Juniper Networks STRM5000 Appliance

STRM5000 Overview:

Juniper Networks STRM5000 Security Threat Response Manager is an enterprise and carrier-class appliance which provides a scalable network security management solution for medium-sized companies up to large, globally-deployed organizations. STRM5000 is the ideal solution for growing companies that anticipate the need for additional flow and event monitoring capacity in the future. It is also the base platform for large companies that are geographically dispersed and looking for a distributed enterprise/carrier-class scalable solution. The STRM5000 utilizes on-board event/flow collection and correlation capabilities, and is expandable with additional STRM5000 appliances acting as event and flow collectors.

Juniper Networks STRM Series Security Threat Response Managers combine, analyze and manage an incomparable set of surveillance data—network behavior, security events, vulnerability profiles and threat information—to empower companies to efficiently manage business operations on their networks from a single console. With pre-installed software, a hardened operating system and a Web-based setup, the STRM Series lets you get your network security up and running quickly and easily. The bottom line of the STRM Series is simple deployment, fast implementation and improved security, at a low total cost of ownership.

STRM Series dashboard
(Click enlarge)

The integrated approach of the STRM Series used in conjunction with unparalleled data collection, analysis, correlation and auditing capabilities, enables organizations to quickly and easily implement a corporate-wide security management program that delivers security best practices that include:

Log Management: STRM Series provides scalable log management by enabling distributed log collection across an organization and a centralized view of the information.

Threat Management: STRM Series provides an advanced network security management solution that bridges the gap between network and security operations to deliver real time surveillance and detect complex IT-based threats.

Compliance Management: STRM Series brings to enterprises, institutions and agencies the accountability, transparency and measurability that are critical factors to the success of any IT security program required to meet regulatory mandates.

 

Features & Benefits:

 

 

Log Management and Reporting

STRM Series provides a comprehensive log management framework that includes scalable and secure log management capabilities integrated with real time event correlation, policy monitoring, threat detection and compliance reporting.

 

Threat Management

Juniper Networks STRM Series Security Threat Response Managers’ network security management solution takes an innovative approach to managing computer-based threats in the enterprise. Recognizing that discrete analysis of security events is not enough to properly detect threats, the STRM Series was developed to provide an integrated approach to threat management that combines the use of traditionally silo’d information to more effectively detect and manage today’s complex threats. Specific information that is collected includes:

Network Events:
Events generated from networked resources including switches, routers, servers and desktops.

Security Logs:
Includes log data generated from security devices like firewalls, VPNs, intrusion detection/prevention, antivirus, identity management and vulnerability scanners.

Host and Application Logs:
Includes log data from industry leading host operating systems (Microsoft Windows, UNIX and Linux) and from critical business applications (authentication, database, mail and Web).

Network and Flow Logs:
Includes flow data generated by networking devices from vendors and provides the ability to build a context of network and protocol activity.

User and Asset Identity Information:
Includes information from commonly used directories including active directory and Lightweight Directory Access Protocol (LDAP). By incorporating patent pending “offense” management technology, this integrated information is normalized and correlated by the STRM Series, resulting in automated intelligence that quickly detects, notifies and responds to threats missed by other security solutions with isolated visibility.

 

Compliance Management

Organizations of all sizes across almost every vertical market face a growing set of requirements from IT security regulatory mandates.

Recognizing that compliance with a policy or regulation will evolve over time, many industry experts recommend a compliance program that can demonstrate and build upon these key factors:

Accountability: Providing surveillance that reports on who did what and when.

Transparency: Providing visibility into the security controls, business applications and assets that are being protected.

Measurability: Metrics and reporting around IT risks within a company.

 

Diagram:

Depicts two scenarios with STRM500 and STRM2500 in a typical deployment, and an STRM5000 deployed in a distributed environment with the STRM500 configured as a QFlow Collector

 

Architecture:

 

Technical Specifications:

 

Performance-Enabling Services and Support

Juniper Networks is the leader in performance-enabling services and support, which are designed to accelerate, extend, and optimize your high-performance network. Our services allow you to bring revenue-generating capabilities online faster so you can realize bigger productivity gains, faster rollouts of new business models and ventures, and greater market reach, while generating higher levels of customer satisfaction. At the same time, Juniper Networks ensures operational excellence by optimizing your network to maintain required levels of performance, reliability, and availability.

Documentation:

Download the Juniper Networks Security Threat Response Manager (STRM) Series Datasheet (PDF).