Features and Benefits

Junos Network Secure can be used to provide stateful firewall

services integrated with the MX Series 3D Universal Edge Routers

to provide protection for the service provider and enterprise

network, as well as a revenue-generating managed service that

protects customer infrastructure. Traffic from any ingress port

can be classified and routed to the stateful firewall and then

either dropped or forwarded from the proper egress port. This

integration allows customers to eliminate external firewalls that

consume router ports and additional management resources.

Alternately, the integrated firewall function can be used as a first

line of defense in a layered security architecture and can offload

bulk stateful filtering from the standalone firewall.

Junos Network Secure evaluates packets in the context of the

specific flows to which they belong and performs IP packet

integrity checks, enabling the MX Series to identify and isolate

malicious payloads slipped into active data streams. It also

performs statistical modeling to identify unusual traffic patterns

such as denial of service/distributed denial of service (DoS/

DDoS), network scanning or probing. This powerful solution

identifies and isolates a wide range of attacks including DOS

attacks (such as SYN flood); network-level attacks such as IP

fragmentation or Internet Control Message Protocol (ICMP) “ping

of death” attacks; and transport layer attacks such as port scans

or teardrop attacks.

The stateful firewall function also supports ALGs for special

handling of unique protocols such as H.323, FTP, Session

Initiation Protocol (SIP) and ICMP.