Juniper Networks Junos Space Security Director
Junos Space Network Management

Overview:

In today's complex environment, network security management can become overly time consuming and prone to error if management solutions are slow, unintuitive, or restricted in their level of granularity, control, and visibility. Junos Space Security Director provides security policy management for all physical, logical, and virtual firewalls (SRX Series Services Gateways and vSRX) through an intuitive, centralized, web-based interface that offers enforcement across emerging and traditional risk vectors.

With the addition of Policy Enforcer, Security Director automatically updates policies based on threats identified by Sky Advanced Threat Prevention malware detection in the cloud, as well as those found by onpremises threat intelligence solutions. Updated policies are then distributed to enforcement points such as firewalls and switches, ensuring up-to-theminute network protection.

Juniper Networks Junos Space Security Director, an application that runs on the innovative, intuitive, and intelligent Junos Space Network Management Platform, provides detailed visibility into application performance, reducing risk while enabling users to move quickly from “knowing” something is wrong to “doing” something to fix the problem.

Providing extensive scale, granular policy control, and policy breadth across the network, Security Director helps administrators manage all phases of the security policy life cycle for stateful firewall, unified threat management (UTM), intrusion prevention, application firewall (AppFW), VPN, and Network Address Translation (NAT) through a centralized web-based interface. Security Director reduces management costs and errors by providing actionable intelligence, automation, efficient security policy, intuitive workflows, and a powerful application and platform architecture, allowing users to detect threats as they happen and apply remedial actions in real time.

Policy Enforcer simplifies and automates the process of deploying up-to-the-minute enforcement. An intuitive user interface gives administrators the flexibility to selectively control and modify network elements, enforcement groups, threat management services, and profile definitions.

The Security Director dashboard provides customizable, information-rich widgets offering visually intuitive displays that report security device status at a glance. A pallet allows you to easily navigate between firewall, threat, intrusion prevention system (IPS), application, throughput and device-related information, which can be used to create a customized view of the Juniper Networks SRX Series Services Gateways firewall environment. Through the dashboard, you can quickly determine which SRX Series devices have the most alarms, or which have consumed the most CPU cycles or RAM for a specific time period. A Threat Map widget shows the number of IPS events detected per geographic location, giving you industry-leading information gathering and remediation capabilities.

Figure 1: Junos Space Security Director dashboard

Figure 2: Application Visibility dashboard feature

Drilling down on widgets, users can sort and search various events to effortlessly obtain detailed information such as top viruses blocked, top destinations, top sources, and other details that can be used to ensure that the network is safe.

Security Director offers the industry's most innovative solution for managing the application, user, and IP environment. Network administrators can choose between three different views to see how applications and users are affecting the network, observe bandwidth utilization levels, or determine the number of sessions created. Granular usage details, such as which applications are the riskiest, can be viewed. Top talkers are easy to identify and remediate. Different time frames can also be compared to determine when utilization is typically at its peak.

Unlike other products, Security Director does not require users to run multiple reports or open multiple tabs and then manually analyze the data to determine who is using which applications and to what extent. Instead, Security Director allows administrators to easily correlate users to applications by simply selecting an application icon or a user/user group icon.

Blocking traffic from a specific country is also easy and intuitive. Using Security Director's Live Threat Map, it's not only possible to see where threats are originating, you can also block traffic coming from or going to a selected geographic location.

Actionable Intelligence

With most security management solutions, administrators have to run a report or open several tabs to find the applications or users they want to manage. Then they must manually create the required firewall rules, determine where to place those rules, and hope they don't conflict with any existing rules, thereby creating a host of new problems. This is a tedious, time-consuming, and error-prone process.

Security Director offers an Actionable Intelligence feature that eliminates the need to engage in this antiquated exercise. Using Actionable Intelligence, administrators can select one or more applications or user/user groups from the Application Visibility or User Visibility charts, then simply select “Block.” Security Director automatically creates the requested rule or rules and deploys them in the optimal location within the rules base, avoiding any anomalies and taking the guesswork out of managing the application and user environment.