1610002 srx sales_deck

  • 535 views
Uploaded on

Juniper SRX presentation

Juniper SRX presentation

More in: Design
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Be the first to comment
No Downloads

Views

Total Views
535
On Slideshare
0
From Embeds
0
Number of Embeds
0

Actions

Shares
Downloads
59
Comments
0
Likes
1

Embeds 0

No embeds

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
    No notes for slide
  • 9am - 10:00am  Service Provider Key Trends and Vertical Market and (Scott and Michael) 10am – 11:30am Examples of Managed Services with a Juniper Networks Foundation (Scott and Michael) 12am - 1:30am  Juniper Enterprise Product Overview, Road Maps for J series and Firewalls (Scott and Michael) 1:30-  2:00   Lunch 2:00- 3:30PM  Technical Presentation (Patricio or Eric)
  • Key message: The more locations you have, the more cost, complexity, and risk you will bear. Speaker notes: Speak to services without boundaries
  • Key message: No one else can do this…
  • Ask the customer about their top network design priorities. Tie the JUNOS differences to the desired valued throughout this presentation. If you can trust the software supporting your infrastructure, particularly in its most strategic and distributed components, your team can focus more of its time and effort keeping up with traffic demand as well as new application and business requirements. JUNOS Software is a single network operating system integrating routing, switching, security, and network services. JUNOS offers the power of one operating system to reduce complexity, achieve operational excellence, and dynamically deliver services with lower total cost of ownership (TCO). The key advantages of JUNOS Software derive primarily from how it is built – what Juniper calls the 1-1-1 differences: One operating system, developed along One software release train, and built on One modular software architecture
  • Highly configurable Fixed, semi-modular, and modular form factors - With choice of WAN and LAN interfaces including DSL, Cable, T1, E1, Serial, and SFP and 3G options to satisfy all your connectivity needs at your branch locations. Power over Ethernet options are available on the SRX210, SRX220, SRX240, and SRX650 to power VoIP handsets and WLAN Access Points for flexible converged voice and wireless LAN deployments. Integrated voice media gateway versions are available on SRX210 & SRX240. Integrated Voice media gateway version on SRX220 available in Q4 2010. Extensive integration Full suite of JUNOS routing and switching capabilities Unmatched security, including FW, VPN, UTM, UAC, and full IPS Exceptional performance Hardware-assisted Content Security Acceleration (CSA) significantly increases antivirus and IPS performance with increased thruput and processing Availability - Control & data plane separation, redundant processing and power Priced at $699, $1099, $2199, $2999, and $16000 (list)
  • Juniper Networks SRX650 Services Gateway was named the winner of the 2009 Best of Interop Award in the Infrastructure category during Interop Las Vegas 2009 by InformationWeek Analytics, the premium content service for business technology leaders, and Interop, the leading global business technology event series. Juniper Networks SRX210 Services Gateway was named the winner of the 2009 Best of Interop Award in the Infrastructure category for small businesses during Interop Tokyo 2009.
  • Here is snap shot of the Juniper Networks SRX Series for the Branch Portfolio in 2010. SRX100 is a fixed form factor device, ideal for Small Offices. SRX210 and SRX220 are ideal solutions for small to medium offices. SRX210 has 1 mini-PIM slots with 2 Gigabit Ethernet interfaces and 6 FE interfaces while SRX220 has 2 mini-PIM slots and 8 onboard Gigabit Ethrenet interfaces. SRX240 is ideal for medium offices with 4 built in mini-PIM slots and 16 on-board Gigabit Ethernet interfaces. SRX650 is great for large branch and regional offices with more LAN slots and dual processors and power supplies for increased availability.
  • Here is a summary of the Specifications for the SRX Series for the Branch Product Family.
  • Juniper Network Management portfolio (NSM, STRM and AIM) enables operational and cost efficiencies through: - Full network life cycle management (Provisioning/Visibility/Diagnostics) -closed loop, less resource-intensive, one-stop-shop - Single configuration/provisioning platform across Juniper’s security/routing/switching devices - Single event monitoring/threat management solution across all Juniper systems - Case automation for efficient and cost effective incident management - Network-wide visibility with application-level granularity - Appliance form factor for one stop HW/OS/Application support - Rapid deployment – no server provisioning lead times - Schema-based device/NSM interface for day 0 deployment (application transparency) - One Stop Support for hw/OS/Application Juniper Network Management for the collapsed data center leverages industry leading juniper network management products widely deployed at customers such as NSM, STRM and AIM NSM is the configuration and policy manager JMP is juniper management platform. NSM could be dead after PCM on JMP shows up – roughly end of 09.
  • *NSM currently manages J, M, MX, EX, SSL, UAC, FW/VPN, and IDP, but not WX
  • Points: Rapid deployment – using ScreenOS, NSM can easily deploy new devices into the network in remote locations. Rapid Deployment: The device WebUI wizard has the ability to ask for a configlet file at initial install and then load minimal settings so that the device can talk to NetScreen-Security Manager to request a complete download of the full configuration file. Because the management system can automatically send a configuration to a new device upon successful registration, there is no need to pre-stage a device before shipping it to a remote office. This reduces provisioning time and lowers training costs, and it is all done using a secure provisioning process. This feature works with ScreenOS 5.0. Customers have been able to roll out 100 devices in a day with limited ScreenOS knowledge required for the installer.
  • Let’s take a quick look at the SRX210 and SRX240. They’re both modular products and you can actually swap out the different WAN modules, for data connectivity, for analog/TDM voice connectivity or a mixture of both. You can see that the SRX210 has one mini-PIM (mPIM) slot and the SRX240 has 4 mPIM slots—the same mPIMs are used in both platforms. You can use your existing T1 and E1 cards today and channelize them on the SRX210 and SRX240 with ICS.   Some people may see this and say, “You have a maximum number of DSP channels of 16 and 42. Why don’t you have 24 on the SRX210?” Well, it really comes down to cost. The whole goal here is to get rid of TDM. It’s not about having lots of TDM scalability but, rather, it’s about having lots of SIP scalability. The fundamental differences that have happened over time will be explained further on.   As shown, there are 48 SIP endpoints with the SRX210 and 144 SIP endpoints with the SRX240. The SRX210 and SRX240 are survivable VoIP or SIP servers; they’re VoIP to analog gateways and they have built in, full-blown VoIP security. Each of the product has also a power failure automatic bridge, that connects one FXS port (phone) to one FXO port (Central office). This is a 4 layer of reliability of top of JUNOS (carrier grade OS, separation of data plane from control and more), deep security mechanisms to block DoS attacks and MGW survivability.
  • Let’s take a quick look at the SRX210 and SRX240. They’re both modular products and you can actually swap out the different WAN modules, for data connectivity, for analog/TDM voice connectivity or a mixture of both. You can see that the SRX210 has one mini-PIM (mPIM) slot and the SRX240 has 4 mPIM slots—the same mPIMs are used in both platforms. You can use your existing T1 and E1 cards today and channelize them on the SRX210 and SRX240 with ICS.   Some people may see this and say, “You have a maximum number of DSP channels of 16 and 42. Why don’t you have 24 on the SRX210?” Well, it really comes down to cost. The whole goal here is to get rid of TDM. It’s not about having lots of TDM scalability but, rather, it’s about having lots of SIP scalability. The fundamental differences that have happened over time will be explained further on.   As shown, there are 48 SIP endpoints with the SRX210 and 144 SIP endpoints with the SRX240. The SRX210 and SRX240 are survivable VoIP or SIP servers; they’re VoIP to analog gateways and they have built in, full-blown VoIP security. Each of the product has also a power failure automatic bridge, that connects one FXS port (phone) to one FXO port (Central office). This is a 4 layer of reliability of top of JUNOS (carrier grade OS, separation of data plane from control and more), deep security mechanisms to block DoS attacks and MGW survivability.
  • SL-29-UC-K9= Unified Communication Paper PAK for Cisco 2901-2951 N/A $700 PVDM3-16 16-channel high-density voice and video DSP module S $800 L-FL-CME-SRST-25= CME or SRST - 25 Seat E-Delivery RTU S $550 L-FL-CUBEE-25= Unified Border Element Enterprise 25 sessions E-Delivery RTU S $2,995
  • SL-29-UC-K9= Unified Communication Paper PAK for Cisco 2901-2951 N/A $700 PVDM3-16 16-channel high-density voice and video DSP module S $800 L-FL-CME-SRST-25= CME or SRST - 25 Seat E-Delivery RTU S $550 L-FL-CUBEE-25= Unified Border Element Enterprise 25 sessions E-Delivery RTU S $2,995

Transcript

  • 1. SRX Product Presentation August 2010
  • 2. LEGAL STATEMENT This statement of product direction sets forth Juniper Networks’ current intention and is subject to change at any time without notice. No purchases are contingent upon Juniper Networks delivering any feature or functionality depicted on this statement.2 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 3. TABLE OF CONTENTS Distributed Enterprise SRX Series Services Gateways AX411 Wireless LAN Access Point 3G Connectivity Solutions Converged Services3 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 4. MULTI YEAR TRENDS IN THE ENTERPRISE Clients Global High-Performance Network Mega Data (billions) Centers (thousands) Workforce Globalization Mobile Home Branche ub rt s D e hT Data/App Consolidation t i i 4 Campus Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 5. DISTRIBUTED ENTERPRISE REALITIES  Cost  Complexity  Risk sr e r a uqdae H y na p m c deri uqc A r e ne C gn r ee n gn E ec ff O se a S rt C ec vr e S se a S l l PIXDM C-Works ASDM C-Works CNA C-Works ASDM i i Linux IOS124 IPS IOS124 IOS122 Linux IPSFirewall High-performance WANOpt Switch enterprise networks: WANOpt IPS distributed WANOpt IPS i i t o  Secure and reliable transactions ASDM CNA MARS LMS C-Works LMS IPS  IOS122 Responsive and private applications PIXOS IOX t IOS IOX IPS Access Firewall Router  High-quality collaboration and communications Router Router LMS C-View MARS M-IOS IOS123 PIXOS Aggr’n Core Firewall5 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 6. DELIVERING CONSISTENT NETWORK SERVICES High-performance distributed enterprise networks:  Responsive application access  Secure and reliable transactions  High-quality collaboration and communications sr e r a uqdae H y na p m c deri uqc A r e ne C gn r ee n gn E ec ff O se a S rt C ec vr e S se a S l l i i Link Endpoints i i t o Manage Endpoints t Manage the Links6 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 7. JUNOS OPERATING SYSTEM T Series EX8216 SRX5800 EX8208 SRX5600 SRX3600 NSMXpress MX Series SRX650 M Series EX4200 SRX240 SRX220 J Series EX3200 SRX210 SRX100 EX2200 SECURITY ROUTERS SWITCHES 9.4 9.5 9.6 Frequent Releases Module J Series Tx Matrix x –API– One OS One Release One Architecture7 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 8. SRX SERVICES GATEWAYS Highly configurable – Fixed, semi-modular, and modular form factors – Choice of WAN, wireless, and LAN interfaces – Available voice media gateway Extensive integration – Full suite of JUNOS routing and switching capabilities Content – Unmatched security, including FW, SIP FW/IPS Model Configuration Security VPN, UTM, UAC, and full IPS Gateway Performance Acceleration Exceptional performance SRX100 Fixed No No 600/60 Mbps and availability – Hardware-assisted Content Security SRX210 1 mini PIM slot Optional Optional 750/80 Mbps Acceleration (CSA) for ExpressAV and IPS SRX220 2 mini PIM slots Optional Optional 950/100 Mbps – Control & data plane separation, redundant processing and power SRX240 4 mini PIM slots Optional Optional 1500/250 Mbps Priced at $699, $1099, $2199, $2999, and $16000 (list) SRX650 8 GPIM slots Future Standard 7000/900 Mbps8 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 9. AWARD WINNING!SRX650 wins Best of Interop SRX210 wins Tokyo Interop GrandAward, Infrastructure Category Prix (highest honor) for SMB Infrastructure  When: Wednesday, May 20th,  When: Wednesday, June 10th, 2009 at Interop Las Vegas 2009 at Interop Tokyo  Why: Judges praise the SRX650  Why: Judges are “amazed that as a “Branch Office Swiss Army high-performance JUNOS Knife” that “packs a bunch of software is installed in this small horsepower and features” appliance” – the vote was unanimous!9 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 10. SRX BRANCH PORTFOLIO SRX650 + More LAN slots, dual processors, dual P/S SRX240 + 4 WAN slots, 16 x GigE, PoE SRX220 + 2 WAN slots, 8 x GigE, PoE SRX210 WAN slot, 2 x GigE, PoE SRX100 Small Office Small to Medium Office Large Branch/Regional Office10 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 11. SRX SERIES SPECIFICATION SUMMARYFEATURES SRX100 SRX210 SRX220 SRX240 SRX650On-board Ethernet 8 x FE 2 x GE + 6 x FE 8 x GE 16 x GE 4 x GE 4 ports—50 W 8 ports GE, 16 ports GE, 48 ports GE,Power over Ethernet (802.3af, 802.3at) None total 120 W 150 W 250 W or 500 W 2 x SRX mini 4 x SRX miniWAN slots None 1 x mini PIM 8 x GPIM PIM PIMUSB ports (flash) 1 2 2 2 2 per processorContent Security Acceleration— No YES YES YES YESExpressAV and Intrusion Detection and PreventionJUNOS Software version support JUNOS 10.3 JUNOS 10.3 JUNOS 10.3 JUNOS 10.3 JUNOS 10.3Routing Performance 75 Kpps 80 Kpps 120 Kpps 200 Kpps 900 KppsFirewall performance (Large Packets) 650 Mbps 750 Mbps 950 Mbps 1.5 Gbps 7.0 GbpsFirewall performance (IMIX) 200 Mbps 250 Mbps 300 Mbps 500 Mbps 2.5 GbpsVPN Performance—AES256+SHA-1 3DES+SHA 1 65 Mbps 75 Mbps 100 Mbps 250 Mbps 1.5 GbpsIntrusion Prevention System 60 Mbps 80 Mbps 100 Mbps 250 Mbps 900 MbpsConnections Per Second (CPS) 2K 2K 2.5K 9K 35KMaximum Concurrent Sessions (512MB/1GB RAM) 16 K / 32K 32K / 64K 96K 64K / 128K 512 KAntivirus 25 Mbps 30 Mbps 35 Mbps 85 Mbps 350 Mbps A/A or A/P, Hot swap GPIMs,High Availability A/A or A/P A/A or A/P A/A or A/P A/A or A/P Dual processors, Dual power11 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 12. TYPICAL DEPLOYMENT12 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 13. SRX100 On-board Ethernet 8 x FE Mini-PIM slot No USB ports (flash) 1 Ideal for small sites and Power over Ethernet No managed telecommuters PSTN voice ports No Fixed I/O – 8 10/100 Ethernet Routing Performance 75 Kpps ports Firewall Performance 200 Mbps (IMIX) Full UTM features: Firewall, VPN Performance 65 Mbps antivirus, anti-spam, anti- spyware, web filtering, IPS (IDP) IDP Performance 60 Mbps High Availability A/A or A/P UTM requires High memory version13 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 14. SRX210 On-board Ethernet 2 x GE + 6 x FE Mini-PIM slot 1 USB ports (flash) 2 Ideal for Small branches Power over Ethernet 4 ports—50 W total Full UTM features: Firewall, PSTN voice ports Yes antivirus, anti-spam, anti- Routing Performance 80 Kpps spyware, web filtering, IPS (IDP) Firewall Performance 250 Mbps (IMIX) UTM requires High memory VPN Performance 75 Mbps version IDP Performance 80 Mbps Available voice version with mini-PIM options High Availability A/A or A/P  Factory-configured voice model14 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 15. SRX220 On-board Ethernet 8 x GE Mini-PIM slot 2 USB ports (flash) 2 Ideal for small to medium branches 8 ports GE, Full UTM features: Firewall, antivirus, Power over Ethernet 120 W (Q4 2010) anti-spam, anti-spyware, web PSTN voice ports Yes (Q4 2010) filtering, IPS (IDP) Routing Performance 125 Kpps 2 Mini-PIM slots for WAN fail-over Firewall Performance 300 Mbps (IMIX) High memory version only VPN Performance 100 Mbps IDP Performance 100 Mbps Factory configured PoE version High Availability A/A or A/P (Q4 2010) Voice configuration (Q4 2010)15 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 16. SRX240 On-board Ethernet 16 x GE Mini-PIM slot 4 USB ports (flash) 2 Ideal for Small branches 16 ports GE, Power over Ethernet 150 W Full UTM features: Firewall, antivirus, anti-spam, anti- PSTN voice ports Yes spyware, web filtering, IPS (IDP) Routing Performance 200 Kpps UTM requires High memory Firewall Performance 500 Mbps (IMIX) version VPN Performance 250 Mbps Available voice version with IDP Performance 250 Mbps mini-PIM options High Availability A/A or A/P  Factory-configured voice model16 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 17. SRX650 On-board Ethernet 8 x FE GPIM slot 8 USB ports (flash) 2 per SRE Ideal for regional sites, large branches Up to 48 ports GE, Modular Power over Ethernet 247 W  LAN switching PSTN voice ports Future  Services Routing Processors with optional redundancy (Future) Routing Performance 900Kpps  Power supplies with optional Firewall Performance 2.5 Gbps (IMIX) redundancy (at FRS)  Voice configurations (Future) VPN Performance 1.5 Gbps IDP Performance 900 Mbps Full UTM features: Firewall, antivirus, anti-spam, anti-spyware, web filtering, High Availability A/A or A/P IPS (IDP) Max GE 52 ports (2 x 24 GE PIM + 4 integrated ports)17 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 18. NEW MINI PIMS FOR SRX200 LINESingle-port VDSL2 Single-port G.SHDSL Single-port DOCSIS3 ADSL, ADSL2,  Standards-based  Compatible with ADSL2+ G.991.2 versions 3.0, 2.0, Compatible  8-wire, 4-wire or 2- 1.1 and 1.0 of the ITU-T G.933.2 standard wire mode  Support for 4 Annex A, B, F & G  Provides symmetric downstream/4 Major DSLAM speeds between 2.3 upstream channel Mbps and 22.7 Interoperability bonding Mbps  Max 170 Mbps down/120 Mbps up VDSL218 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 19. NEW MINI PIMS FOR SRX200 LINESingle-port SFP mPIM Provides Fiber or Copper connectivity @1Gbps throughput Jumbo frames support 1xSFP19 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 20. NEW GPIMS FOR SRX650 2-port 10GE Fiber and Copper GPIM • 10GE Fiber/SFP+ and Copper (10G BaseT) • SFP+ ports can support direct-connect (10M) copper20 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 21. SRX SERIES—FIREWALL, ZONES, AND POLICIES ZONE “UNTRUST” Originating Zone INTERNET Default Policy—Allow All Default Policy—Deny All SRXOriginating Zone Originating Zone ZONE “Trust” ZONE “Accounting” ZONE “Guest”21 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 22. UNIFIED THREAT MANAGEMENT (UTM) FEATURES External Internal INTERNET Threats ThreatsIPS Juniper IDP detects/stops Worms, Trojans, Juniper IDP detects/stops Worms, Trojans, DoS (L4 & L7), Scans DoS (L4 & L7), ScansWeb Filtering Websense to block to unapproved site accessAntivirus Kaspersky Lab AV stops viruses, file- Kaspersky Lab AV stops Viruses, file-based based trojans or spread of spyware, Trojans, Spyware, Adware, Keyloggers adware, keyloggersAntispam Symantec stops Spam / PhishingContent Filtering SRX Series blocks transmission of files for Data Loss PreventionCore Security Firewall, VPN, Unified Access Control Firewall, VPN, Unified Access Control22 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 23. UNIFIED ACCESS CONTROL (UAC) POLICY SERVER 1 IC Series Identity Authenticate User, Stores Profile Endpoint, Determine Location 1 2 Dynamically Provision 2 Policy APPLICATIONS Enforcement 3 Control Data App Internet ISG UAC Agent EX Series Access to L2 Switch Protected Resources SSG NS 802.1X Switches & Juniper Firewall Access Points Platforms UAC Enforcement Points Comprehensive, vendor-agnostic, standards-based access control across heterogeneous environments delivering investment protection23 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 24. REMOTE ACCESS VPNDynamic VPN Service – Access Manager Client A dynamic IPSEC Client that is automatically downloaded 5-user, 10-user, 25-user, 50-user, 100-user, Wireless Wired and 150-user license option with simultaneous tunnel enforcement Supported on the SRX100, SRX210, SRX220, SRX240, and SRX650 3G Wireless Automatic client upgrade capabilities INTERNET Self-provisioning from SRX100, SRX210, SRX220, SRX240, and SRX650 IPSec with TCP-based fallback for NAT traversal Dynamic VPN Services Initial release to support Windows platforms— XP, Vista, Win 2000 SRX21024 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 25. UNIFIED MANAGEMENT Unified management across Juniper’s SNMP, Syslog SNMP, Syslog, XML network infrastructure EMS NMS Visibility Diagnostics Network lifecycle management— JUNOScope Network & Security Security Threat Advanced Provision, Monitor, Manager (NSM) Response Manager Insight Manager and Troubleshoot NETWORK MANAGEMENT NetConf, DMI, Syslog, Sflow Consistent and Open Telnet, HTTP / standards NBI for SSH, XML ONE ONE HTTPS XML easy integration with JUNOS Web UI 3rd party NMS CLI, JUNOScript J-Web ISG/IDP SSL VPN MX M Infranet Series Series Controller SRX560025 Company Confidential Routing Copyright © 2009 Juniper Networks, Inc. www.juniper.net Security Switching
  • 26. NEWORK AND SECURITY MANAGER (NSM) Along with SRX, NSM  NSM is a great way to port  Common Manages Juniper’s ScreenOS customers over Management also entire enterprise to a JUNOS solution and to offers portfolio* help manage a mixed huge up-sell environment opportunity26 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 27. SECURITY THREAT RESPONSE MANAGER (STRM) STRM supports SRX Series – Intrusion Prevention System (IPS) – 220+ out-of-the box report templates – Fully customizable reporting engine: creating, branding and scheduling delivery of reports – Compliance reporting packages for PCI, SOX, FISMA, GLBA, and HIPAA – Reports based on control frameworks: NIST, ISO and CoBIT27 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 28. RAPID DEPLOYMENTSimplified deployment- 2. USB Loads startup config  Eliminate need for- SRX 210 3. Validation of start up config  Pre-staging device 4. Secure communication to NSM  IT at point of installation 6. SRX In ServiceReduce - 5. Download 1. Generate and export  Provisioning time Running startup config to USB Config • A Unique ID for tracking  Installation cost purposes • Untrust Interface  No “truck roll” configuration • Configuration parameters to enable “registration” of device to management server • User/Password • Management Server IP Address/Domain Name • One time password Network and Security Manager28 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 29. JUNIPER NETWORKS AX SERIES WLAN ACCESS POINTS29 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 30. JUNIPER’S NEW WIRELESS LAN SOLUTION Dual radio, dual band high speed (802.11n) wireless LAN access point (AP) Integrated JUNOS management Ideal for branch office applications with up to 16 APs and simple WLAN architectures AX411 WLAN Access Point30 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 31. WIRELESS LAN PAIN POINTS Remote site management is hard  Few IT resources  Physical distance Wireless networks double network operation overhead  Different wired and wireless policies  Complex management 802.11n speeds create downstream bottlenecks  300 Mbps 802.11n  Security and services can’t keep pace31 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 32. JUNIPER’S WIRELESS LAN SOLUTION No compromises Powerful blend of leading SRX performance with high speed 802.11n wireless Applications Voice On line in record time Video Unattended remote configuration Data and troubleshooting Radical simplicity Devices One JUNOS for wired AND Smart phones wireless policy, quality, and Bar code readers access control Laptops Fewer boxes, more functionality32 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 33. JUNIPER NETWORKS SOLUTIONS FOR 3G CONNECTIVITY33 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 34. JUNIPER’S NEW WIRELESS WAN SOLUTIONS PoE powered 3G to Ethernet bridge Supports up to four customer- supplied 3G modems Ideal backup for wired WAN or as CX111 Cellular primary connectivity where wired WAN is not available Broadband Data Bridge 3G integrated on the SRX210  Uses the SRX210 ExpressCard slot Ideal backup for wired WAN or as primary connectivity where wired WAN is not available 3G ExpressCards for the SRX21034 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 35. WIRELESS WAN PAIN POINTS Hard to get a high performance signal  Hard to locate gear where RF reception is optimal  New cables needed for antenna extensions Limited choice and integration  Too integrated: network vendor doesn’t offer preferred 3G card  Not integrated enough: slow or no failover from wired to wireless35 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 36. JUNIPER’S 3G WIRELESS WAN SOLUTION Best signal Bridge Get the 3G antenna out of the wiring closet to optimize reception* More choices Choose router-integrated 3G or standalone 3G bridge Choose 3G modems from every major manufacturer* Higher reliabilityintegrated 3G Carrier’sSRX210 with Tightly coupled system speeds 3G Network wired to wireless failover Redundant radio hardware and provider diversity* * Requires bridge solution 36 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 37. ORDERING, AVAILABILITY, AND HIGHLIGHTS CX111 Cellular 3G ExpressCards Broadband Data Bridge for the SRX210 3xUSB, 1xExpressCard slot Ships with external antenna 50+ modem support Verizon Simple plug & play Sprint Multi-modem failover support GSM worldwide PoE powered List: $850 LED signal indicator List: $65037 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 38. EXTEND YOUR REACH WITH CONVERGENCE SERVICES AT THE BRANCH38 Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 39. SRX SERIES WITH INTEGRATED CONVERGENCE SERVICES SOLUTION Problem Re-Architect Cost PSTN PSTN Tolls At every ExcessTelecomm AnalogELIMINATE TDM PRI/T1 Local/LD Branch Costs Router CONSOLIDATE Firewall/VPN Integrated Convergence Services Voice GatewayToo Much Gear GEAR PoE Switch Firewall/VPN, PoE Switch, Router, Voice gateway,UTM, IPS,UAC UTM IPS UAC Client Feature License License FLAT Complex & FLAT SERVER SERVER LICENSE Server SurvivableExpensive License License Licensing LICENSE 39 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 40. SRX SERIES WITH ICS SRX210 SRX240Voice elements SIP No. Slots Max DSP Base No. of Expansion Based on SIP standard Endpoints Channels Ports Slots Survivable VoIP (SIP) server SRX210 4PoE, 4 FE T1/E1 48 1 mPIM 16 2 FXO, 2FXS 4 FXO VoIP to analog gateway 4FXS 16 PoE VoIP security SRX240 144 4 mPIMs 42 2 FXS and 2 FXO, 2 FXS 2 FXO 40 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 41. SRX220 WITH ICS BETA SRX220 SIP No. Slots Max DSP Base No. of Expansion Endpoints Channels Ports SlotsSRX with ICS 4PoE, 4 FE SRX210 48 1 mPIM 16 T1/E1 2 FXO, 2FXS Available Q4 2010 (NA) 4 FXO 8 Gigabit PoE SRX220 48 2 mPIM 20 4FXS Survivable VoIP (SIP) server 2FXO, 2FXS 2 FXS and VoIP to analog gateway 16 Giabit PoE 2 FXO SRX240 144 4 mPIMs 42 2 FXO, 2 FXS VoIP security 41 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 42. MINI-PIMS - ANALOGVA-04 VA-40 VA-22 4 port FXO  4 port FXS  2 port FXO  2 port FXS Shipping Shipping Shipping42 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 43. EXCESS TELECOMM COSTS Problem – expensive local voice circuits at each branch 1000 locations Requires 4 lines at each branch 10 users per location for acceptable user experience Solution WAN  Migrate Network from standalone to MPLS Local PSTN lines centralized IPSecBenefit  Management, features and employee experience is seamless and consistent  Significant Cost Savings Solution - Centralized Problem- All calls go back to headquarters even if they are local. Result – Branch keeps running TDM/ Analog trunks at high cost.43 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 44. EXCESS TELECOMM COSTS Problem – expensive local voice circuits the branch Problem – Circuit switch trunks at at each branch Locations 1000 1000 locations Requires 4 each 4000 lines @ $50lines at each branch Users per location 10 10 users per location for month $200,000 per acceptable user experience Solution  Local SIP Trunking WAN MPLS Local PSTN lines IPSecBenefit  Save bandwidth, Increased QoS and service reliability Local SIP  Management, features and employee Trunk experience is seamless and consistent Go from 4,000 distributed circuits to 1,000 locally-terminated SIP trunks Benefits Local calls stay local which means better voice quality. Significantly reduce costs by reducing local lines44 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 45. EXPENSIVE AND COMPLEX LICENSING Problem Client Server Feature Survivable License License License License Proliferation of devices Solution Proliferation of Server Licenses Eliminate per seat and voice feature licenses for services at the branch VoIP Server License SIP VoIP SIP Client on SIP Client on handset Smartphone Laptop Benefits All Features Included Flat Server License45 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 46. SURVIVABILITY IS A REQUIREMENT Problem . Survivability is a key feature . Enterprises are paying for licenses they typically never use “Rainy Day” “Sunny Day” SIP Client is served by SRX Series is Served by HQ SIP Client Branch Solution SRX210 / SRX240 Eliminate PSTN survivability 3G HQ X SIP Client licenses Laptop SIP VoIP Handset X INTERNET Dual Simultaneous MPLS Registration Benefits Significant cost savings46 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net
  • 47. SRX Series with Integrated Convergence Services Goal Solution Reduce Telecomm Cost Increase call quality Integrated Convergence Services Reduce Equipment Firewall/VPN, PoE Switch, Router, Voice Gateway,UTM, Ease Maintenance/support No licenses FLAT SERVER Simplify branch deployment LICENSE47 Company Confidential Copyright © 2009 Juniper Networks, Inc. www.juniper.net