SAN FRANCISCO -- Juniper Networks has made its security products more responsive to threats, thereby reducing the...
amount of manual labor required to fend off attacks.
On Tuesday at the Juniper NXTWORK conference, the company introduced "dynamic policy management" in the Junos Space Security Director. The central software console for Juniper network security manages the vendor's firewalls and enforces security policies on Juniper's EX and QFX switches.
The latest improvement to Junos Space Security Director lets security pros define variables that will trigger specific rules in Juniper SRX Series next-generation firewalls. For example, if a company is under a ransomware attack that has planted malware in employees' PCs, then Director could activate rules restricting access to critical applications that handle sensitive data. The rules could also tell firewalls to cut off internet access for those applications.
The new Junos Space Security Director features can lower the response time to security threats from hours to minutes, said Mihir Maniar, vice president of security product management at Juniper, based in Sunnyvale, Calif. "It's completely dynamic, completely user-intent-driven."
Vendors trending toward automated security threat response
Automating the response to security threats is a trend among vendors, including Juniper rival Cisco. Companies can configure products to take specific actions against threats, which removes the time security pros would have to spend deploying new firewall rules manually.
Dan Condeanalyst at Enterprise Strategy Group
"You have to mitigate very quickly and not just inform somebody and hope for the best," said Dan Conde, an analyst at Enterprise Strategy Group, based in Milford, Mass. "Manual procedures do not work very quickly."
But the ultimate goal, which eludes vendors today, is to have products that detect and mitigate threats on their own and then continue to monitor the network to ensure the steps taken were successful.
Vendor marketing tends to play down the fact that the level of automation is rudimentary, which has led to confusion over the definition of automation across different products. "Automation means 10 different things to 10 different people," Conde said.
Juniper network security stronger with new SRX4600 firewall
Juniper has integrated a new firewall with the latest iteration of Junos Space Security Director. The SRX4600 is designed to protect data flowing in multi-cloud environments found in an increasing number of companies. The SRX4600 is a 1RU appliance with a throughput of 80 Gbps.
Juniper also unveiled at NXTWORK an on-premises malware detection appliance that uses analytics and remediation technology built by Cyphort, which Juniper acquired this year. Cyphort has developed security analytics that spots malware based on its abnormal activity in the network.
The new Advanced Threat Prevention Appliance in Juniper's network security portfolio is designed for companies with "strict data sovereignty requirements," the company said. The on-premises hardware has been certified by ISCA Labs, which is an independent division of Verizon that conducts testing and certification of security and health IT products.