Documente Academic
Documente Profesional
Documente Cultură
August 2010
LEGAL STATEMENT
Distributed Enterprise
3G Connectivity Solutions
Converged Services
3 Company Confidential Copyright 2009 Juniper Networks, Inc. www.juniper.net
MULTI YEAR TRENDS IN THE ENTERPRISE
Clients Global High-Performance Network Mega Data
(billions) Centers
(thousands)
Workforce Globalization
Mobile
Home
Branch
et ubi rt si D e hT
Data/App Consolidation
4 Campus
Company Confidential Copyright 2009 Juniper Networks, Inc. www.juniper.net
DISTRIBUTED ENTERPRISE REALITIES
Cost
Complexity
Risk
sr et r a uqdae H
eci ff O sel a S
rt C eci vr e S
sel a S
eci ff O sel a S
rt C eci vr e S
sel a S
Link Endpoints
Manage Endpoints
SRX5800 EX8208
SRX5600
SRX3600 NSMXpress
MX Series
SRX650
M Series EX4200
SRX240
SRX220 J Series EX3200
SRX210
SRX100 EX2200
SECURITY ROUTERS SWITCHES
API
One OS One Release One Architecture
Highly configurable
Fixed, semi-modular, and
modular form factors
Choice of WAN, wireless,
and LAN interfaces
Available voice media gateway
Extensive integration
Full suite of JUNOS routing and
switching capabilities
Content
Unmatched security, including FW, SIP FW/IPS
Model Configuration Security
VPN, UTM, UAC, and full IPS Gateway Performance
Acceleration
Exceptional performance SRX100 Fixed No No 600/60 Mbps
and availability
Hardware-assisted Content Security SRX210 1 mini PIM slot Optional Optional 750/80 Mbps
Acceleration (CSA) for ExpressAV and
IPS
SRX220 2 mini PIM slots Optional Optional 950/100 Mbps
Control & data plane separation,
redundant processing and power
SRX240 4 mini PIM slots Optional Optional 1500/250 Mbps
Priced at $699, $1099, $2199,
$2999, and $16000 (list) SRX650 8 GPIM slots Future Standard 7000/900 Mbps
SRX650
+ More LAN slots, dual
processors, dual P/S
SRX240
+ 4 WAN slots, 16 x GigE, PoE
SRX220
+ 2 WAN slots, 8 x GigE, PoE
SRX210
WAN slot, 2 x GigE, PoE
SRX100
Small Office Small to Medium Office Large Branch/Regional Office
10 Company Confidential Copyright 2009 Juniper Networks, Inc. www.juniper.net
SRX SERIES SPECIFICATION SUMMARY
FEATURES SRX100 SRX210 SRX220 SRX240 SRX650
On-board Ethernet 8 x FE 2 x GE + 6 x FE 8 x GE 16 x GE 4 x GE
JUNOS Software version support JUNOS 10.3 JUNOS 10.3 JUNOS 10.3 JUNOS 10.3 JUNOS 10.3
Routing Performance 75 Kpps 80 Kpps 120 Kpps 200 Kpps 900 Kpps
Firewall performance (Large Packets) 650 Mbps 750 Mbps 950 Mbps 1.5 Gbps 7.0 Gbps
Firewall performance (IMIX) 200 Mbps 250 Mbps 300 Mbps 500 Mbps 2.5 Gbps
VPN PerformanceAES256+SHA-1 3DES+SHA 1 65 Mbps 75 Mbps 100 Mbps 250 Mbps 1.5 Gbps
Intrusion Prevention System 60 Mbps 80 Mbps 100 Mbps 250 Mbps 900 Mbps
Connections Per Second (CPS) 2K 2K 2.5K 9K 35K
Maximum Concurrent Sessions (512MB/1GB RAM) 16 K / 32K 32K / 64K 96K 64K / 128K 512 K
Antivirus 25 Mbps 30 Mbps 35 Mbps 85 Mbps 350 Mbps
A/A or A/P,
Hot swap GPIMs,
High Availability A/A or A/P A/A or A/P A/A or A/P A/A or A/P
Dual processors,
Dual power
On-board Ethernet 8 x FE
Mini-PIM slot No
On-board Ethernet 2 x GE + 6 x FE
Mini-PIM slot 1
On-board Ethernet 8 x GE
Mini-PIM slot 2
On-board Ethernet 16 x GE
Mini-PIM slot 4
On-board Ethernet 8 x FE
GPIM slot 8
USB ports (flash) 2 per SRE Ideal for regional sites, large branches
VDSL2
1xSFP
INTERNET
SRX
External Internal
INTERNET Threats Threats
Core Security
Firewall, VPN, Unified Access Control Firewall, VPN, Unified Access Control
1
IC Series
Identity
Authenticate User, Stores
Profile Endpoint,
Determine Location 1 2 Dynamically
Provision 2
Policy APPLICATIONS
Enforcement
3
SRX210
Unified management
across Junipers SNMP, Syslog SNMP, Syslog, XML
network
infrastructure EMS NMS Visibility Diagnostics
Network lifecycle
management JUNOScope Network & Security Security Threat Advanced
Provision, Monitor, Manager (NSM) Response Manager Insight Manager
SSL VPN
MX M Infranet
Series Series Controller SRX5600
Simplified deployment-
2. USB Loads startup config
Eliminate need for- SRX 210
3. Validation of start up config
Pre-staging device 4. Secure communication to NSM
IT at point of installation 6. SRX In
Service
Reduce - 5. Download 1. Generate and export
Provisioning time Running startup config to USB
Config A Unique ID for tracking
Installation cost purposes
Untrust Interface
No truck roll configuration
Configuration parameters
to enable registration
of device to management
server
User/Password
Management Server IP
Address/Domain Name
One time password
No compromises
Powerful blend of leading SRX
performance with high speed
802.11n wireless
Applications
Voice On line in record time
Video
Unattended remote configuration
Data
and troubleshooting
Radical simplicity
Devices One JUNOS for wired AND
Smart phones wireless policy, quality, and
Bar code readers access control
Laptops
Fewer boxes, more functionality
Best signal
Bridge
Carriers
SRX210 with
Costs
Router
CONSOLIDATE Firewall/VPN
Integrated Convergence
Services
Voice Gateway
Too Much
Gear
GEAR PoE Switch
Firewall/VPN, PoE Switch, Router,
Voice gateway,UTM, IPS,UAC
UTM
IPS
UAC
Client Feature
License License FLAT
Complex
&
FLAT SERVER SERVER
LICENSE
Server Survivable
Expensive License License
Licensing LICENSE
SRX210
SRX240
Voice elements SIP No. Slots Max DSP Base No. of Expansion
Based on SIP standard Endpoints Channels Ports Slots
SRX220
2 port FXS
Solution
WAN
Migrate Network from standalone to
MPLS
Benefit
Management, features and employee
experience is seamless and consistent
Significant Cost Savings
Solution - Centralized
Problem- All calls go back to headquarters even if they are local.
Result Branch keeps running TDM/ Analog trunks at high cost.
Solution
Local SIP Trunking WAN
MPLS
Benefits
Local calls stay local which means
better voice quality. Significantly
reduce costs by reducing local lines
44 Company Confidential Copyright 2009 Juniper Networks, Inc. www.juniper.net
EXPENSIVE AND COMPLEX LICENSING
Problem
Client Server Feature Survivable
License License License License
Proliferation of devices
Solution Proliferation of Server Licenses
SIP VoIP
SIP Client on SIP Client on handset
Smartphone Laptop
Benefits
All Features Included
Flat Server License
45 Company Confidential Copyright 2009 Juniper Networks, Inc. www.juniper.net
SURVIVABILITY IS A REQUIREMENT
Problem
. Survivability is a key feature
. Enterprises are paying for licenses they typically never use
Rainy Day Sunny Day
SIPSeries
SIP Client is served by SRX Client is Served by HQ
Branch
Solution
SRX210 / SRX240
Eliminate PSTN
survivability 3G HQ
X
SIP Client
licenses Laptop
SIP VoIP
Handset
X
INTERNET
Dual Simultaneous MPLS
Registration
Benefits
Significant cost savings
Integrated Convergence
Services
Reduce Equipment Firewall/VPN, PoE Switch, Router,
Voice Gateway,UTM,
Ease Maintenance/support
No licenses FLAT
SERVER
Simplify branch deployment LICENSE