ENTERPRISE SECURITY MANAGEMENT. Frederick Verduyckt 20 September 2012

Transcription

1 ENTERPRISE SECURITY MANAGEMENT Frederick Verduyckt 20 September 2012

2 SETTING THE AGENDA FOR THE NEXT DECADE JUNIPER NETWORKS IS TRANSFORMING THE EXPERIENCE AND ECONOMICS OF NETWORKING 2 Copyright 2012 Juniper Networks, Inc.

3 YOUR OBJECTIVES AND CHALLENGES C-level Maximize profitability, competitiveness & growth Improve business agility Protect brand How can I control my cost of growth? How can I future proof my network investments? How can I expand my business rapidly? Security Admin Risk management Affordable compliance Secure enablement of new apps & users How can I deploy 1000s of security policies consistently across my network? How can I deploy 1000s of devices and VPNs in less time How can I help my CXOs to realize their business objectives? Network Admin Scaling network services Fast recovery from serviceimpacting problems Operational efficiency How can I quickly connect users and end points, and roll out new services? How can I guarantee HQ-class QoS to remote sites? How can I quickly resolve network problems? 3 Copyright 2012 Juniper Networks, Inc.

4 NETWORK SECURITY CHALLENGES Device Proliferation New Applications & Delivery Models Creates Security Management Complexity Many End Points Mobile Users 4 Copyright 2012 Juniper Networks, Inc.

5 DESIGN PHILOSOPHY SIMPLE Business intent oriented and not technology centric Guide the user, not the other way around Provide a delightful user experience OPEN Standards-based API for platform access Full software development environment SMART Minimize user input, automate everything Out-of-the-box juniper best practice Just let you do stuff faster 5 Copyright 2012 Juniper Networks, Inc.

6 HIGH LEVEL ARCHITECTURE -Open, extensible network application platform -Standards-based access to network & subscriber intelligence -Operator-centric system interface -Infrastructure Automation Applications Network Devices 6 Copyright 2012 Juniper Networks, Inc.

7 PLUG-N-PLAY DESIGN Hot Pluggable Apps Hot Pluggable Device Adds and Updates via DMI In service App and Device Upgrades 7 Copyright 2012 Juniper Networks, Inc.

8 RELIABILITY & SCALABILITY Active-Active clustering across Data Centers 1:1 DB redundancy No single point of failure Applications always available albeit with reduced performance Carrier-grade reliability Ease of scaling the system Just add a node to fabric System takes care of starting all services and Apps in additional nodes 8 Copyright 2012 Juniper Networks, Inc.

9 JUNOS SPACE ON IPAD Freely Available in AppStore TODAY 9 Copyright 2012 Juniper Networks, Inc.

10 SERVICE NOW - AUTOMATED INCIDENT MANAGEMENT JMB Hardware Software Resources Service Now Service Now Internet Juniper Support Systems Configuration AI Scripts Installed Customer Network Customer or Partner NOC Juniper Case opening simplified and accelerated Crucial config files, logs and reports attached Over 400 different conditions covered 10 Copyright 2012 Juniper Networks, Inc.

11 SECURITY DESIGN Delivers scalable and responsive security management Improves the reach, ease, and accuracy of security policy administration Enables quick and intuitive web-based management of security policy lifecycle + AUTOMATES Firewall management IPsec VPN management Network Address Translation (NAT) management Intrusion prevention (IPS) signature management Application-level policy management Publish WorkFlow: Manage policy work by role for better accuracy 11 Copyright 2012 Juniper Networks, Inc.

12 EASILY MANAGE ACROSS THE ENTIRE SECURITY POLICY LIFECYCLE Monitor Upgrade Update Maintain Create Firewall policies VPN policies NAT policies IPS policies AppFW policies Remediate Security Design Deploy Update policies Take action Enable IPS Enable AppFW Monitor 1000s of policies 1000s of VPN s Publish policies Verify policies Push policies 12 Copyright 2012 Juniper Networks, Inc. Logging and reporting STRM Series integration

13 SECURITY DESIGN KEY ATTRIBUTES SCALABLE for Better Security Reach Scalable security policy reach to manage 1000s of SRX Series devices, rules, LSYS instances Integrated AppFW, firewall, IPS, and NAT security scale Junos Space platform integration for future scale horizontal Many SRX Series Many firewall rule bases vertical RESPONSIVE for Easier Administration Manage the entire security policy lifecycle via one web-based interface Access rules and policy details with less lag time Quickly locate issues/terms through search Control all devices, group of devices, and device-level policies EFFICIENT for Accurate and Cost-effective Management Check policy impact before provisioning Publish Workflow Reuse policies across 1000s of devices Minimize staff training with familiar GUI Easily add new security functions FW VPN NAT IPS AppFW 13 Copyright 2012 Juniper Networks, Inc.

14 INCLUDES GRANULAR APPLICATION IDENTIFICATION SECURITY MANAGEMENT denied Apps approved Apps Control use of social media and cloud-based apps for better business productivity Manage apps by category, name, and risk level Block granular activity (e.g., Farmville) while enabling approved activity (such as corporate Facebook page access) Integrate AppFW, firewall, and IPS policies for easier administration 14 Copyright 2012 Juniper Networks, Inc.

15 FLEXIBLE MANAGEMENT WITH FIREWALL POLICY HIERARCHY 1 All Devices Polices Allow Secure Communication 2 Group of Devices Policies 3 Device-Level Policies Deny Facebook Allow Services Granular and flexible control of policies Better organization for compliance Reuse of policies across devices Deployed in Order 15 Copyright 2012 Juniper Networks, Inc.

16 DELEGATE AND CHECK POLICY WORK BEFORE PROVISIONING WITH PUBLISH WORKFLOW Create Policy Create VPN Create NAT Create IPS Signatures Design Validate View impacted devices View CLI Verification Optimization Schedule updates Bulk update Granularity Device status Update Better policy oversight via cross checks at every stage of the workflow Fewer errors by separating policy work by role (designer, reviewer, operator) Improved policies by viewing actual CLI before provisioning 16 Copyright 2012 Juniper Networks, Inc.

17 SIMPLIFY MANAGEMENT OF VIRTUAL PRIVATE NETWORK (VPN) IPSEC TUNNELS Fully Meshed Hub-and-Spoke Site-to-Site Rapid deployment of fully meshed and hub-and-spoke VPNs Flexibility to deploy thousands of spokes with multiple hubs Better scale across thousands of site-to-site VPNs 17 Copyright 2012 Juniper Networks, Inc.

18 MANAGE NETWORK ADDRESS TRANSLATION (NAT) POLICIES Source Destination Static Granular control of NAT policies Easier management of complex NAT rules Less administration through reuse of NAT policies across devices 18 Copyright 2012 Juniper Networks, Inc.

19 IPS SIGNATURE MANAGEMENT IPS Signatures IPS Signature Set IPS Policy Granular signature management Dynamic filter and searches Static and dynamic groups Easy-to-use interface Built-in recommended signatures Getting started help customization Simple firewall integration Advanced IPS policy configuration Simple firewall integration customization Easier management with IPS integrated into firewall policies Faster remediation through quick search and research on IPS signatures, sorted by your criteria Granular control by customizing signatures to your business needs 19 Copyright 2012 Juniper Networks, Inc.

20