Data Center LAN Migration Guide - Juniper Networks

Data Center LAN Migration Guide
Consolidated Security with SRX Series Services Gateways
The SRX Series Services Gateways replace numerous legacy security solutions by providing a suite of services in one
platform, including a firewall, IPS, and VPN services.
Supporting the concept of zones, the SRX Series can provide granular security throughout the data center LAN. The
SRX Series can be virtualized and consolidated into a single pool of security services via clustering. The SRX Series
can scale up to 10 million concurrent sessions allowing the SRX Series to massively and rapidly scale to handle any
throughput without additional devices, multiple cumbersome device configurations, or operating systems.
The highly scalable performance capabilities of the SRX Series platform, as with the EX Series switches, lays the
groundwork for a simplified data center infrastructure and enable enterprises to easily scale to meet future growth
requirements. This is in contrast to legacy integrated firewall modules and standalone appliances which have limited
performance scalability. Even when multiple firewall modules are used, the aggregate performance may still be far
below the throughput required for consolidating applications or data centers, where firewall aggregate throughput of
greater than 100 gigabits may be required. The lack of clustering capabilities in some legacy firewalls not only limits
performance scalability but also increases management and network complexity.
The SRX Series provides HA features such as redundant power supplies and cooling fans, as well as redundant switch
fabrics. This robust platform also delivers carrier-class throughput. The SRX5600 is the industry’s fastest firewall and
IPS by a large margin, according to Network World.
For more information, refer to the SRX Series data sheet for a complete list of features, benefits, and specifications at:
www.juniper.net/us/en/products-services/security/srx-series.
Juniper Networks vGW Virtual Gateway
To address the unique security challenges of virtualized networks and data centers, the vGW virtual firewall and cloud
protection software provides network and application visibility and granular control over virtual machines (VM).
Combining a powerful stateful virtual firewall, VM Introspection and automated compliance assessment, the vGW
Virtual Gateway protecting virtualized workloads slipstreams easily into Juniper environments featuring any of the
following:
• SRX Series Services Gateways
• STRM Series Security Threat Response Managers
• IDP Series Intrusion Detection and Prevention Appliances
The vGW integrations focus on preserving customers’ investment into Juniper security, and extending it to the
virtualized infrastructure with the similar feature, functionality, and enterprise-grade requirements like highperformance,
redundancy, and central management.
Juniper customers can deploy the vGW software on the virtualized server, and integrate security policies, logs, and
related work flow into existing SRX Series, STRM Series, and IDP Series infrastructure. Customers benefit from layered,
granular security without the management and OpEx overhead. vGW will export firewall logs and inter-VM traffic flow
information to STRM Series to deliver ‘single-pane’ of glass for threat management. Customers who have deployed
Juniper Networks IDP Series, and management processes around threat detection and mitigation can extend that to
the virtualized server infrastructure with no additional CapEx investment.
The vGW Virtual Gateway’s upcoming enhancements with SRX Series and Junos Space continues on the vision to
deliver ‘gapless’ security with a common management platform. The vGW-SRX Series integration will ensure trust zone
integrity is guaranteed to the last mile - particularly relevant in cloud and shared-infrastructure deployments. vGW
integration with Junos Space will bridge the gap between management of physical resources and virtual resources to
provide a comprehensive view of the entire data center.
Refer to the vGW Virtual Gateway datasheet for more:
www.juniper.net/us/en/local/pdf/datasheets/1000363-en.pdf.
22 Copyright © 2012, Juniper Networks, Inc.