SECURE CLOUD-READY DATA CENTERS AppSecure development IDC IT Security conference – 2011 Budapest

2 Copyright © 2011 Juniper Networks, Inc. APPLICATION-AWARE SECURITY Introducing AppSecure AppSecure is a suite of application based services designed for deploying security in a knowledgeable manner  Builds on existing firewall integrated services to deliver finer-grain policies  Leverages integrated application intelligence Application Intelligence

3 Copyright © 2011 Juniper Networks, Inc. APPSECURE DIRECTION Understand security risks Address new user behaviors Application Intelligence from User to Data Center Subscription service includes all modules and updates Juniper Security Lab provides 800+ application signatures Subscription service includes all modules and updates Juniper Security Lab provides 800+ application signatures AppTrack AppQoS AppDoS IPS Block access to risky apps Allows user tailored policies Prioritize important apps Rate limit less important apps Protect apps from bot attacks Allow legitimate user traffic Remediate security threats Stay current with daily signatures AppFW

4 Copyright © 2011 Juniper Networks, Inc. SAMPLE APPLICATION COVERAGE AND MORE ADDED DAILY 100BaoAimsterApplejuiceAresBitTorrentDirectConnecteDonkey2000 FastTrackFreecastFreenetGnucleusLANGnutellaGnutella2GoBoogy HotlineIceShareICQIRCJapper/XMPP Joltid PeerEnabler Kademlia KuGooKuroManolito/MP2PMMS MSNP (ver 10, 11, 12) MSNP 13MUTE NapsterOpenFT (giFT)Oscar (AOL)PeercastPocoQQRTSP SCTPSkypeSoribadaSoulseekTeslaTOC (AOL)WinNY WPNPXunleiYahoo IMAnd More

5 Copyright © 2011 Juniper Networks, Inc. APPLICATION VISIBILITY AppTrack Discrete Data AnalysisBusiness Analysis Deep packet intelligence Protocol IP Addr Port Data SAP Size Joe What application? What user? User Location? User device? What application? What user? User Location? User device? Identify applications running on the network with protocol decoding and Application signatures View application ID in session logs to understand network behavior Enable data center admins to make informed decisions based on application being accessed to manage security risk AppTrack ApplicationsBytes From Client (Custom) (Sum)Count FTP1,047,7542,097 Windows File Share1,030,00631 HTTP376,29616 Bit Torrent316,06416 None154, NETBlog151,63216 VoIP128,26616 Facebook104,73516 TFIP67,92016 Telnet54,76816

6 Copyright © 2011 Juniper Networks, Inc. Control & Enforce Web 2.0 Apps AppFW AppFW: BEYOND JUST FW OR APP CONTROL Inspect ports and protocols Control nested apps, chat, file sharing and other Web 2.0 activities Dynamic application security Web 2.0 policy enforcement Threat detection & prevention HTTP Uncover tunneled apps Stop multiple threat types

7 Copyright © 2011 Juniper Networks, Inc. Protect Valuable On-line Business AppDoS AppDOS THREAT MITIGATION Detect and mitigate botnet activity Benchmark “normal” behavior to detect anomalies Botnet detection & remediation DoS monitoring & remediation On-going anomaly detection Uncover misuse of routine Web functionality Purchase Item Select Item View Item Check bill Adapt security policy and QOS based on insights

8 Copyright © 2011 Juniper Networks, Inc. HOW AppDOS WORKS Attack traffic Legitimate traffic Botnets targeting services for disruption Mixture of legitimate and attack traffic INTERNET Server Connection Monitoring Protocol Analysis Bot / Client Classification Cloud Provider / Data Center Web Services / Applications SRX Series

9 Copyright © 2011 Juniper Networks, Inc. Prioritize & Control App Bandwidth AppQoS AppQOS FOR SCALE & PERFORMANCE Monitor Web 2.0 bandwidth consumption Dynamic application quality-of-service (QoS) Application prioritization Performance management Throttle bit rates based on security and usage insights Prioritize business critical apps X

10 Copyright © 2011 Juniper Networks, Inc. Monitor & Mitigate Custom Attacks IPS IPS FOR CUSTOMIZABLE PROTECTION Detect and monitor suspicious behavior Address vulnerabilities instead of ever-changing exploits of the vulnerability On-going threat protection Mobile traffic monitoring Custom attack mitigation Tune open signatures to detect and mitigate tailored attacks Uncover attacks exploiting encrypted methods Exploits VULNERABILITY AppSecure IPS Other IPS’s

11 Copyright © 2011 Juniper Networks, Inc. AppSECURE DEPLOYMENT SCENARIOS IN-LINE SERVICE PROTECTION Advanced protection for infrastructure and Hosted Services Data Center DNS ServicesHTTP/Web Services Network Core Remote Network Other Services AppSecure

12 Copyright © 2011 Juniper Networks, Inc. APPSECURE DEPLOYMENT SCENARIOS SRX Corporate Data Center with Bot protection and Application Tracking Remote Access Apps Full suite of DC services: firewall, IPS, NAT, IPsec VPN, AppTrack, AppDoS Corporate HQ / Data Center AppSecure

13 Copyright © 2011 Juniper Networks, Inc. APPSECURE SUMMARY iPhone and other mobile devices consuming many applications and bandwidth Increased security risk with Web 2.0 applications Internet end-points are changing and increasing exponentially Fine-grain detection and control of application access Deep and wide visibility into all traffic flowing through the network Expands administrative control over network traffic AppDOS combines statistical and deterministic methods to counter DDoS attacks at the right level Mitigates sophisticated attacks with minimal service impact Botnet attacks are growing SRX Services Gateways offer control and security without compromise Scalable performance