Juniper beefs up branch office router security

Firewall, IPSec VPN support added to J-Series routers

Tim Greene (Network World)
17 March, 2008 08:09
Comments

Juniper is upgrading its J-Series routers to support a firewall and IPSec VPN, putting it in closer competition with Cisco's ISR branch office routers.

The upgrade comes in the form of JUNOS 9.0 software, the latest version of the company's modular operating system. The release integrates firewall/VPN capabilities from ScreenOS, the operating system for Juniper firewalls that it acquired with the purchase of NetScreen in 2004.

Juniper promises other security features will be added to JUNOS such as intrusion detection/prevention (IDS/IPS), SSL VPN, antivirus and antispam filtering as well as URL filtering. It may also include features of Juniper's WX platform that reduces and streamlines traffic to speed up response times across WAN links, Juniper says.

"What's missing is a roadmap of when we get the rest of the features," says Mark Fabbi, an analyst with Gartner. "It took three years to integrate the firewall; will it take three years to integrate the IPS? I don't think so, but we need to know more."

Juniper says loading up a J-Series router with all these features may have an impact on performance, but could not quantify it. Fabbi says that the hardware is built with processing headroom, so he suspects the impact won't be a practical problem. As long as throughput remains at 10Mbps - and Juniper says the firewall runs at 1Gbps on at least one J-Series model - that will be fast enough for the WAN links to most corporate branch offices the routers are designed for.

"The decision point is deciding how much security do I need vs. how much connectivity," Fabbi says.

Juniper says some customers may not want or need all the available features turned on, so performance is less likely to be an issue.

Juniper makes a separate family of routers called SSG, and two SSGs run on the same hardware as two of the J-Series routers, so it will be possible to buy one and switch it to the other with a software change. The SSG's strength is security, with support for firewall, VPN, antivirus, antispam and Web filtering. The J-Series strength is in routing, so customers would pick one or the other based on the needs of a particular branch.

Juniper says upgrading JUNOS for J-Series routers is the first step in adding security services to other Juniper hardware such as the new EX switches the company announced earlier this year.