Juniper Networks STRM500 Appliance

STRM500 Overview:

Juniper Networks STRM500 Security Threat Response Manager combines all the features and functionality in a single, secure hardware offering. It provides an all-in-one security solution that plugs right into a network, making it fast and easy to deploy. With its intuitive Web-based user interface, configuration is so simple that you can get a STRM500 up and monitoring the network in minutes. STRM500 is optimized hardware that does not require expensive external storage, third-party databases or ongoing database administration. The STRM500 is ideal for deployments in small, medium and large enterprises or departments that do not foresee the need to upgrade to higher events per second or flows/min capacities. STRM500 can also be deployed as dedicated QFlow collectors for collection of network flows to provide Layer 7 analysis.

Juniper Networks STRM Series Security Threat Response Managers combine, analyze and manage an incomparable set of surveillance data—network behavior, security events, vulnerability profiles and threat information—to empower companies to efficiently manage business operations on their networks from a single console. With pre-installed software, a hardened operating system and a Web-based setup, the STRM Series lets you get your network security up and running quickly and easily. The bottom line of the STRM Series is simple deployment, fast implementation and improved security, at a low total cost of ownership.

STRM Series dashboard
(Click enlarge)

The integrated approach of the STRM Series used in conjunction with unparalleled data collection, analysis, correlation and auditing capabilities, enables organizations to quickly and easily implement a corporate-wide security management program that delivers security best practices that include:

Log Management: STRM Series provides scalable log management by enabling distributed log collection across an organization and a centralized view of the information.

Threat Management: STRM Series provides an advanced network security management solution that bridges the gap between network and security operations to deliver real time surveillance and detect complex IT-based threats.

Compliance Management: STRM Series brings to enterprises, institutions and agencies the accountability, transparency and measurability that are critical factors to the success of any IT security program required to meet regulatory mandates.

Features & Benefits:

Log Management and Reporting

STRM Series provides a comprehensive log management framework that includes scalable and secure log management capabilities integrated with real time event correlation, policy monitoring, threat detection and compliance reporting.

Threat Management

Juniper Networks STRM Series Security Threat Response Managers’ network security management solution takes an innovative approach to managing computer-based threats in the enterprise. Recognizing that discrete analysis of security events is not enough to properly detect threats, the STRM Series was developed to provide an integrated approach to threat management that combines the use of traditionally silo’d information to more effectively detect and manage today’s complex threats. Specific information that is collected includes:

Network Events:
Events generated from networked resources including switches, routers, servers and desktops.

Security Logs:
Includes log data generated from security devices like firewalls, VPNs, intrusion detection/prevention, antivirus, identity management and vulnerability scanners.

Host and Application Logs:
Includes log data from industry leading host operating systems (Microsoft Windows, UNIX and Linux) and from critical business applications (authentication, database, mail and Web).

Network and Flow Logs:
Includes flow data generated by networking devices from vendors and provides the ability to build a context of network and protocol activity.

User and Asset Identity Information:
Includes information from commonly used directories including active directory and Lightweight Directory Access Protocol (LDAP). By incorporating patent pending “offense” management technology, this integrated information is normalized and correlated by the STRM Series, resulting in automated intelligence that quickly detects, notifies and responds to threats missed by other security solutions with isolated visibility.

Compliance Management

Organizations of all sizes across almost every vertical market face a growing set of requirements from IT security regulatory mandates.

Recognizing that compliance with a policy or regulation will evolve over time, many industry experts recommend a compliance program that can demonstrate and build upon these key factors:

Accountability: Providing surveillance that reports on who did what and when.

Transparency: Providing visibility into the security controls, business applications and assets that are being protected.

Measurability: Metrics and reporting around IT risks within a company.

 

Network Deployments:

Depicts two scenarios with STRM500 and STRM2500 in a typical deployment, and an STRM5000 deployed in a distributed environment with the STRM500 configured as a QFlow Collector

Architecture:

Technical Specifications:

Front View

Rear View

Performance-Enabling Services and Support

Juniper Networks is the leader in performance-enabling services and support, which are designed to accelerate, extend, and optimize your high-performance network. Our services allow you to bring revenue-generating capabilities online faster so you can realize bigger productivity gains, faster rollouts of new business models and ventures, and greater market reach, while generating higher levels of customer satisfaction. At the same time, Juniper Networks ensures operational excellence by optimizing your network to maintain required levels of performance, reliability, and availability.

Documentation:

Download the Juniper Networks Security Threat Response Manager (STRM) Series Datasheet (PDF).