Juniper Networks JSA3800
Scalable Security Management for Medium-Sized to Large Companies

Overview:

Juniper Networks JSA3800 Secure Analytics platform is an enterprise-class appliance that provides a scalable network security management solution for midsize to large companies, including globally deployed organizations. It is also the base platform for an enterprise-class scalable Secure Analytics solution.

JSA3800 enables collection and correlation of events and flows from Juniper and non-Juniper devices for visibility, reporting, and advanced threat detection across the entire infrastructure. It includes onboard event collection, correlation, and extensive reporting capabilities, and is expandable with additional JSA Series Secure Analytics appliances acting as event and flow collectors on a single appliance.

JSA3800 can be deployed as an all-in-one appliance or in a distributed setup as a dedicated event, flow, or combination processor. It can also be deployed as a store and forward event collector.

Product Description

The integrated approach of JSA Series Secure Analytics, used in conjunction with unparalleled data collection, analysis, correlation, and auditing capabilities, enables organizations to quickly and easily implement a corporate-wide security management program that delivers security best practices. These include superior log analytics with distributed log collection and centralized viewing; threat analytics that deliver realtime surveillance and detection information; and compliance management capabilities—all viewed and managed from a single console.

Juniper Networks JSA Series Secure Analytics combine, analyze, and manage an unparalleled set of surveillance data—network behavior, security events, vulnerability profiles, and threat information—to empower companies to efficiently manage business operations on their networks from a single console.

• Log Analytics: JSA Series provides scalable log analytics by enabling distributed log collection across an organization, and a centralized view of the information.
• Threat Analytics: JSA Series provides an advanced network security management solution that bridges the gap between network and security operations to deliver realtime surveillance and detect complex IT-based threats.
• Compliance Management: JSA Series brings to enterprises, institutions, and agencies the accountability, transparency, and measurability that are critical factors to the success of any IT security program required to meet regulatory mandates.
• Vulnerability Management: Deployed as a standalone solution or working in conjunction with Threat Analytics, JSA Series can function as a full-featured vulnerability scanner.
• Risk Management: JSA Series helps security professionals stay ahead of advanced threats by proactively quantifying risks from vulnerabilities, configuration errors and anomalous network activity, preventing attacks that target high value assets and data.

With preinstalled software, a hardened operating system, and a web-based setup process, the JSA Series lets you get your network security up and running quickly and easily. The bottom line of the JSA Series is simple deployment, fast implementation, and improved security, at a low total cost of ownership.

Architecture and Key Components:

JSA Secure Analytics Appliances

The Juniper Networks Secure Analytics appliances provide a scalable solution for security event management. The JSA3800 and JSA5800 are enterprise-class solutions that can be deployed as an all-in-one solution with integrated event collection, correlation and extensive reporting, or as a dedicated event and/or flow collector. The JSA7500 is a carriergrade solution and is NEBS certified.

JSA Virtual Appliance

Juniper Networks JSA Virtual Appliance (JSA VM) Secure Analytics is a virtualized platform that provides Secure Analytics functionality. JSA VM is designed to run with VMWare ESX 5.0 and ESX 5.1, and requires a configuration with a minimum of two CPUs (1 socket x 2 cores or 2 sockets x 1 core) and 8GB of RAM. It processes a maximum of 20,000 events per second or 600,000 flows per minute, with 16 cores and 24 GB of RAM.

Features and Benefits:

Log Analytics

JSA Series provides a comprehensive log analytics framework that includes scalable and secure log analytics capabilities integrated with real-time event correlation, policy monitoring, threat detection, and compliance reporting.

Threat Analytics

JSA Series Secure Analytics’ network security management solution takes an innovative approach to managing computerbased threats in the enterprise. Recognizing that discrete analysis of security events is not enough to properly detect threats, the JSA Series was developed to provide an integrated approach to threat analytics that combines the use of traditionally siloed information to more effectively detect and manage today’s complex threats. Specific information that is collected includes:

• Network Events: Events generated from networked resources, including switches, routers, servers, and desktops.
• Security Logs: Includes log data generated from security devices like firewalls, VPNs, intrusion detection/prevention, antivirus, identity management, and vulnerability scanners.
• Host and Application Logs: Includes log data from industry-leading host operating systems (Microsoft Windows, UNIX, and Linux) and from critical business applications (authentication, database, mail, and Web).
• Network and Application Flow Logs: Includes flow data generated by network devices and provides an ability to build a context of network and protocol activity.
• User and Asset Identity Information: Includes information from commonly used directories, including Active Directory and Lightweight Directory Access Protocol (LDAP). By incorporating patent pending “offense” management technology, this integrated information is normalized and correlated by the JSA Series, resulting in automated intelligence that quickly detects, notifies, and responds to threats missed by other security solutions with isolated visibility.

Vulnerability Management:

As a member of the JSA Series Secure Analytics network security management solution, Juniper Secure Analytics Vulnerability Manager helps organizations minimize the chances of a network security breach by proactively finding security weaknesses and mitigating potential risks. Using Juniper Secure Analytics Vulnerability Manager, organizations can perform rapid network scans, discover and highlight high-risk vulnerabilities from an integrated dashboard, and automate regulatory compliance through powerful collection, correlation and reporting tools.

Risk Management:

Juniper Secure Analytics Risk Manager is an integral component of a complete security intelligence solution, helping security professionals detect and mitigate advanced threats. The ability to proactively quantify risk from vulnerabilities, configuration errors, anomalous network activity, and other outside threats can help organizations prevent exploits that target high-value assets and data.

Compliance Management

Organizations of all sizes across almost every vertical market face a growing set of requirements from IT security regulatory mandates. Recognizing that compliance with a policy or regulation will evolve over time, many industry experts recommend a compliance program that can demonstrate and build upon the following key factors:

• Accountability: Providing surveillance that reports on who did what and when
• Transparency: Providing visibility into the security controls, business applications, and assets that are being protected
• Measurability: Metrics and reporting around IT risks

Licensing

Secure Analytics is available in two different licensing options:

• Log Analytics: Enables event searching, custom dashboards, and scheduled reporting
• Threat Analytics: All log analytics features + flow support, advanced correlation, and vulnerability assessment Integration

Specifications:

Views:

Top Front View

Front View

Rear View

Left Angle View

Right Angle View

Documentation:

Download the Juniper Networks JSA Series Secure Analytics Data Sheet (PDF).