Juniper SRX240H-TAA 数据表
2
AppSecure Features and Benefits
Feature
Feature Description
Benefit
Application awareness and
classification
classification
Context, protocol information, and signatures used to
identify applications on any TCP or UDP port.
identify applications on any TCP or UDP port.
Enables all AppSecure capabilities by exposing
application information to advanced, next-generation
security services for increased visibility, control and
protection.
application information to advanced, next-generation
security services for increased visibility, control and
protection.
Nested application support
Accurate identification of applications running on top
of, or embedded into approved/trusted services and
protocols.
of, or embedded into approved/trusted services and
protocols.
Provides enhanced protection against modern
evasion techniques that utilize trusted services.
evasion techniques that utilize trusted services.
User-role based policies
Fine-grained policies, including application security,
based on user role and identity for all endpoints
including mobile devices.
based on user role and identity for all endpoints
including mobile devices.
Superior protection and easier policy management as
user and user groups reduce the number of policies
and rules needed to account for other elements such
as location, device, and IP address.
user and user groups reduce the number of policies
and rules needed to account for other elements such
as location, device, and IP address.
SSL inspection
Inspection of HTTP traffic encrypted in SSL on any
TCP/UDP port.
TCP/UDP port.
Combined with AppSecure, provides visibility
and protection against threats embedded in SSL
encrypted traffic.
and protection against threats embedded in SSL
encrypted traffic.
Purpose built platform
Built from the ground up on dedicated hardware.
Delivers unrivaled performance and flexibility to
protect service provider, enterprise and data center
environments.
protect service provider, enterprise and data center
environments.
Junos
®
OS service integration on
SRX Series
Rich set of native network and security services
including: firewall, AppSecure, IPS, IPsec VPN, NAT,
QoS, routing, and switching.
including: firewall, AppSecure, IPS, IPsec VPN, NAT,
QoS, routing, and switching.
Provides consolidation and optimization of
application-aware security services for maximum
scale.
application-aware security services for maximum
scale.
AppTrack
Visibility for
application
usage and
bandwidth
application
usage and
bandwidth
AppFW
Enforcement
to block/allow
applications
to block/allow
applications
AppQoS
Control and
prioritization
prioritization
AppDoS
Protection
against
botnet attacks
against
botnet attacks
IPS
Threat
mitigation
mitigation
User context
from Junos
Pulse or
active
directory
from Junos
Pulse or
active
directory
Application awareness and classification engine
AppTrack
logs to
STRM Series
for reporting
logs to
STRM Series
for reporting
AppSecure
TM
SMTP HTTP UDP HTTPS
SMTP HTTP UDP HTTPS
Figure 1: The application awareness and classification engine improves efficiency by inspecting network traffic and
publishing the results for use by all of the AppSecure services.