Juniper网络安全方案介绍.pptVIP

* Firewalls can protect against some attacks, but they are not designed to look deep into the traffic, to the application layer to detect all types of attacks. For this, NetScreen-IDP can efficiently process traffic to look for attacks including at the application layer and then drop the attacks from the network to eliminate their impact. * Only NetScreen-IDP can stop an attack from reaching its victim because only NetScreen-IDP operates as an in-line device that can drop an attack during the detection process. This means that you no longer have to suffer the impact of any attack or investigate to determine its success. It is important to note that NetScreen-IDP offers a range of response options, so you don’t have to drop if you don’t want to, you can receive an alarm, you can log it, you can close the connection, etc… * * * * Now let’s take a look at performance vs. price. CLICK As you can see here, the primary product priceline shows a fairly linear correlation, until you reach the 1100/ISG with 1 blade area. For customers in this area, you’ll need to be fairly specific about their needs to determine if the higher performance, virtualization, and integrated capabilities of the ISG are more important, or if they really want profiler. CLICK As you can see here, the ISG platform with a security module scales in a very linear way with the addition of more modules. It’s important to note that the addition of these modules does not affect the performance of the firewall/vpn functions in any way. It just adds higher throughput to the IDP functions. * * * * * Continuing the emphasis on response time, this slide outlines the actual timeline for response time based on a Microsoft vulnerability announcement. The “Super Tuesday” refers to Microsoft’s monthly disclosure of security vulnerabilities. The animation walks through each of the event explaining 1) the lack of coverage by competitors and 2) slow response time by the competitors. * * 客户端对内部服务器的访问并不是直接访问的，而是通过SSL VP