NETWORK AND SECURITY MANAGER Product Overview Juniper Networks Network and Security Manager (NSM) is a unified device management solution for Juniper’s network infrastructure of routing, switching and security devices. The Network and Security Manager provides centralized, end-to-end device lifecycle management, granular policy configuration and comprehensive monitoring, reporting and investigative tools to enable you to improve IT management and cost efficiencies and to maximize the security of your network. The Network and Security Manager is highly scalable. Enterprise customers can leverage NSM globally to scale from branch to data center, and Service Providers can use it for carrierclass deployments. Product Description Juniper Networks® Network and Security Manager (NSM) takes a new approach to network and security management by providing IT departments with an easy-to-use solution that controls all aspects of Juniper Networks routing, switching, firewall/VPN, and intrusion detection and prevention devices, including device configuration, network settings, and security policy management. Unlike solutions that require the use of multiple management tools to control a single device, Network and Security Manager not only enables IT departments to control the entire device life cycle with a single centralized solution, but also provides visibility with a complete set of investigative and reporting tools. Using NSM, device technicians, network administrators, and security administrators can work together to improve management efficiency and security, reduce overhead, and lower network operating costs. Architecture and Key Components NSM’s architecture is comprised of a device server, a GUI server, and a user interface (UI). To maintain flexibility and performance, all device interactions and log storage are handled by the device server, while all configuration information is placed on the GUI server. Both device and GUI components can reside on the same server where cost and/ or simplicity are the primary requirements, or they can reside on separate servers where performance and deployment flexibility are more important. Independent of the chosen deployment of the device and GUI servers, the UI provides the single point of access for the administrator to all of the information and capabilities of the system. Network and Security Manager with Juniper Networks NSM Central Manager (NSM CM) can manage up to 10 regional NSM servers and solves scalability problems by allowing management for up to 6,000 routers, 3,000 switches, 6,000 firewall/VPN devices, or 2,000 firewall/VPN devices with 100 Juniper Networks IDP Series Intrusion Detection and Protection Appliances per regional server. While the NSMXpress is primarily geared towards small to mid market with the capability to manage up to 500 devices, NSM3000 scales to the requirements of large enterprise customers with the capability to manage up to 1500 devices. Together, these provide an overall solution to scale for large enterprise and service provider environments.

Network and Security Manager Domain Admin Domain Admin Domain Admin Domain Admin Domain Admin Figure 1: Network and Security Manager provides comprehensive device management with centralized security policy management, provisioning, logging and reporting Centralized Policy Management NSM introduces a global policy feature that allows security administrators to create one master policy that can be applied to all regional management servers. This feature allows security administrators to enforce mandatory corporate policies across all devices in the network efficiently, and it ensures uniform security...

The topology view's zoom in and zoom out capability enables easy screen navigation for viewing the details on various devices in a network. Furthermore, the topology of devices is displayed in a tabular form for detailed information search of a specific device. Network administrators can print or save the tabular and graphical display of the network. They can also search for a device, in the topology view, based on system name, or IP address, or media access control (MAC) address. The topology view provides a tabular listing of not only the endpoints (hosts, etc.) connected to a switch, but also...

Unified Access Control Management User-Specific Application Visibility NSM allows a centralized configuration of all Juniper Networks NSM provides a common interface that enables a network IC Series Unified Access Control Appliances and L2 enforcement administrator to correlate which users are using what applications points (EX Series switches) in the managed network. The UAC and display this data in Profiler Manager. manager module enables network administrators to not only associate IC Series UAC Appliances and EX Series switches, but also to manage individual switch ports for 802.1X authentication....

Features and Benefits (continued) APPLICATION APPLICATION DESCRIPTION Intelligent security updates Juniper’s security team adds coverage for new threats and selects recommended attack signatures. An automatic, scheduled process updates the NSM attack object database, and new attack object databases can be automatically pushed to security devices. Coverage for the latest attacks without the need to spend time on threat analysis. Coverage for new protocols and contexts without service interruption. Time is saved through automation. Version control Global policy version control for NSM security...

Juniper Networks Services and Support Juniper Networks is the leader in performance-enabling services and support, which are designed to accelerate, extend, and optimize your high-performance network. Our services allow you to bring revenue-generating capabilities online faster so you can realize bigger productivity gains and faster rollouts of new business models and ventures. At the same time, Juniper Networks ensures operational excellence by optimizing your network to maintain required levels of performance, reliability, and availability. For more details, please visit www.juniper.net/us/en/...