Branch SRX Services Gateways

Sales Reference Card

Branch SRX Portfolio Overview Branch SRX Series vs. Competition

Branch SRX is one of the fastest ramping products in Juniper. Since its launch in year 2009 more than 200,000
devices are deployed in various verticals like retail, finance, federal, healthcare, education and service provider
SRX Series Services Gateways for the
organizations.
branch are high performance,
Cisco ISR Series
integrated security and networking
Two box solution, ISR as a router and ASA as a security device in branch office
platforms for enterprises and branch
Cisco ISR is a monolithic OS. Performance takes nose dive when Firewall / NAT services are enabled.
locations. The Branch SRX Series
Lacks security innovation and requires licenses for advanced routing, MPLS, security and switching features.
consolidate security, routing, and
Very high TCO. Wide variety of interface options, strong pure routing performance.
switching services into a single
Fortinet Fortigate Series
platform without compromising
Fortinet has limited routing / WAN interfaces. Poor UTM catch rates (cited by UBI Research)
performance or scale. Sized to be
Strong pure firewall performance but drops >90% with UTM/ IDP enabled. Only basic mobile security solution.
effective for locations with a handful
Simple Screen OS-like GUI and built-in SSL VPN. Post sales service and support rated low.
to many hundreds of users, the
Palo Alto PA Series
Branch SRX series simplify
PAN lacks routing, QOS and multicast features, Ethernet only WAN interface and no Wireless support
deployment and help to reduce cost,
No PKI support, limited number of tunnels supported and lacks policy-based IPSec.
complexity and risk.
Bypass attack detection when caching is enabled, significant performance drop with caching disabled. Inferior
AV and IPS catch rate. No visibility of IPS signatures.
Branch SRX Advantage Tight integration of user roles with App ID and strong reporting tools.
Security : Market leader in enterprise firewall. Next Generation firewall with advanced application
level security, proven IPSec VPN, IDP and Unified Threat Management (UTM) services Branch SRX performance (vs. Competitors)
Routing : Rich set of advanced routing protocols, consistent with M/MX/T core internet routers
deployed in all top130 service providers around the world
Switching: High density on-board and modular switching with PoE
Junos OS: Modular, open, carrier class OS deployed worldwide for over 15 years

Branch SRX Elevator Pitch

If you only have 45 seconds to pitch the Branch SRX story, this is what you say:

The Branch SRX flexibly and cost-effectively delivers integrated security and networking services to branch
offices and enterprises without compromising performance or scale.
Superior price/performance. The branch SRX reduces deployment costs while delivering high performance.
The all-in-one platform eliminates the need to integrate multiple point devices in the branch and enables
customers to easily activate new security services when needed without requiring a truck roll.
Comprehensive Security. Industry leading security features with next generation firewall (AppSecure), IPSec
VPN and Unified Threat Management (IPS, Anti-Virus, Anti-Spam and Enhanced Web Filtering) that can
consistently and efficiently be deployed even at the smallest branch.
Unprecedented scale and performance ranging from 700Mbps to 8Gbps.
lower TCO. Simplified management, reduced training and support costs with single Junos platform.

Why Juniper at the Branch ?

Simple: Single, all-in-one platform with integrated security and networking with a wide range of
WAN interfaces for connectivity, capable of meeting the security and routing needs of
small to large branch locations and enterprises
Secure: Zone based stateful firewall and broad set of advanced security services Where to find more information
that can be easily activated as needed, while maintaining high performance
Ease of Use: Ease of deployment with J-Web wizards and Auto-VPN (zero touch hub deployment) Internal: https://matrix.juniper.net/community/psg/cbbu/branch/tme
Lowest TCO: Industry leading price / performance Public: http://www.juniper.net/us/en/products-services/security/srx-series/#literature
 Branch SRX Services Gateways
Sales Reference Card

Branch SRX Solves Multiple Customer Needs Positioning and Selling Branch SRX

Given the breadth of features and multiple customer needs that branch SRX addresses for branch offices and
enterprises, it’s important to understand customer requirements when positioning the branch SRX.
A few tips for positioning:
Single Integrated Platform for Security, Routing and Switching
The typical branch office today has a plethora of devices, often from multiple vendors, to address the different
components of networking, connectivity, and security. This creates complexity, cost and risk. Branch SRX delivers
consolidated networking and security platform at performance and scale across the enterprise network.
One Junos Value Proposition
Junos offers the power of one operating system to reduce complexity, achieve operational excellence, modular
architecture and consistent software release train. Single OS reduces time and effort to plan, deploy, and manage.
industry Leading UTM Solution with Web 2.0 Security
For customers requiring a security appliance, the Branch SRX delivers a leading UTM solution that includes
anti-virus, anti-spam, web filtering, intrusion prevention (IPS) and L7/Web 2.0 application security. The SRX offers
superior AV and IPS catch rates compared to competitors. Juniper is the only vendor that provides multiple
anti-virus options, cloud based and on-box, to meet a variety of customer needs.
Lowest Total Cost of Ownership
Juniper provides a full set of routing, security, MPLS and switching features in base license. UTM subscription
In line IPS license costs less compared to competitors. Due to its integrated all-in-one design and single Junos OS there is
significant reduction in operating expenses, training and support costs, meeting the requirement for low TCO.

Secure Router Feature Juniper SRX Cisco ISR Cisco ASA Fortinet Palo Alto
Full set of routing, multicast and CoS features, with wide range of WAN interfaces
WAN Interfaces ● ● ○ ○ ○
● ○ ○ ○ ○
Rich set of IPv4/IPv6 features combined with the broadest MPLS features available
Integrated core security with stateful firewall, IPSec VPN and NAT Modular Operating System
Faster service processing performance with multiple dedicated CPU cores
Routing features ● ● ○ ◒ ◔
Support for 3G/4G LTE and WLAN
Multicast ● ● ○ ◒ ◔
● ● ○ ◔ ◔
Next Generation Firewall
Next generation application level visibility, tracking and enforcement with integration of user roles (user Quality of Services
role integration requires Junos Pulse/UAC). Support for BYOD.
Ethernet Switching features ● ○ ○ ○ ○
● ○ ○ ○ ○
Identify and track Web 2.0 application usage and content
Enforce role-based security policies without burdening IT MPLS features
Centralized management, logging, monitoring and reporting through Junos Space Security Design and Zone based firewall ● ● ○ ◒ ●
STRM
Network Address Translation ● ● ● ● ●
● ○ ● ● ●
Unified Threat Management (UTM)
Full suite of UTM features: IPS, anti-virus, anti-spam, enhanced web filtering, and AppSecure IPSec VPN
Provides multiple anti-virus options, cloud based and on-box solutions Application and User control ● ○ ○ ◒ ●
Partner technologies deliver best in class features/ capabilities that are tightly integrated with Junos for
Unified Threat Management ● ◔ ◕ ● ◒
● ◒ ● ● ●
common management, Juniper support and optimum device performance
Services can be easily activated as needed, no additional hardware needed Intrusion Prevention
Wireless LAN and WAN ● ● ○ ◒ ○
Use available Customer References, Case Studies, and Third Party Test Reports High Availability ● ◒ ● ● ●
Customer references can be found here: https://customerreferences.juniper.net/
Case studies and third party test reports are available on the public (www.juniper.net) site:
IPv6 Security ● ○ ○ ● ○
http://www.juniper.net/us/en/products-services/security/srx-series/#literature
○ Requires License