The suite introduces Firefly Perimeter, a virtual version of the Juniper Networks SRX Series Services Gateway, as well as Junos Space Virtual Director, an application that automates the management and deployment of Firefly Perimeter. When combined with enhancements to Firefly Host, which provides hypervisor-based protection between virtual machines, the suite secures traffic within a virtualized data center as well as traffic to and from it.
Key elements include:
- Firefly Perimeter — a new virtual and software-based version of the Juniper Networks SRX Series Services Gateway. It delivers high availability, granular security with segmentation capabilities between zones, organizations, lines of business and applications, as well as rich connectivity features like Network Address Translation (NAT), routing and VPN. Firefly Perimeter can be easily deployed and managed centrally or individually as a security VM for each department, application or tenant. The solution is optimized to leverage multiple virtual CPUs to maximize packet processing and overall throughput in the virtual environment. Juniper said its Contrail SDN controller seamlessly integrates with Firefly Perimeter to dynamically provision service-chained virtual and physical security services in cloud environments.
- Junos Space Virtual Director — a new Junos Space application delivering full lifecycle management of Firefly Perimeter VMs. It enables organizations to automate provisioning and resource allocation of virtual machines associated with Firefly Perimeter VMs. It provides oriented workflows, pre-tested configuration, and open APIs for integration with third-party management platforms.
- Firefly Host (formerly named vGW Virtual Gateway) — a purpose-built firewall for virtualization designed to protect intra-VM traffic. It provides hypervisor-based stateful firewall for East-West traffic between virtual machines, including integrated intrusion detection (IDS), virtualization-specific antivirus (AV) protection and compliance tools, with management scale. Firefly Host is tightly integrated into the VMware hypervisor and VMware management framework. Synchronization of security policies across Firefly Host management centers provides automated policy management and granular control of VMs for multi-tenant environments with unparalleled performance in the industry.
“Juniper’s Firefly Suite allows companies to attach, create and manage security policy across physical and virtual firewalls with a high level of flexibility supporting error-free, fast scale out deployment for the most demanding environments. We provide complete protection for the cloud and from the cloud,” stated Michael Callahan, vice president global product marketing, Security Business Unit, Juniper Networks.
Firefly Perimeter and Junos Space Virtual Director will be released in Q1 2014.
The company said the primary benefit of Contrail is that it provides a simple way to connect physical networks with a virtual environment and provision underlying services, reducing the time, cost and risk for customers when configuring the network. In addition to virtualizing network resources, Contrail promises automated configuration for Network Functions Virtualisation (NFV). The launch represents the third step in Juniper’s SDN strategy announced earlier this year (see below)
Juniper Networks Contrail, formerly known as JunosV Contrail, is comprised of an SDN controller, vRouter, and analytics engine. It creates a virtual network, enabling seamless integration between physical and virtual networks. Contrail’s hypervisor forwarding plane provides line rate routing and switching in a multi-tenant virtualized environment that is completely decoupled from the underlying physical fabric switches. Contrail enables a variety of VPNs in software, including L3 VPNs, E-VPNs, Site-to-Site IPSec, and SSL VPNs.