Designing and Building Enterprise DMZs

The Juniper NetScreen firewall helps implement solutions such as virtual systems, virtual routers, and zones that help you design, configure, and manage your enterprise DMZ.These solutions provide you with granular control over your network s security and help effectively identify DMZ boundaries. With this architecture, you can achieve optimal design, high security, and performance.This chapter introduces you to the solutions and the product range of Juniper s NetScreen and provides a brief summary of their technical specifications and features.
Juniper Networks premier security platform is the NetScreen firewall product line.The product line provides integrated firewall and IPSec virtual private network (VPN) solutions in a single appliance.The core of a NetScreen firewall is based on the stateful inspection technology, which provides a connection-oriented security model that verifies the validity of every connection while still providing high-performance architecture.The NetScreen fire-walls are based on a custom-built architecture consisting of the Application-Specific Integrated Circuit (ASIC) technology. ASIC is designed to perform a specific task and to do that task at a higher performance level than a general-purpose processor. ASIC connects over a high-speed bus interface to the core processor of the firewall unit, a Reduced Instruction Set Computer (RISC) CPU.
The firewall platform also contains additional technologies to increase your network s security. NetScreen products support deep inspection, which allows you to inspect traffic at the application level to detect application-level attacks.This can help prevent the next attack on your Web servers, or deter someone trying to send illegal commands to your SMTP...