Juniper Networks | Mobile Tech Insider Newsletter
file:///D/..._HTML/Juniper_html/Newsletter%20-%20Financial%20Services/03%20march%202016/jn_fs_tech_insider_march_032516.html[3/25/2016 11:11:59 AM]
March 2016
Juniper Networks Launches
Software-Defined Secure
Networks
Deploying Agile Networks for
Financial Services Today
Special Event at the NYSE:
Focus on Secure Timing
IDC Addresses Datacenter
Cybersecurity Challenges and
Solutions
In Recent News
Upcoming Events
In This Issue
Welcome to the inaugural issue of the Juniper Financial Services newsletter.
We look forward to sharing program developments, product highlights, and
relevant case studies and research with you over the coming months,
particularly those of most interest to professionals focused on enabling trusted
and resilient financial services operating environments.
In March, Juniper is focused on Software-Defined Secure Networks (SDSN) as briefed recently at
the RSA Conference 2016 in San Francisco. Please take a few minutes to review the SDSN
strategy, built on three pillars: policy, detection and enforcement. Juniper is genuinely excited about
this next-generation approach to network security and we look forward to discussing it with you.
We also have included a recent discussion I led which addresses the importance of Deploying Agile
Networks for Financial Services Today. In addition, I’m pleased to share an IDC white paper on
data center cybersecurity challenges and solutions that highlights the significant impact of security
on the financial services sector.
For those interested in learning more about why precision timing is so critical to the financial
services industry, you are invited to attend a special event we will be hosting in partnership with the
U.S. Department of Homeland Security at the New York Stock Exchange on April 19th. Following
the NYSE Opening Bell Viewing, attendees will participate in briefings on the state of precision
timing across the financial services sector, regulatory changes and drivers, and technologies that
can enhance reliability to enterprise timing infrastructures. Attendance is complimentary, but space
is limited, so I encourage you to reserve your seat today.
Individually and collectively, the Juniper Networks team is committed to helping you and your
organization advance your objectives and leverage all that the latest technologies, like SDSN, have
to offer. With that, your feedback is important to us and we are always excited to listen and
collaborate with you and all of our customers. To align with that mission, we have established
vertical and technical advisory boards as well as security roundtables in 2016 so we can hear from
you firsthand. Looking forward to engaging in the coming months and let us know how we can help
and support your requirements.
Best Regards
Tony Evans
Vice President and Managing Director, Global Financial Services
Juniper Networks Launches Software-Defined Secure
Networks
Juniper Networks announced its Software-Defined Secure Networks (SDSN) capability at the
Juniper Networks | Mobile Tech Insider Newsletter
file:///D/..._HTML/Juniper_html/Newsletter%20-%20Financial%20Services/03%20march%202016/jn_fs_tech_insider_march_032516.html[3/25/2016 11:11:59 AM]
recently-held annual RSA Conference 2016 in San Francisco. With this new approach, the focus for
Enterprise IT professionals is no longer on security at the perimeter and endpoints, rather, with
SDSN, security is embedded within and throughout the network and operates as a single domain
where every element is a policy enforcement point.
As explained to the security-minded RSA audience, the SDSN strategy is built on three pillars:
policy, detection and enforcement. The rules that govern SDSN are constructed in natural language
and are readily adaptable to the changing threat environment, thereby enabling current and future
policy directives. Threat intelligence is aggregated in a cloud-based feed, allowing analysis
throughout the network for anomalous patterns and behavior, enhancing detection and mitigation
actions. From an enforcement viewpoint, as policies are created and distributed they can be
enforced in real-time, based on near real-time threat intelligence. For a quick SDSN video overview,
click here.
These fundamental considerations are supported by an underlying infrastructure that leverages the
entire network, using a bottoms-up and top-down approach. Each network element, including
switches, routers, and firewalls can provide threat intelligence and detect threats. In addition, a
cloud-based threat defense provides security intelligence from all available sources, including third
parties and scalable malware detection. Governing the entire system is the dynamic policy engine
and controller, which adapts policies dynamically and communicates with all network elements,
including third-party wireless access points and switches.
Overseeing this security activity is Juniper’s Security Director, which provides network managers an
operational view through a customizable dashboard that allows for application of remedial action on
demand. Security Director shows the applications in use, who is using them and, when necessary,
can block use if situations or norms dictate. The comprehensive visualization tools include a threat
map that provides visibility into network-wide events for threat detection as well as comprehensive
logging and reporting. And, its simplified firewall policy automates and auto-places new rules. Click
here to understand the features and applications of Security Director and its innovative, intuitive,
and intelligent approach to network defense.
Juniper’s suite of products that centralize and automate security uniquely offer the building blocks for
implementing the SDSN. Security Director, combined with Juniper’s cloud-based security services
(Sky ATP and Spotlight), provide a trusted foundation for an open policy engine and real-time threat
mitigation for complex operating environments.
In addition to enabling the capabilities above, the Software Defined Secure Network is grounded in
integrating third party capabilities. Its Open Convergence Framework (OCF) provides integration
with Juniper’s technical alliance partners, enabling customers to subscribe to critical service feeds
and receive real-time updates on evolving threat information. This capability ensures that customer
networks are protected with the most up-to-date and effective capabilities, and enables them to
choose their preferred threat intelligence information sources.
For more information on how to fight threats with dynamic policy control, detection, and
enforcement, click here.
Deploying Agile Networks for Financial Services
Today
Financial services consumers and business customers have increasingly higher expectations for
faster, flexible, and more secure service options. Consequently, traditional financial service
providers are under pressure to modernize their legacy IT systems, particularly with the introduction
of new providers leveraging advanced technology and customer-centric mobile applications. These
market forces are driving even the most established institutions towards more responsive ways of
doing business powered by more service-aware networks.
Juniper Networks | Mobile Tech Insider Newsletter
file:///D/..._HTML/Juniper_html/Newsletter%20-%20Financial%20Services/03%20march%202016/jn_fs_tech_insider_march_032516.html[3/25/2016 11:11:59 AM]
A service-aware network is one that is agile—easily modified to adapt to new applications,
provisioned to support analytics, and designed to embrace cloud services—all while remaining
highly reliable, available, and secure. Gone is the era when data center managers could take days
or weeks to install or update applications, today’s user expects seamless and rapid application
deployment.
In a recent blog post on Driving Agility to Financial Services, Tony Evans, Vice President and
Managing Director, Global Financial Services, discusses how “the winds of change are blowing
across the financial services sector,” and why a service-aware network is critical to enabling rapid
response to market, service, and situational changes.
Evans notes that an agile network is characterized by a simple, open, and smart architecture that
provides flexibility to scale as business and processes evolve. It comprises Software Defined
Networking (SDN) and Network Functions Virtualization (NFV) that reorganize the network into
multiple layers, an IP-based underlay, with virtual networks on top. This configuration facilitates
resource management, orchestration, and service enablement.
The benefits of the agile network are:
Software release cycles are improved; fixes and improvements can be made in real-time and
new code can be deployed more frequently and with less risk.
Automation makes it possible to align data center resources with business and application
needs; human interaction is taken out of the workflow, speeding and increasing the
repeatability of tasks while eliminating manual errors.
Improved visibility into network analytics and performance, reducing trouble-shooting,
assisting planning for capacity changes, and providing an operational view that optimizes
performance.
Moving from rigid, proprietary systems to service-aware, agile networks permits financial firms to
adapt quickly to market changes, offer new services, expand capacity, and, most importantly, retain
and attract customers in the face of a broad array of competitive challenges.
To learn more about how agile networks can empower your financial services requirements, see
Juniper Networks’ new white paper, Drive Business Innovation in Financial Services with a
Service-Aware Network.
Special Event at the NYSE: Focus on Secure Timing
Juniper Networks, in partnership with the U.S.
Department of Homeland Security (DHS), will
host a special event at the New York Stock
Exchange in New York on Tuesday, April
19. Attendees are invited to attend the Opening
Bell Viewing, followed by a series of briefings
and a demonstration of why precision timing is
so critical to the financial services industry.
Secure Timing: The Financial Industry's
Critical Network Element will be held 8:30 –
11:30am and will include discussion of the
current state of precision timing for the financial
services industry, regulatory changes and
what’s driving them, as well as key
technologies that can deliver enhanced
reliability to enterprise timing infrastructures.
Juniper Networks | Mobile Tech Insider Newsletter
file:///D/..._HTML/Juniper_html/Newsletter%20-%20Financial%20Services/03%20march%202016/jn_fs_tech_insider_march_032516.html[3/25/2016 11:11:59 AM]
The program will close with a demonstration of how these innovative timing technologies can be
deployed across existing network infrastructures.
Confirmed speakers include Caitlin Durkovich, DHS Assistant Secretary for Infrastructure
Protection, Dan Cotter, Director of the First Responders’ Group (FRG) in the Science and
Technology, DHS, Chris Metts, Vice President, Global Aviation and Air Traffic Management, Harris
Corporation, Mitch Wander, Cybersecurity Advisor, Department of Treasury, Chuck Schue,
President and CEO of UrsaNav, and Andrew Bach, Juniper Networks Chief Architect for Financial
Services.
Reserve your seat now for this valuable program. There is no fee to attend, but seating is limited.
We look forward to seeing you in April.
IDC Addresses Datacenter Cybersecurity Challenges
and Solutions
A recent IDC white paper, Securing the Datacenter from Advanced Threats, addresses the state
of cybersecurity and the top concerns of IT managers, with a particular focus on datacenters in the
financial services sector. In a 2014 survey, security and risk management technologies were ranked
among the most urgent initiatives, while predictive, identification, defense, and remediation
strategies were weighted equally important among financial organizations of all types. The concerns
are not surprisingly driven by the increased sophistication of attackers, the multiplicity of threat
sources—from malicious employees to criminals to hostile nations—and are exacerbated by
software vulnerabilities, configuration weaknesses, and a rapidly evolving mobile computing
environment.
Defense against and mitigation of each of these factors over time has contributed to the evolution of
a complex and unmanageable cybersecurity domain in the datacenter and throughout the network.
This complexity leads to “false positives” that cause unnecessary system downtime and affects
scalability as institutions continually reinforce protections while attempting to maintain low-latency
response to meet growing customer demands on mobile systems.
The IDC paper describes the Juniper Networks approach to defending the datacenter through its
“secure network.” Juniper integrates physical and virtual security through its SRX and vSRX
firewalls, which combine to extend consistent security and control across the datacenter, providing
Juniper Networks | Mobile Tech Insider Newsletter
file:///D/..._HTML/Juniper_html/Newsletter%20-%20Financial%20Services/03%20march%202016/jn_fs_tech_insider_march_032516.html[3/25/2016 11:11:59 AM]
a single view of policy and operations. Managing these firewalls is the Junos Space Security
Director, which integrates with Spotlight Secure, Juniper’s threat intelligence platform, to integrate
multiple threat feeds that enable real-time policy management. Collectively, these capabilities and
others provided by Juniper comprise the Software-Defined Secure Network (SDSN).
SDSN virtualizes applications and physical security appliances into a comprehensive set of network
security services, including firewall protection, malware defense, anti-fraud, intrusion detection,
threat intelligence integration, and incident management. Equally important, SDSN supports the
scaling and migration of network traffic without service disruption and enables:
Security in multi-tenant and private, public, and hybrid cloud environments
Simplified policy operations
Increased scalability, in-service software and hardware upgrades without downtime
Datacenter core and external edge protection
Increased visibility into and configuration of network, application, and database protection
policies
The paper further provides essential guidance for CISOs, CEOs and others responsible for providing
datacenter security. The over-arching message is advocacy for raising the visibility of and support
for cybersecurity throughout the enterprise management chain by providing resources and
establishing a security center of excellence with quantifiable risk metrics.
Take a few moment to review this excellent executive summary by IDC to learn more about
datacenter vulnerabilities, challenges, and the evolving solutions Juniper Networks is designing to
help customers detect, prevent, mitigate and respond to cyber threats when and wherever they
arise.
In Recent News
CNBC: If GPS Goes Down, More Precise Clocks Could Save the Day
CIO Review: Is Your Firm Ready for Hyper-Contextual Trading
Upcoming Events
Please make plans to visit us at these upcoming events:
April 4, 2016 HPC for Wall Street — Cloud & Data Centers Show & Conference, NY, NY
April 19, Secure Timing: The Financial Industry's Critical Network Element, NY, NY

jn_fs_tech_insider_march_032516

  • 1.
    Juniper Networks |Mobile Tech Insider Newsletter file:///D/..._HTML/Juniper_html/Newsletter%20-%20Financial%20Services/03%20march%202016/jn_fs_tech_insider_march_032516.html[3/25/2016 11:11:59 AM] March 2016 Juniper Networks Launches Software-Defined Secure Networks Deploying Agile Networks for Financial Services Today Special Event at the NYSE: Focus on Secure Timing IDC Addresses Datacenter Cybersecurity Challenges and Solutions In Recent News Upcoming Events In This Issue Welcome to the inaugural issue of the Juniper Financial Services newsletter. We look forward to sharing program developments, product highlights, and relevant case studies and research with you over the coming months, particularly those of most interest to professionals focused on enabling trusted and resilient financial services operating environments. In March, Juniper is focused on Software-Defined Secure Networks (SDSN) as briefed recently at the RSA Conference 2016 in San Francisco. Please take a few minutes to review the SDSN strategy, built on three pillars: policy, detection and enforcement. Juniper is genuinely excited about this next-generation approach to network security and we look forward to discussing it with you. We also have included a recent discussion I led which addresses the importance of Deploying Agile Networks for Financial Services Today. In addition, I’m pleased to share an IDC white paper on data center cybersecurity challenges and solutions that highlights the significant impact of security on the financial services sector. For those interested in learning more about why precision timing is so critical to the financial services industry, you are invited to attend a special event we will be hosting in partnership with the U.S. Department of Homeland Security at the New York Stock Exchange on April 19th. Following the NYSE Opening Bell Viewing, attendees will participate in briefings on the state of precision timing across the financial services sector, regulatory changes and drivers, and technologies that can enhance reliability to enterprise timing infrastructures. Attendance is complimentary, but space is limited, so I encourage you to reserve your seat today. Individually and collectively, the Juniper Networks team is committed to helping you and your organization advance your objectives and leverage all that the latest technologies, like SDSN, have to offer. With that, your feedback is important to us and we are always excited to listen and collaborate with you and all of our customers. To align with that mission, we have established vertical and technical advisory boards as well as security roundtables in 2016 so we can hear from you firsthand. Looking forward to engaging in the coming months and let us know how we can help and support your requirements. Best Regards Tony Evans Vice President and Managing Director, Global Financial Services Juniper Networks Launches Software-Defined Secure Networks Juniper Networks announced its Software-Defined Secure Networks (SDSN) capability at the
  • 2.
    Juniper Networks |Mobile Tech Insider Newsletter file:///D/..._HTML/Juniper_html/Newsletter%20-%20Financial%20Services/03%20march%202016/jn_fs_tech_insider_march_032516.html[3/25/2016 11:11:59 AM] recently-held annual RSA Conference 2016 in San Francisco. With this new approach, the focus for Enterprise IT professionals is no longer on security at the perimeter and endpoints, rather, with SDSN, security is embedded within and throughout the network and operates as a single domain where every element is a policy enforcement point. As explained to the security-minded RSA audience, the SDSN strategy is built on three pillars: policy, detection and enforcement. The rules that govern SDSN are constructed in natural language and are readily adaptable to the changing threat environment, thereby enabling current and future policy directives. Threat intelligence is aggregated in a cloud-based feed, allowing analysis throughout the network for anomalous patterns and behavior, enhancing detection and mitigation actions. From an enforcement viewpoint, as policies are created and distributed they can be enforced in real-time, based on near real-time threat intelligence. For a quick SDSN video overview, click here. These fundamental considerations are supported by an underlying infrastructure that leverages the entire network, using a bottoms-up and top-down approach. Each network element, including switches, routers, and firewalls can provide threat intelligence and detect threats. In addition, a cloud-based threat defense provides security intelligence from all available sources, including third parties and scalable malware detection. Governing the entire system is the dynamic policy engine and controller, which adapts policies dynamically and communicates with all network elements, including third-party wireless access points and switches. Overseeing this security activity is Juniper’s Security Director, which provides network managers an operational view through a customizable dashboard that allows for application of remedial action on demand. Security Director shows the applications in use, who is using them and, when necessary, can block use if situations or norms dictate. The comprehensive visualization tools include a threat map that provides visibility into network-wide events for threat detection as well as comprehensive logging and reporting. And, its simplified firewall policy automates and auto-places new rules. Click here to understand the features and applications of Security Director and its innovative, intuitive, and intelligent approach to network defense. Juniper’s suite of products that centralize and automate security uniquely offer the building blocks for implementing the SDSN. Security Director, combined with Juniper’s cloud-based security services (Sky ATP and Spotlight), provide a trusted foundation for an open policy engine and real-time threat mitigation for complex operating environments. In addition to enabling the capabilities above, the Software Defined Secure Network is grounded in integrating third party capabilities. Its Open Convergence Framework (OCF) provides integration with Juniper’s technical alliance partners, enabling customers to subscribe to critical service feeds and receive real-time updates on evolving threat information. This capability ensures that customer networks are protected with the most up-to-date and effective capabilities, and enables them to choose their preferred threat intelligence information sources. For more information on how to fight threats with dynamic policy control, detection, and enforcement, click here. Deploying Agile Networks for Financial Services Today Financial services consumers and business customers have increasingly higher expectations for faster, flexible, and more secure service options. Consequently, traditional financial service providers are under pressure to modernize their legacy IT systems, particularly with the introduction of new providers leveraging advanced technology and customer-centric mobile applications. These market forces are driving even the most established institutions towards more responsive ways of doing business powered by more service-aware networks.
  • 3.
    Juniper Networks |Mobile Tech Insider Newsletter file:///D/..._HTML/Juniper_html/Newsletter%20-%20Financial%20Services/03%20march%202016/jn_fs_tech_insider_march_032516.html[3/25/2016 11:11:59 AM] A service-aware network is one that is agile—easily modified to adapt to new applications, provisioned to support analytics, and designed to embrace cloud services—all while remaining highly reliable, available, and secure. Gone is the era when data center managers could take days or weeks to install or update applications, today’s user expects seamless and rapid application deployment. In a recent blog post on Driving Agility to Financial Services, Tony Evans, Vice President and Managing Director, Global Financial Services, discusses how “the winds of change are blowing across the financial services sector,” and why a service-aware network is critical to enabling rapid response to market, service, and situational changes. Evans notes that an agile network is characterized by a simple, open, and smart architecture that provides flexibility to scale as business and processes evolve. It comprises Software Defined Networking (SDN) and Network Functions Virtualization (NFV) that reorganize the network into multiple layers, an IP-based underlay, with virtual networks on top. This configuration facilitates resource management, orchestration, and service enablement. The benefits of the agile network are: Software release cycles are improved; fixes and improvements can be made in real-time and new code can be deployed more frequently and with less risk. Automation makes it possible to align data center resources with business and application needs; human interaction is taken out of the workflow, speeding and increasing the repeatability of tasks while eliminating manual errors. Improved visibility into network analytics and performance, reducing trouble-shooting, assisting planning for capacity changes, and providing an operational view that optimizes performance. Moving from rigid, proprietary systems to service-aware, agile networks permits financial firms to adapt quickly to market changes, offer new services, expand capacity, and, most importantly, retain and attract customers in the face of a broad array of competitive challenges. To learn more about how agile networks can empower your financial services requirements, see Juniper Networks’ new white paper, Drive Business Innovation in Financial Services with a Service-Aware Network. Special Event at the NYSE: Focus on Secure Timing Juniper Networks, in partnership with the U.S. Department of Homeland Security (DHS), will host a special event at the New York Stock Exchange in New York on Tuesday, April 19. Attendees are invited to attend the Opening Bell Viewing, followed by a series of briefings and a demonstration of why precision timing is so critical to the financial services industry. Secure Timing: The Financial Industry's Critical Network Element will be held 8:30 – 11:30am and will include discussion of the current state of precision timing for the financial services industry, regulatory changes and what’s driving them, as well as key technologies that can deliver enhanced reliability to enterprise timing infrastructures.
  • 4.
    Juniper Networks |Mobile Tech Insider Newsletter file:///D/..._HTML/Juniper_html/Newsletter%20-%20Financial%20Services/03%20march%202016/jn_fs_tech_insider_march_032516.html[3/25/2016 11:11:59 AM] The program will close with a demonstration of how these innovative timing technologies can be deployed across existing network infrastructures. Confirmed speakers include Caitlin Durkovich, DHS Assistant Secretary for Infrastructure Protection, Dan Cotter, Director of the First Responders’ Group (FRG) in the Science and Technology, DHS, Chris Metts, Vice President, Global Aviation and Air Traffic Management, Harris Corporation, Mitch Wander, Cybersecurity Advisor, Department of Treasury, Chuck Schue, President and CEO of UrsaNav, and Andrew Bach, Juniper Networks Chief Architect for Financial Services. Reserve your seat now for this valuable program. There is no fee to attend, but seating is limited. We look forward to seeing you in April. IDC Addresses Datacenter Cybersecurity Challenges and Solutions A recent IDC white paper, Securing the Datacenter from Advanced Threats, addresses the state of cybersecurity and the top concerns of IT managers, with a particular focus on datacenters in the financial services sector. In a 2014 survey, security and risk management technologies were ranked among the most urgent initiatives, while predictive, identification, defense, and remediation strategies were weighted equally important among financial organizations of all types. The concerns are not surprisingly driven by the increased sophistication of attackers, the multiplicity of threat sources—from malicious employees to criminals to hostile nations—and are exacerbated by software vulnerabilities, configuration weaknesses, and a rapidly evolving mobile computing environment. Defense against and mitigation of each of these factors over time has contributed to the evolution of a complex and unmanageable cybersecurity domain in the datacenter and throughout the network. This complexity leads to “false positives” that cause unnecessary system downtime and affects scalability as institutions continually reinforce protections while attempting to maintain low-latency response to meet growing customer demands on mobile systems. The IDC paper describes the Juniper Networks approach to defending the datacenter through its “secure network.” Juniper integrates physical and virtual security through its SRX and vSRX firewalls, which combine to extend consistent security and control across the datacenter, providing
  • 5.
    Juniper Networks |Mobile Tech Insider Newsletter file:///D/..._HTML/Juniper_html/Newsletter%20-%20Financial%20Services/03%20march%202016/jn_fs_tech_insider_march_032516.html[3/25/2016 11:11:59 AM] a single view of policy and operations. Managing these firewalls is the Junos Space Security Director, which integrates with Spotlight Secure, Juniper’s threat intelligence platform, to integrate multiple threat feeds that enable real-time policy management. Collectively, these capabilities and others provided by Juniper comprise the Software-Defined Secure Network (SDSN). SDSN virtualizes applications and physical security appliances into a comprehensive set of network security services, including firewall protection, malware defense, anti-fraud, intrusion detection, threat intelligence integration, and incident management. Equally important, SDSN supports the scaling and migration of network traffic without service disruption and enables: Security in multi-tenant and private, public, and hybrid cloud environments Simplified policy operations Increased scalability, in-service software and hardware upgrades without downtime Datacenter core and external edge protection Increased visibility into and configuration of network, application, and database protection policies The paper further provides essential guidance for CISOs, CEOs and others responsible for providing datacenter security. The over-arching message is advocacy for raising the visibility of and support for cybersecurity throughout the enterprise management chain by providing resources and establishing a security center of excellence with quantifiable risk metrics. Take a few moment to review this excellent executive summary by IDC to learn more about datacenter vulnerabilities, challenges, and the evolving solutions Juniper Networks is designing to help customers detect, prevent, mitigate and respond to cyber threats when and wherever they arise. In Recent News CNBC: If GPS Goes Down, More Precise Clocks Could Save the Day CIO Review: Is Your Firm Ready for Hyper-Contextual Trading Upcoming Events Please make plans to visit us at these upcoming events: April 4, 2016 HPC for Wall Street — Cloud & Data Centers Show & Conference, NY, NY April 19, Secure Timing: The Financial Industry's Critical Network Element, NY, NY