Juniper IDP

Juniper IDP products provide comprehensive inline network security from worms, Trojans, spyware, keyloggers, and other malware. By accurately identifying application traffic, the network security solutions ensure continuous availability of business-critical applications.

Juniper IDP75

Juniper Networks IDP75 Intrusion Detection and Prevention Appliances for small and mid-size businesses and remote offices provide a cost-effective method of ensuring network application security and availability.

Max Throughput: 150 Mbps
Juniper IDP75 Datasheet

IDP 250

Juniper IDP250

Juniper Networks IDP250 Intrusion Detection and Prevention Appliances offer market-leading IPS capabilities for mid-size and large enterprises. These IDP Intrusion Detection and Prevention Appliances offer continual intrusion detection security management for enterprise networks and network applications.

Max Throughput: 300 Mbps
Juniper IDP250 Datasheet

IDP 800

Juniper IDP800

Juniper Networks IDP800 Intrusion Detection and Prevention Appliances offer continual intrusion detection security management coverage to the networks and network applications of mid-size and large enterprises and service providers.

Max Throughput: 1 Gbps
Juniper IDP800 Datasheet

IDP 8200

Juniper IDP8200

Juniper Networks IDP8200 Intrusion Detection and Prevention Appliances is the ideal intrusion detection security management solution for large enterprise networks and service providers requiring the highest throughput, reliability, and quality of service.

Max Throughput: 10 Gbps
Juniper IDP8200 Datasheet

Overview
Features & Benefits
Model Comparison
Data Sheets

The Juniper Networks network security system includes: SA Series SSL VPN Appliances, IDP Series Intrusion Detection and Prevention Appliances and the SRX Series Services Gateways.

Most Comprehensive Attack Coverage Available

Juniper Networks® IDP Series Intrusion Detection and Prevention Appliances with Multi-Method Detection (MMD), offers comprehensive coverage by leveraging multiple detection mechanisms. For example, by utilizing signatures, as well as other detection methods including protocol anomaly traffic anomaly detection, the Juniper Networks IDP Series appliances can thwart known attacks as well as possible future variations of the attack. Backed by Juniper Networks Security Lab, signatures for detection of new attacks are generated on a daily basis. Working very closely with many software vendors to assess new vulnerabilities, it’s not uncommon for IDP Series to be equipped to thwart attacks which have not yet occurred. Such day-zero coverage ensures that you’re not merely reacting to new attacks, but proactively securing your network from future attacks.

Minimizing False Positives, Increasing Peace of Mind

One of the top concerns in deployment of any IDP solution is false positives. Incorrectly identifying valid access and traffic as an attack could at times be just as damaging as a true attack. Critical business activities can be delayed and additional IT resources needed to investigate and determine the nature of the false positives. Juniper Networks IDP Series with Stateful Signature Detection dramatically reduces false positives by examining the traffic in the context of the application. With full understanding of the application and its relevant traffic, the IDP Series can pinpoint the signature pattern-matching to the exact location where an attack can occur. This application layer intelligence dramatically reduces the number of false positives compared to IDP platforms utilizing traditional non-stateful signature detection. In addition to the improved accuracy of the detection, the throughput of the solution is also optimized as the pattern detection is applied only to relevant network traffic.

Real-World Performance Without Sacrificing Security

Network throughput capacity of IDP platforms by itself often lends very little to the true performance of the appliance in a real-world environment. Many IDP platforms can exhibit very high throughput when only few attacks are being monitored. When more and more attack detections are enabled, the overall throughput can degrade. Also, while some appliances ship with default coverage settings optimized for performance, these settings often do not include the necessary attack coverage necessary in real-world deployments. The throughput of Juniper Networks IDP Series appliances span wide range enterprise and service provider needs from 150 Mbps to 10 Gbps. All performance measurements are conducted in real-world deployment scenarios and are indicative of performance customers can expect when installing the IDP Series in their network.

Juniper Networks IDP Series Intrusion Detection and Prevention Appliances offer the latest capabilities in network intrusion detection and prevention to protect the network from a wide range of attacks. Using industry-recognized stateful intrusion detection and prevention techniques, the IDP Series provides zero-day protection against worms, trojans, spyware, keyloggers, and other malware.

Feature	Feature Description	Benefit
Stateful Signature Detection	Signatures are applied only to relevant portions of the network traffic determined by the appropriate protocol context.	Minimize false positives.
Protocol Anomaly Detection	Protocol usage against published RFCs is verified to detect any violations or abuse.	Proactively protect network from undiscovered vulnerabilities.
Traffic Anomaly Detection	Heuristic rules detect unexpected traffic patterns that may suggest reconnaissance or attacks.	Proactively prevent reconnaissance activities or block Distributed Denial of Service (DDoS) attacks.
QoS/DiffServ Marking	Packets are marked using DiffServ code point (DSCP).	Optimize network and ensure necessary bandwidth for business-critical applications.
VLAN-Aware Rules	Unique policies are applied to different VLANs.	Apply unique policies based on department, customer, and compliance requirements.
Role-Based Administration	More than 100 different activities can be assigned as unique permissions for different administrators.	Streamline business operations by logically separating and enforcing roles of various administrators.
Domains	Enable logical separation of devices, policies, reports, and other management activities.	Conform to business operations by grouping of devices based on business practices.
IDP Reporter	Pre-configured real-time reporting capability available in each IDP appliance.	Provide detailed real-time reports from each IDP appliance installed in the network without taxing the central IT organization.
Profiler*	Capture accurate and granular detail of the traffic pattern over a specific time period.	Provide details on what threats are encountered by the network as well as the mix of application traffic.
*Profiler feature is not available on the IDP8200.

	IDP75	IDP250	IDP80	IDP8200
Maximum Throughput	150 Mbps	300 Mbps	1 Gbps	10 Gbps
Maximum Number of Sessions	100,000	300,000	1,000,000	5,000,000
Operational Modes	Sniffer, Transparent, and Mixed	Sniffer, Transparent, and Mixed	Sniffer, Transparent, and Mixed	Sniffer, Transparent, and Mixed
Detection Mechanisms	8 including Stateful Signatures and backdoor detection	8 including Stateful Signatures and backdoor detection	8 including Stateful Signatures and backdoor detection	8 including Stateful Signatures and backdoor detection
Signature Updates	Daily and emergency	Daily and emergency	Daily and emergency	Daily and emergency
Number of Traffic Interfaces	Two RJ-45 Ethernet 10/100/1000 with bypass	8 RJ-45 Ethernet 10/100/1000 with bypass	2 RJ-45 Ethernet 10/100/1000 with bypass	Any Combination of four Module I/O cards: 4-port GE Copper with bypass 4-port GE fiber SFP 4-port GE SX-bypass 2-port 10 GE SR-bypass
High-Availability Support	N/A	Optional Bypass	Optional Bypass	Optional Bypass

Juniper IDP

Juniper IDP75

Juniper IDP250

Juniper IDP800

Juniper IDP8200

Most Comprehensive Attack Coverage Available

Minimizing False Positives, Increasing Peace of Mind

Real-World Performance Without Sacrificing Security

Application Notes

Brochures

Case Studies

Data Sheets

Implementation Guides

Network Diagram

Solution Briefs

Wite Papers

Free Consultation

Unbeatable Prices

Pro Services

24x7 Tech Support