The vSRX Virtual Firewall delivers a complete cloud-native virtual firewall for AWS, including advanced security, secure SD-WAN, robust networking, and automated virtual machine life-cycle management capabilities for service providers and enterprises.
Workloads are continuing to move to the public cloud, introducing challenges around not only how to secure the data, but also around securing communication between workloads running in the cloud and other locations.
Network and security professionals must perform a delicate balancing act, delivering the benefits of cloud technologies without undermining the security of the organization. This challenge can only be met by a security solution that keeps pace with evolving threats while matching the agility and scalability of cloud environments—without sacrificing reliability, visibility, and control.
Juniper Networks addresses these challenges head-on by extending the capabilities of the award-winning Juniper Networks® SRX Series Firewalls as a cloud-native vSRX Virtual Firewall for Amazon Web Services (AWS), empowering security professionals to deploy and scale firewall protection for workloads deployed within AWS. This virtual firewall offers unparalleled next-generation firewall (NGFW) security that includes intrusion prevention system (IPS), malware protection, app control, and on-demand threat detection. The vSRX also supports communications security with secure software-defined WAN (SD-WAN),
transit virtual private cloud (VPC), and software-defined LAN (SD-LAN) for secure segmentation between workloads.
The vSRX for AWS automated provisioning capabilities allow network and security administrators to quickly and efficiently provision and scale firewall protection to meet the dynamic needs of cloud environments. By combining the vSRX with the power of Junos Space® Security Director or Contrail® Service Orchestration, administrators can significantly improve policy configuration, management, and visibility into both physical and virtual assets from a common, centralized platform.
Juniper is committed to helping customers realize the value of their existing investments and is committed to interoperability across all SRX Series firewalls. In addition to Security Director and Contrail Service Orchestration, the vSRX supports OpenContrail®, as well other third-party management solutions. The vSRX can also be integrated with other nextgeneration cloud orchestration tools such as OpenStack, either directly or through rich APIs.
In addition to public cloud and traditional virtualization use cases, the vSRX allows service providers and enterprises to deploy a secure SD-WAN fabric with edge defenses that are adaptable to any site’s individual needs, while also providing the flexibility to defend virtualized and service-oriented applications wherever they exist throughout the network. Security Director can manage up to 25,000 SRX Series firewalls—whether physical, virtual, or containerized—from a single management instance. This allows organizations to use a single platform to manage, automate, and orchestrate network security, virtualization, and interconnectivity, from endpoint to edge and every cloud in between.
| Feature | Feature Description | Benefit |
| Scalable Hardware Support | Allows you to start with 2 CPU cores and 4 GB of memory and scale up to 36 cores and 93 GB memory. | Provides flexible and scalable hardware footprint to support your traffic needs now and into the future. |
| Metadata-based Firewall Policies | Allows administrators to leverage the power of Dynamic Address Group functionality on the vSRX to create object metadata-based user-intent firewall policies. | Simplifies policy creation as well as maintenance workflows by allowing firewall policies to be enabled or disabled based on metadata such as AWS tags. |
| Auto-scaling | Supports vSRX deployments that require dynamic spin-up security resources when workloads increase. | Increases scale and security performance without the need to manually spin up additional vSRX instances. |
| Elastic Load Balancing | Increases Internet-facing traffic capacity using application load balancing. | Allows the vSRX to be deployed where greater capacity is required to keep up with traffic demands. |
| Flexible Licensing | Supports both pay-as-you-go (PAYG) and bring-your-own-license (BYOL) options. | Provides flexible license and purchase options to secure workloads in AWS and connectivity between your data center and AWS. |
| vSRX PAYG Offerings | vSRX PAYG Features |
| vSRX nextgeneration firewall | - Core firewall features, IPsec VPN, Network Address Translation (NAT), class of service (CoS), and rich routing services - AppSecure features that include AppID, AppFW, AppQoS, and AppTrack - Content security services that include IPS |
| vSRX nextgeneration firewall with antivirus protection | - Core firewall features, IPsec VPN, NAT, CoS, and rich routing services - AppSecure features that include AppID, AppFW, AppQoS, and AppTrack - Content security services that include IPS, antivirus, anti-spam, Web and content filtering |
