WIXLIB

TOP-TO-BOTTOM BRANCHAND WAN MANAGEMENTWITH CONTRAIL SD-WANNov 13th, 2019Tony Sarathchandra – Product Management, Director 2019 Juniper NetworksJuniper Business Use Only

CONFIDENTIALITY AND LEGAL NOTICEThis material contains information that is confidential and proprietary to Juniper Networks, Inc. Recipient may notdistribute, copy, or repeat information in the document without a signed non-disclosure agreement (NDA).Any statements of product direction contained in this presentation sets forth Juniper Networks’ current intention and issubject to change at any time without notice. No purchases are contingent upon Juniper Networks delivering any featureor functionality depicted in this presentation.Copyright 2019 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Juniper, Junos,and NXTWORK are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All othertrademarks, service marks, registered marks, or registered service marks are the property of their respective owners.Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right tochange, modify, transfer, or otherwise revise this publication without notice. 2019 Juniper NetworksJuniper Business Use Only

AGENDA 2018 Juniper Networks SD-WAN Market Trends AI-Driven Enterprise Contrail SD-WAN Overview Customers & Use Cases Q&AJuniper Business Use Only

Key Enterprise Customer triggers for SD-WAN 2018 Juniper NetworksJuniper Business Use Only4

SD-WAN Market Trends 2018 Juniper NetworksJuniper Business Use Only5

AI-Driven EnterpriseSingle architecture with presentation layer by market segmentAI FoundationDataDataScienceOpen APIsArtificialIntelligenceMarvis DomainExpertiseCloudManagementOpen APIsJunos Extension ToolkitStreaming TelemetryCloud ServicesWired & Wi-FiAssuranceMarvisVirtual AssistantWi-Fi 2018 Juniper iper Business Use curity

Easy Out-of-The-Box ANCE Day 0 configuration Day 1 deploying Day 2-365 Operating Day 2-365 Operating Branch creation workflow Device phone home Topology view Network wide image Campus creation workflow Zero touch provisioning Router status Extensible day 2 Multi-factor authentication Switch status Security policy updates Easy factory reset AP status Config backup & restore Template based Contextual cross launchconfiguration changesusing templates.onboarding 2018 Juniper Networksupgrades SecurityJuniper Business Use Only7

Cloud Service Architecture HighlightsMicroservices Container based design Independently deployed &scaled Service level autoscaling/healing 2018 Juniper NetworksAuto-scaling Hierarchical servicesdesign Scales across multipleregionsOpen APIs REST API for 3rd partyOSS/BSS Flexible south boundAPIs includingNetconf/YANGJuniper Business Use OnlyMulti Tenant Ideal for MSPs or resellers On-premises or IaaSdeployment

Journey to the AI-Driven EnterpriseJuniper Vision for AI-Driven EnterpriseSD-Campus & -Branch - Wired & Wireless - WAN & LANCorporate HQSD-BranchEnterprise BranchHybrid-WAN & SD-WANEnterprise BranchMist Wi-Fi APsSecure RouterEnterprise BranchvSRX virtual endpointLTESRX Series secure CPEs 2018 Juniper NetworksEX Series Access SwitchesLTESRX Series secure CPEsLTENFX Series universal CPEJuniper Business Use OnlyMX and SRX Series Securegateways and hubsEX Series Agg/Core SwitchesAI engine(Marvis)

Contrail SD-WAN 2018 Juniper NetworksJuniper Business Use Only

Contrail SD-WAN for Enterprise Campus & BranchCloud-managed Contrail SD-WANLAN & WLAN devicesWAN Edge DevicesorContrail SD-WANContrail Service Orchestration (SDN)vSRXWANxLTEMist Wi-Fi APsNFX Series universal CPEWi-FiEX Series Ethernet SwitchesDedicated,MPLSJuniper or provider managed aaSLTESRX Series Services GatewaySecure CPEsBroadband,InternetSecure SD-LAN and SD-WANWireless,4G/LTEMX/SRX WAN Hubs for large topologiesEnterprise or SP hub gatewaysvSRX Virtual Firewallcloud-WAN endpointLegacy andxDSLCampus and BranchEnterprise SitesPrivate Clouds,Data CentersEnterprise Sites 2018 Juniper NetworksSaaS ApplicationsPrivate or SP’sWAN backboneJuniper Business Use OnlyIaaS, PaaS:VPCs for cloud-native appsPublic CloudSaaS FW passthrough

Contrail SD-WAN Cloud Service – Available NowSecurity & PrivacyCloud based mgmt/control withon-prem data plane separationSLAMulti-TenancyTwo-tier multi-tenancy for bothenterprises and MSP99.9% monthly uptime, JTAC24x7 availability monitoringWE BUILD ITWE RUN ITResiliency &RedundancyTier 1 global cloudinfrastructure provider w/multiple availability zones Disaster RecoveryComplianceOnline daily backupsSOC compliantAccessible anywhere by webMulti-tenant, HA, Scalable 2019 Juniper Networks ScaleHorizontal scale for 100s oftenants with 1000s ofendpoints per tenantSecure: data traffic stays on customernetworkJuniper Business Use Only Monthly software / features updatesLower Capex/Opex

Primary Use CasesContrail SD-WAN/SD-LANCSO ControllerBRANCH SITESStandalone NGFWEX2300/3400/43001SRX3XX/550M/1500/4X00Mist AP61/43/41/21Mist AP61/43/41/21SD-WAN CPEEX2300/3400/43002InternetHybrid WAN S1EX2300/3400/4300 2019 Juniper NetworksServers /ApplicationsHQ / Campus / POP3rd party CPE/FWStandalone Switch3EXMX240/480/960*NFX150/250Mist AP61/43/41/21SD-WAN HubJuniper Business Use Only

Contrail SD-WAN Features At A GlanceSD-WAN AND -BRANCHSECURITYINFRASTRUCTURE Dynamic Application PathSelection based on SLA L7 Firewall Redundancy at branch/CPE Static/Preferred ApplicationPath Selection Web Filtering Redundancy at Gateway/Hub Content Filtering Secure and Resilient OAM Antivirus Backup and Restore Antispam Redundancy at Orchestrator Flexible Internet Breakouts User Firewall Scale of endpoints/devices Hub and spoke topology Zone-based Firewall Site to Site VPN topology – Fullmesh / Partial mesh SSL Forward Proxy On-premise as well as Clouddelivery model Network Segmentation Integration with third-partycloud security e.g. Zscaler Application Quality ofExperience MPLS/Internet/LTE/xDSL links Backup link Default link IPS/IDS NAT – Static, Destination,SourceEnterprise critical featuresSP critical featuresUSEABILITY Open APIs for northboundintegration Zero touch provisioning ofdevices Reporting – email/recurrencefor SD-WAN and Security Custom Roles andobject-based RBAC Audit logs Multi-tenancy at orchestrator Alarms and Alerts Multi-tenancy at gateway/hub SLA Performance Monitoring Integration with existingIP/VPN infrastructure Security Events Monitoring Application Visibility Portal rebranding andcustomization SD-WAN CPE in public cloud Third-party VNF onboardingtools Third-party VNF service chain LAN/WLAN Integration Dashboard summary widgets Topology monitoring view 2019 Juniper NetworksJuniper Business Use Only

Flexible Dynamic Meshed SD-WANFEATURE SUPPORT Contrail SD-WAN/SD-LANCSO ControllerDynamic mesh for site-to-site linksUser-defined mesh tags on WAN linksMesh with different underlay typesToggle switch to enable full/partial meshDial for resource managementMonitoring and VisualizationEnterprise HUBCustomer Benefits: Support mesh between different underlaytypes Site-to-site tunnels based on link capacity Geo-based meshing Increased Dual CPE site availabilityDeptGatewayHQ SiteProvider HubPath APath APath AMultiple mesh tagsDeptDeptDeptSite 1Site 2Site 3tagtagKPI: Session close rate 2019 Juniper NetworksIP VPNDeptJuniper Business Use OnlyPath BTags: Gold, Silver, Bronze

Provider & Enterprise SD-WAN Hub SupportUSE CASEIP VPN Multi-tenant Provider Hub inPOPs/Colos Gateway/Peering to MPLSCloudHUBServiceProviderHUB Tenant Specific Enterprise Hubin DC/HQ Contrail SD-WAN/SD-LANCSO ControllerDeptsStatic Enterprise Hub MeshLAN side OSPF/BGP supportDefault route leak for DC AppsLifecycle Management of HubSRX4100/4200 cluster supportOSPFDeptsDeptsCloud HUBEnterpriseHubCloud HUBEnterpriseHub Multiple SP/Enterprise HubsupportCustomer Benefits: Built-in failover and HA Scale with multiple Hubs 2019 Juniper NetworksDeptDeptDeptDeptSite 1Site 2Site 3Site 4Juniper Business Use OnlyApplicationroutesEnterpriseDC

SD-WAN Meshing With Regional Enterprise HubsBranchInternetEnterprise Hub 1Fully MeshedSitesPartially MeshedSites withOn-demandSite-to-siteINTERNETMPLSEnterprise Hub 2MPLS 2019 Juniper NetworksEnterprise Hub 3Enterprise Hub 4Region/PoP 2Region/PoP 1Juniper Business Use Only

Comprehensive Application Based SD-WANApp ID Contrail SD-WANsupports more than4200 applicationsignatures includingLync, Skype,WebEx and MSTeams The signatures areregularly updated CSO offers easy UIbutton to installlatest signatures onto the devices Supports userdefined customsignatures 2019 Juniper NetworksJuniper Business Use Only19

Real Time Optimized Mode Performance MetricsApp QOEReal-time Optimized mode Performance Metrics include: Two way latency (RTT)Ingress jitterEgress jitterTwo way jitterPacket loss %Metrics are measured at both application level and path levelApplication traffic to be probed is determined by Applicationselection in SLA Profile Application sessions are chosen (based on sampling percentage config)for passive probingActive probes are performed on all candidate links The probes try to mimic traffic behavior for the application (bycarrying similar DSCP value, packet sizes, burst count, etc) 2019 Juniper NetworksJuniper Business Use Only

Flexible SD-WAN Application Breakout OptionsBREAKOUT FEATURESIP VPNBreakout capability, failover, redundancy Intuitive Intent-based Breakout policySite Local Internet BreakoutDept Local Internet BreakoutApplication Local Internet breakoutZscaler Internet BreakoutCentral Breakout on HubCentral Zscaler Breakout3. Hub Breakout Internet IPVPNDeptsServiceCloud HUBProvider HUBPath ACustomer Benefits: Granular control of trafficSite level control of breakoutsRedundant breakout path for link failure 2019 Juniper Networks2. Central Internet Breakout Application Department InternetDeptsEnterpriseHub1. Local Breakout Application Department Internet ZscalerPath BPath BPath BEnterpriseDCPath APath APath ADeptDeptDeptSite 1Site 2Site 3Juniper Business Use OnlyLocal BreakoutZscaler BreakoutLocal BreakoutZscaler BreakoutInternet BreakoutZBO

Network Segmentation And DepartmentsBREAKOUT FEATURES Isolate departmental traffic with NetworkSegmentationLAN side OSPF on Enterprise HubAutomatically leak DC routes to all Spokes 25 Network Segments Separate policy controls on eachsegment Special DC Department on HubLAN 2019 Juniper NetworksDeptContrail SD-WAN/SD-LANCSO ControllerP-HubDepartment 1 VRFDepartment 1 VRFDepartment 2 VRF Department 2 VRF Department 25 VRFDepartment 25 VRFData Center VRFSpokeEnterpriseHubBranchHQJuniper Business Use OnlyOSPF/BGPEnterpriseDC

User Application Firewall ControlsContrail SD-WAN/SD-LANCSO ControllerEnterpriseAD Server P2P apps blockedFinance YouTube allowed Anti-virus appliedSales P2P, YouTube blockedInternet /Intranet Anti-virus appliedSD-WAN CPE or GatewayCEO No apps blocked Anti-virus appliedAllows different users to have different application policies based on their role and group 2019 Juniper NetworksJuniper Business Use Only

Unified Threat Management With SD-WANANTI-VIRUS Protection from top-tierAV partner Reputation-enhancedcapabilities 2019 Juniper NetworksANTI-SPAMWEB FILTERING Multilayered spamprotection Block malicious URLs Protection against APTs Prevent lostproductivityJuniper Business Use OnlyCONTENT FILTERING Filter out extraneous ormalicious content Maintain bandwidth foressential traffic

Contrail SD-WAN With AWSCloud-managed Contrail SDWANVPCYour campus and branch officesYour remote OfficesContrail automated setup of spoke site: Choose AWS region Choose AWS VPC Choose or create AWS subnet Download and run CloudFormationtemplate which does the work Activate spoke site 2019 Juniper NetworksJuniper Business Use OnlyVPCYour AWS regions and AZsVPCVPCYour future AWS Outposts