Juniper Networks (NetScreen) Firewall Solutions

Juniper Networks purpose-built security appliances and systems include a Stateful inspection firewall that can be the cornerstone from which you build a robust security infrastructure and protect you from attacks at the network layer. But how do you protect your network against application-level attacks? Juniper Networks Deep Inspection firewall builds on the strength of Stateful inspection and integrates intrusion prevention technology into the firewall to provide application-level attack protection for the network perimeter. Adding deeper protection to the firewall for the types of attacks that threaten small, remote and branch offices and telecommuters with home networks will enable you to stop these threats at the edge and strengthen your overall security stance.

Juniper Networks firewalls provide the protection you need, ensuring that your network security enables your business' and/or your customers’ success. Juniper Networks Stateful inspection firewalls stop unauthorized users from accessing your network resources, providing the first layer of security to protect your business assets. With Juniper Networks’ Deep Inspection technology, the firewall efficiently performs the access control and network security functions as well as the analysis on the application message to determine whether to accept or deny traffic.

Juniper Networks predictable firewall performance and reliability enable you to protect against DoS as well as application-level attacks, secure wireless LANs, consolidate firewall deployments and maintain a consistent level of security as your company grows. Juniper Networks high physical and virtual interface densities allow you to create secure network segments or customer environments with a distinct firewall, security policy and management. By segmenting the network with firewalls and access control, you can prevent users from unauthorized roaming while containing any damages sustained from successful attacks. If you’re a service provider, you can leverage our segmentation capabilities to create secure customer environments on a single appliance.

Juniper Networks security solution does not stop with a firewall. It incorporates antivirus features using Trend Micro's leading antivirus technology. Juniper Networks firewall is also tightly integrated with an IPSec VPN solution to provide you the ability to establish secure, remote communications with employees, business partners and customers—all without having to buy additional hardware. Juniper Networks integrated firewall/VPN solutions can be managed using a single interface, simplifying configuration, deployment, and ongoing management to deliver a product that efficiently meets your network security needs and reduces your total cost of ownership.
 

High Performance Architecture

At the heart of each of the devices Juniper Networks produce is an ASIC that is specifically designed to accelerate firewall, encryption, authentication, and PKI processing. By performing computationally intensive tasks in silicon, we can provide security solutions that can surpass the performance of competitive software-based solutions.

For optimal integration of hardware and software processing, Juniper Networks have used a high-speed multi-bus architecture that couples each ASIC with a RISC processor, SDRAM, and Ethernet interfaces. Unlike firewalls that employ PC hardware, the platforms that Juniper Networks provide are tightly integrated systems designed for high-performance, high-availability environments. The integrated nature of Juniper Networks security solution allows you to avoid the ongoing maintenance required by general purpose operating systems.

Security Specific Operating System
A controlling element in Juniper Networks devices is the operating system, Juniper Networks ScreenOS, a real-time, security-specific operating system. ScreenOS includes a robust set of security and management applications including:

• Common Criteria and ICSA certified Stateful inspection firewall for network protection
   

• ICSA certified IPSec VPN gateway for interoperable, secure communications
   

• Deep Inspection for application-level attack protection
   

• Virtualization capabilities for network segmentation
   

• High Availability to ensure maximum network reliability
   

• Rich set of management interfaces, both internal and external to facilitate deployment

The real time nature of the operating system combined with a purpose-built hardware platform means that it does not suffer from connection table and processing limits found in general-purpose operating systems. It is designed to eliminate known security flaws that can be found in general purpose operating systems. An added benefit to the real time nature of ScreenOS is that it cannot be easily analyzed for vulnerabilities by hackers since the source code is not publicly available.