with 3rd party NMS

EMS NMS Visibility Diagnostics

SNMP, Syslog, XMLSNMP, Syslog

NetConf, DMI, Syslog, Sflow

Security Threat Response Manager

Network & Security Manager (NSM)

JUNOScope Advanced Insight Manager

NETWORK MANAGEMENT

ONE

JUNOS

CLI, JUNOScript

ONE

J-Web

Web UI

HTTP / HTTPS XML

Telnet, SSH, XML

SwitchingSecurityRouting

MX Series

M Series

ISG/IDP

SSL VPN

Infranet Controller SRX5600


NEWORK AND SECURITY MANAGER (NSM)

Along with SRX, NSM Manages Juniper’s entire enterprise portfolio*

NSM is a great way to port ScreenOS customers over to a JUNOS solution and to help manage a mixed environment

Common Management also offers huge up-sell opportunity


SECURITY THREAT RESPONSE MANAGER (STRM)

STRM supports SRX Series– Intrusion Prevention System (IPS)

– 220+ out-of-the box report templates

– Fully customizable reporting engine: creating, branding and scheduling delivery of reports

– Compliance reporting packages for PCI, SOX, FISMA, GLBA, and HIPAA

– Reports based on control frameworks: NIST, ISO and CoBIT


RAPID DEPLOYMENT

Simplified deployment- Eliminate need for-

Pre-staging device

IT at point of installation

Reduce - Provisioning time Installation cost No “truck roll”

• A Unique ID for tracking purposes

• Untrust Interface configuration

• Configuration parameters to enable “registration” of device to management server

• User/Password

• Management Server IP Address/Domain Name

• One time password

1. Generate and export startup config to USB

Network and Security Manager

2. USB Loads startup config3. Validation of start up config4. Secure communication to NSM

SRX 210

5. Download Running Config

6. SRX In Service


JUNIPER NETWORKS AX SERIES WLAN ACCESS POINTS


JUNIPER’S NEW WIRELESS LAN SOLUTION

Dual radio, dual band high speed (802.11n) wireless LAN access point (AP)

Integrated JUNOS management

Ideal for branch office applications with up to 16 APs and simple WLAN architectures

AX411 WLANAccess Point


WIRELESS LAN PAIN POINTS

Remote site management is hard

Few IT resources Physical distance

Wireless networks double network operation overhead

Different wired and wireless policies

Complex management

802.11n speeds create downstream bottlenecks

300 Mbps 802.11n Security and services can’t keep

pace


JUNIPER’S WIRELESS LAN SOLUTION

No compromisesPowerful blend of leading SRX performance with high speed 802.11n wireless

On line in record timeUnattended remote configuration and troubleshooting

Radical simplicityOne JUNOS for wired AND wireless policy, quality, and access control

Fewer boxes, more functionality

VoiceVideoData

Smart phonesBar code readersLaptops

Applications

Devices


JUNIPER NETWORKS SOLUTIONS FOR 3G CONNECTIVITY


JUNIPER’S NEW WIRELESS WAN SOLUTIONS

PoE powered 3G to Ethernet bridge

Supports up to four customer-supplied 3G modems

Ideal backup for wired WAN or as primary connectivity where wired WAN is not available

3G ExpressCardsfor the SRX210

3G integrated on the SRX210

Uses the SRX210 ExpressCard slot

Ideal backup for wired WAN or as primary connectivity where wired WAN is not available

CX111 Cellular Broadband Data Bridge


Hard to get a high performance signal

Hard to locate gear where RF reception is optimal

New cables needed for antenna extensions

Limited choice and integration Too integrated: network

vendor doesn’t offer preferred 3G card

Not integrated enough: slow or no failover from wired to wireless

WIRELESS WAN PAIN POINTS


Bri

dg

eS

RX

210

wit

h

inte

gra

ted

3G Carrier’s

3G Network

Best signalGet the 3G antenna out of the wiring closet to optimize reception*

More choicesChoose router-integrated 3G or standalone 3G bridge

Choose 3G modems from every major manufacturer*

Higher reliabilityTightly coupled system speeds wired to wireless failover

Redundant radio hardware and provider diversity*

* Requires bridge solution

JUNIPER’S 3G WIRELESS WAN SOLUTION


ORDERING, AVAILABILITY, AND HIGHLIGHTS

3xUSB, 1xExpressCard slot 50+ modem support Simple plug & play Multi-modem failover support PoE powered LED signal indicator List: $650

Ships with external antenna

Verizon

Sprint

GSM worldwide

List: $850

CX111 Cellular Broadband Data Bridge

3G ExpressCardsfor the SRX210


EXTEND YOUR REACHWITH CONVERGENCE SERVICES AT THE BRANCH


Re-Architect Cost

Excess Telecomm

Costs

Too Much Gear

Complex &

Expensive Licensing

RouterFirewall/VPNVoice GatewayPoE SwitchUTMIPSUAC

Problem

SRX SERIES WITH INTEGRATED CONVERGENCE SERVICES

ClientLicense

ServerLicense

SurvivableLicense

FeatureLicense FLAT

SERVERLICENSE

Integrated ConvergenceServices

Firewall/VPN, PoE Switch, Router, Voice gateway,UTM, IPS,UAC

PSTNAnalog

TollsLocal/LD

At every Branch

PSTNPRI/T1

SOLUTION

ELIMINATE TDM

CONSOLIDATE GEAR

FLAT SERVER

LICENSE

SOLUTION

ELIMINATE TDM

CONSOLIDATE GEAR

FLAT SERVER

LICENSE


SRX SERIES WITH ICS

Voice elements Based on SIP standard

Survivable VoIP (SIP) server

VoIP to analog gateway

VoIP security

SIP Endpoint

s

No. Slots Max DSP Channels

Base No. of Ports

Expansion Slots

SRX210 48 1 mPIM 16 4PoE, 4 FE

2 FXO, 2FXST1/E14 FXO4FXS

2 FXS and 2 FXO

SRX240 144 4 mPIMs 42 16 PoE

2 FXO, 2 FXS

SRX240 SRX240

SRX210SRX210


SRX220 WITH ICS BETA

SRX with ICS Available Q4 2010 (NA)

Survivable VoIP (SIP) server

VoIP to analog gateway

VoIP security

SIP Endpoint

s

No. Slots Max DSP Channels

Base No. of Ports

Expansion Slots

SRX210 48 1 mPIM 16 4PoE, 4 FE

2 FXO, 2FXST1/E14 FXO4FXS

2 FXS and 2 FXO

SRX220 48 2 mPIM 20

8 Gigabit PoE

2FXO, 2FXS

SRX240 144 4 mPIMs 42

16 Giabit PoE

2 FXO, 2 FXS

SRX220SRX220


MINI-PIMS - ANALOG

VA-40

4 port FXS

VA-22

2 port FXO

2 port FXS

Shipping Shipping Shipping

VA-04

4 port FXO


Requires 4 lines at each branch for acceptable user experience

Problem – expensive local voice circuits at each branch1000 locations 10 users per location

Local PS

TN

lines

WAN MPLSIPSec

Solution Migrate Network from standalone to

centralized

Benefit Management, features and employee

experience is seamless and consistent Significant Cost Savings

Solution - Centralized

Problem- All calls go back to headquarters even if they are local.

Result – Branch keeps running TDM/ Analog trunks at high cost.

EXCESS TELECOMM COSTS


Problem – Circuit switch trunks at the branch1000 Locations

10 Users per location 4000 lines @ $50 each

$200,000 per month

Solution Local SIP Trunking

Benefit Save bandwidth, Increased QoS and service

reliability Management, features and employee

experience is seamless and consistent

BenefitsLocal calls stay local which means better voice quality. Significantly reduce costs by reducing local lines

Requires 4 lines at each branch for acceptable user experience

Problem – expensive local voice circuits at each branch1000 locations 10 users per location

Local PS

TN

lines

WAN MPLSIPSec

LocalSIP

Trunk

Go from 4,000 distributed circuitsto 1,000 locally-terminated SIP trunks

EXCESS TELECOMM COSTS


EXPENSIVE AND COMPLEX LICENSING

SolutionEliminate per seat and voice feature licenses for services at the branch

Proliferation of devices

SIP Client on Laptop

SIP VoIP handsetSIP Client on

Smartphone

VoIP Server License

Proliferation of Server LicensesProliferation of Server Licenses

Problem Client

LicenseServer

LicenseSurvivable

LicenseFeatureLicense

Benefits

All Features IncludedFlat Server License

All Features IncludedFlat Server License


SURVIVABILITY IS A REQUIREMENT

SolutionEliminate survivability licenses

ProblemSurvivability is a key feature .

Enterprises are paying for licenses they typically never use .

Benefits

Significant cost savingsSignificant cost savings

INTERNETMPLS

PSTN

HQHQ

BranchBranch

3G SIP Client Laptop

SIP VoIPHandset

SRX210 / SRX240

“Sunny Day”SIP Client is Served by HQ

“Sunny Day”SIP Client is Served by HQ

XXXX

“Rainy Day”SIP Client is served by SRX Series

“Rainy Day”SIP Client is served by SRX Series

Dual Simultaneous

Registration

Dual Simultaneous

Registration


SolutionGoal

SRX Series with Integrated Convergence Services

FLAT SERVERLICENSE

Integrated ConvergenceServices

Firewall/VPN, PoE Switch, Router, Voice Gateway,UTM,

Reduce Telecomm CostIncrease call quality

Reduce EquipmentEase Maintenance/support

No licensesSimplify branch deployment

Design

1610002 srx sales_deck