Chapter 9 - Firewall and DMZ Design: Juniper NetScreen

Abstract

This chapter introduces the reader to the solutions and the product range of Juniper's NetScreen and provides a brief summary of their technical specifications and features. Solutions such as security zones, virtual routers, and virtual systems are a boon for enterprise security administrators to use to nail down the access and security levels using well-defined policies. These solutions provide granular control over network's security and helps in the effective identification of demilitarized zone (DMZ) boundaries. With Juniper NetScreen, one can achieve optimal design, high security, and performance. The Juniper NetScreen firewall helps in the implementation of solutions such as virtual systems, virtual routers, and zones that help in the designing, configuration, and management of the DMZ. Juniper Networks' premier security platform is the NetScreen firewall product line. The product line provides integrated firewall and IPSec virtual private network (VPN) solutions in a single appliance. Juniper NetScreen Security solution includes firewalls, intrusion detection and prevention (IDP), the Secure Sockets Layer (SSL) VPN appliance, and security management software. Web-based interface and graphical NetScreen Security Manager (NSM) provides the tools for remotely configuring and managing security devices. The NSM is a tool that can be used to manage multiple NetScreen devices.