Features and Benefits
Junos Network Secure can be used to provide stateful firewall
services integrated with the MX Series 3D Universal Edge Routers
to provide protection for the service provider and enterprise
network, as well as a revenue-generating managed service that
protects customer infrastructure. Traffic from any ingress port
can be classified and routed to the stateful firewall and then
either dropped or forwarded from the proper egress port. This
integration allows customers to eliminate external firewalls that
consume router ports and additional management resources.
Alternately, the integrated firewall function can be used as a first
line of defense in a layered security architecture and can offload
bulk stateful filtering from the standalone firewall.
Junos Network Secure evaluates packets in the context of the
specific flows to which they belong and performs IP packet
integrity checks, enabling the MX Series to identify and isolate
malicious payloads slipped into active data streams. It also
performs statistical modeling to identify unusual traffic patterns
such as denial of service/distributed denial of service (DoS/
DDoS), network scanning or probing. This powerful solution
identifies and isolates a wide range of attacks including DOS
attacks (such as SYN flood); network-level attacks such as IP
fragmentation or Internet Control Message Protocol (ICMP) “ping
of death” attacks; and transport layer attacks such as port scans
or teardrop attacks.
The stateful firewall function also supports ALGs for special
handling of unique protocols such as H.323, FTP, Session
Initiation Protocol (SIP) and ICMP.