Brad Woodberg - Juniper SRX Series: A Comprehensive Guide to Security Services on the SRX Series

Brad Woodberg, JNCIE-M, JNCIE-SEC, et al, is a product line manager for SRX at Juniper Networks. He is co-author of Junos Security (OReilly), Juniper Networks NetScreen(Syngress), and Juniper Networks SSL VPN (Syngress).

Rob Cameron, principal engineer at a Silicon Valley startup, worked for eight years at Juniper Networks. Hes the co-author of Junos Security (OReilly) and Configuring Juniper Networks NetScreen & SSG Firewalls (Syngress).

Firewalls are an important part of almost every network in the world. The firewall protects nearly every network-based transaction that occurs, and even the end user understands its metaphoric name, meant to imply keeping out the bad stuff. Despite what some competitive marketing campaigns have said, the is not dead, and it is every bit as necessary today as it was yesterday. But firewalls have had to change. Whether its the growth of networks or the growth of network usage, they have had to move beyond the simple devices that only require protection from inbound connections. A firewall now has to transcend its own title, the one end users are so familiar with, into a whole new type of device and service. This new class of device is a services gateway . And it needs to provide much more than just a firewallit needs to look deeper into the packet and use the contained data in new ways that are advantageous to the network for which it is deployed. Can you tell if an egg is good or not by just looking at its shell? Once you break it open, isnt it best to use all of its contents? Deep packet inspection from a services gateway is the new firewall of the future.

Deep packet inspection isnt a new concept, nor is it something that Juniper Networks invented. What Juniper did do, however, is start from the ground up to solve the technical problems of peering deeply. With the Juniper Networks SRX Series Services Gateways, Juniper built a new platform to answer todays problems while scaling the platforms features to solve the anticipated problems of tomorrow. Its a huge challenge, especially with the rapid growth of enterprise networks. How do you not only solve the needs of your network today, but also anticipate the needs for tomorrow?

Juniper expended an enormous amount of effort to create a platform that can grow over time. The scalability is built into the features, performance, and multifunction capability of the SRX Series. This chapter introduces the solutions the SRX Series can provide for your organization today, while detailing its architecture to help you anticipate and solve your problems of tomorrow.