Juniper Networks JSA5800
Scalable Security Management for Midsize to Large Companies

Overview:

JSA5800 is an enterprise and carrier-class appliance that provides a scalable network security management solution for medium-sized companies and scales to support large, globally deployed organizations. Ideal for troubleshooting problems, JSA5800 provides visibility, reporting, and advanced threat detection across the entire infrastructure by collecting and correlating events and flows.

JSA5800 can be deployed as an all-in-one appliance or in a distributed setup as a console or dedicated event or flow processor. It can also be deployed as a store and forward event collector.

The integrated approach of JSA Series Secure Analytics, used in conjunction with unparalleled data collection, analysis, correlation, and auditing capabilities, enables organizations to quickly and easily implement a corporate-wide security management program that delivers security best practices.

Product Description

The integrated approach of JSA Series Secure Analytics, used in conjunction with unparalleled data collection, analysis, correlation, and auditing capabilities, enables organizations to quickly and easily implement a corporate-wide security management program that delivers security best practices. These include superior log analytics with distributed log collection and centralized viewing; threat analytics that deliver realtime surveillance and detection information; and compliance management capabilities—all viewed and managed from a single console.

Juniper Networks JSA Series Secure Analytics combine, analyze, and manage an unparalleled set of surveillance data—network behavior, security events, vulnerability profiles, and threat information—to empower companies to efficiently manage business operations on their networks from a single console.

• Log Analytics: JSA Series provides scalable log analytics by enabling distributed log collection across an organization, and a centralized view of the information.
• Threat Analytics: JSA Series provides an advanced network security management solution that bridges the gap between network and security operations to deliver realtime surveillance and detect complex IT-based threats.
• Compliance Management: JSA Series brings to enterprises, institutions, and agencies the accountability, transparency, and measurability that are critical factors to the success of any IT security program required to meet regulatory mandates.
• Vulnerability Management: Deployed as a standalone solution or working in conjunction with Threat Analytics, JSA Series can function as a full-featured vulnerability scanner.
• Risk Management: JSA Series helps security professionals stay ahead of advanced threats by proactively quantifying risks from vulnerabilities, configuration errors and anomalous network activity, preventing attacks that target high value assets and data.
• Security Director: The Junos Space Security Director application includes a “Block” button that, when clicked, automatically creates and deploys a firewall rule in the optimal location within your rules base to remediate detected offenses.

With preinstalled software, a hardened operating system, and a web-based setup process, the JSA Series lets you get your network security up and running quickly and easily. The bottom line of the JSA Series is simple deployment, fast implementation, and improved security, at a low total cost of ownership.

Architecture and Key Components:

JSA Secure Analytics Appliances

The Juniper Networks Secure Analytics appliances provide a scalable solution for security event management. The JSA5800 and JSA7800 are enterprise-class solutions that can be deployed as an all-in-one solution with integrated event collection, correlation and extensive reporting, or as a dedicated event and/or flow collector.

JSA Virtual Appliance

Juniper Networks JSA Virtual Appliance (JSA VM) Secure Analytics is a virtualized platform that provides Secure Analytics functionality. JSA VM is designed to run with VMWare ESX 5.0 and ESX 5.1, and requires a configuration with a minimum of two CPUs (1 socket x 2 cores or 2 sockets x 1 core) and 8GB of RAM. It processes a maximum of 20,000 events per second or 600,000 flows per minute, with 16 cores and 24 GB of RAM.

Features and Benefits:

Log Analytics

JSA Series provides a comprehensive log analytics framework that includes scalable and secure log analytics capabilities integrated with real-time event correlation, policy monitoring, threat detection, and compliance reporting.

Threat Analytics

JSA Series Secure Analytics’ network security management solution takes an innovative approach to managing computerbased threats in the enterprise. Recognizing that discrete analysis of security events is not enough to properly detect threats, the JSA Series was developed to provide an integrated approach to threat analytics that combines the use of traditionally siloed information to more effectively detect and manage today’s complex threats. Specific information that is collected includes:

• Network Events: Events generated from networked resources, including switches, routers, servers, and desktops.
• Security Logs: Includes log data generated from security devices like firewalls, VPNs, intrusion detection/prevention, antivirus, identity management, and vulnerability scanners.
• Host and Application Logs: Includes log data from industry-leading host operating systems (Microsoft Windows, UNIX, and Linux) and from critical business applications (authentication, database, mail, and Web).
• Network and Application Flow Logs: Includes flow data generated by network devices and provides an ability to build a context of network and protocol activity.
• User and Asset Identity Information: Includes information from commonly used directories, including Active Directory and Lightweight Directory Access Protocol (LDAP). By incorporating patent pending “offense” management technology, this integrated information is normalized and correlated by the JSA Series, resulting in automated intelligence that quickly detects, notifies, and responds to threats missed by other security solutions with isolated visibility.

Vulnerability Management:

As a member of the JSA Series Secure Analytics network security management solution, Juniper Secure Analytics Vulnerability Manager helps organizations minimize the chances of a network security breach by proactively finding security weaknesses and mitigating potential risks. Using Juniper Secure Analytics Vulnerability Manager, organizations can perform rapid network scans, discover and highlight high-risk vulnerabilities from an integrated dashboard, and automate regulatory compliance through powerful collection, correlation and reporting tools.

Risk Management:

Juniper Secure Analytics Risk Manager is an integral component of a complete security intelligence solution, helping security professionals detect and mitigate advanced threats. The ability to proactively quantify risk from vulnerabilities, configuration errors, anomalous network activity, and other outside threats can help organizations prevent exploits that target high-value assets and data.

Compliance Management

Organizations of all sizes across almost every vertical market face a growing set of requirements from IT security regulatory mandates. Recognizing that compliance with a policy or regulation will evolve over time, many industry experts recommend a compliance program that can demonstrate and build upon the following key factors:

• Accountability: Providing surveillance that reports on who did what and when
• Transparency: Providing visibility into the security controls, business applications, and assets that are being protected
• Measurability: Metrics and reporting around IT risks

Licensing

Secure Analytics is available in two different licensing options:

• Log Analytics: Enables event searching, custom dashboards, and scheduled reporting
• Threat Analytics: All log analytics features + flow support, advanced correlation, and vulnerability assessment Integration

Specifications:

Views:

Top Front View

Front View

Rear View

Left Angle View

Right Angle View

Documentation:

Download the Juniper Networks JSA Series Secure Analytics Data Sheet (PDF).