The vSRX Virtual Firewall delivers a complete cloud-native virtual firewall for Microsoft Azure, including advanced security, secure SD-WAN, robust networking, and automated virtual machine lifecycle management for service providers and enterprises.
As workloads move to the public cloud, they introduce challenges around not only how to secure the data, but also around securing communication between workloads running in the cloud and other locations.
Network and security professionals must perform a delicate balancing act, delivering the benefits of cloud technologies without undermining the security of the organization. This challenge can only be met by a security solution that keeps pace with evolving threats while matching the agility and scalability of cloud environments—without sacrificing reliability, visibility, and control.
Juniper Networks addresses these challenges head-on by extending the capabilities of the award-winning Juniper Networks® SRX Series Firewalls as a cloud-native virtual firewall for Microsoft Azure, empowering security professionals to deploy and scale firewall protection for workloads running within Azure. The Juniper Networks vSRX Virtual Firewall offers unparalleled next-generation firewall (NGFW) security that includes intrusion prevention system (IPS), malware protection, app control, and on-demand threat detection. The vSRX also supports communications security with secure SD-WAN, Azure virtual networks, and
SD-LAN for secure segmentation between workloads.
The vSRX for Azure automated provisioning capabilities allow network and security administrators to quickly and efficiently provision and scale firewall protection to meet the dynamic needs of cloud environments. By combining the vSRX with the power of Junos Space® Security Director or Contrail® Service Orchestration, administrators can significantly improve policy configuration, management, and visibility into both physical and virtual assets from a common, centralized platform.
Juniper is committed to helping customers realize the value of their existing investments, and has invested in interoperability for all of its SRX Series firewalls. In addition to Security Director and Contrail Service Orchestration, the vSRX also supports OpenContrail® as well as other third-party management solutions. The vSRX can also be integrated with other next-generation cloud orchestration tools such as OpenStack, either directly or through rich APIs.
| Feature | Feature Description | Benefit |
| Scalable hardware support | Allows you to start with 4 CPU cores and 14 GB of memory and scale up to 16 cores and 56 GB memory | Provides a flexible and scalable hardware footprint to support your needs now and into the future as traffic grows Power Supply and Fan Modules |
| Metadata-based Firewall Policies | Allows administrators to leverage the power of Dynamic Address Group functionality on the vSRX to create object metadata-based user-intent firewall policies | Simplifies policy creation as well as maintenance workflows by allowing firewall policies to be enabled or disabled based on metadata such as Azure tags |
| Flexible Licensing | Supports both pay-as-you-go (PAYG) and bring-your-own-license (BYOL) options | Provides flexible license and purchase options to secure workloads in Azure and connectivity between your data center and Azure |
| Azure Load Balancer | Provides traffic distribution or load balancing to a pool of vSRX virtual firewalls deployed in Azure | Increases the capacity and performance of vSRX firewalls deployed in Azure |
| Microsoft Azure Key Vault HSM | - Allows the vSRX to use SHA256-bit encryption to hash the current configuration file - Encrypts the device primary password used to encrypt data at rest on the vSRX - Ensures that key pairs are generated and stored in the Azure Key Vault. The private key is no longer stored on the vSRX, only the public key is stored and encrypted on the vSRX | Reduces risk and improves security by securely encrypting the data at rest on the vSRX running in Azure |
| Azure instance type | Standard_DS3_v2 | Standard_DS4_v2 |
| vCPU cores | 4 | 8 |
| Memory | 14 GB | 28 GB |
| Product | Description |
| vSRX NextGeneration Firewall | - Core firewall featuring IPsec VPN, Network Address Translation (NAT), cost of service (CoS), and rich routing services - AppSecure featuring AppID, AppFW, AppQoS, and AppTrack - Content security services that include IPS |
