WIXLIB

Data SheetJSA Series SecureAnalyticsProduct OverviewProduct DescriptionThe integrated approach ofJuniper Networks JSA Series Secure Analytics combine, analyze, and manage anJSA Series Secure Analytics,unparalleled set of surveillance data—network behavior, security events, vulnerabilityused in conjunction withprofiles, and threat information—to empower companies to efficiently manage businessunparalleled data collection,operations on their networks from a single console.analysis, correlation, andauditing capabilities, enablesorganizations to quickly and easilyimplement a corporate-widesecurity management programthat delivers security bestpractices. These include superiorlog analytics with distributed log Log Analytics: JSA Series provides scalable log analytics by enabling distributed logcollection across an organization, and a centralized view of the information. Threat Analytics: JSA Series provides an advanced network security managementsolution that bridges the gap between network and security operations to deliver realtime surveillance and detect complex IT-based threats. Compliance Management: JSA Series brings to enterprises, institutions, and agenciescollection and centralized viewing;the accountability, transparency, and measurability that are critical factors to thethreat analytics that deliver real-success of any IT security program required to meet regulatory mandates.time surveillance and detectioninformation; and compliancemanagement capabilities—allWith preinstalled software, a hardened operating system, and a web-based setup process,the JSA Series lets you get your network security up and running quickly and easily. Theviewed and managed from abottom line of the JSA Series is simple deployment, fast implementation, and improvedsingle console.security, at a low total cost of ownership.Architecture and Key ComponentsJSA3500 Secure AnalyticsJuniper Networks JSA3500 Secure Analytics is an enterprise-class appliance that providesa scalable network security management solution for medium-sized companies up to largeglobal organizations. It is also the base platform for an enterprise-class scalable solution.The JSA3500 includes onboard event collection, correlation and extensive reportingcapabilities, and is expandable with additional JSA Series appliances acting as event andflow collectors or a combination of both on a single appliance.JSA3500 can be deployed as an all-in-one appliance or in a distributed setup as adedicated event, flow, or combination processor. It can also be deployed as a store-andforward event collector.JSA5500 Secure AnalyticsJuniper Networks JSA5500 Secure Analytics is an enterprise and carrier-class appliancethat provides a scalable network security management solution for medium-sizedcompanies up to large global organizations.JSA5500 can be deployed as an all-in-one appliance or in a distributed setup as aconsole or dedicated event or flow processor. It can also be deployed as a store-andforward event collector.Your ideas. Connected. 1

JSA Series Secure AnalyticsData SheetJSA7500 Secure AnalyticsJSA Virtual ApplianceJuniper Networks JSA7500 Secure Analytics is an enterpriseJuniper Networks JSA Virtual Appliance (JSA VM) Secureand carrier-class appliance which provides a scalable networkAnalytics is a virtualized platform that provides Secure Analyticssecurity management solution for large global organizations.functionality. JSA Virtual Appliance can be deployed as an all-in-JSA7500 can be deployed as a console or distributed event orone or in a distributed setup as a console, event or flow processor.flow processor. It can also be deployed as a store-and-forwardIt can also be deployed as a store and forward event collector.event collector.JSA VM is designed to run with VMWare ESX 5.0 and ESX 5.1, andrequires a configuration with a minimum of two CPUs (1 socketx 2 cores or 2 sockets x 1 core) and 8GB of RAM. It processes amaximum of 1,000 events per second and 50k flows per minute.Features and BenefitsTable 1. JSA Series Secure Analytics Features and BenefitsFeaturesFeature DescriptionBenefitsAll-in-one appliancesEvent collection, flow collection event processing, flowprocessing, correlation, analysis, and reporting are allembedded within JSA Series Secure Analytics. All core functions are available within the systemand it is easy for users to deploy and manage inminutes. JSA Series architecture provides a streamlinedsolution for secure and efficient log analytics.Distributed supportJSA Series has the ability to scale to large distributeddeployments that can support up to 5 million eventsper second. Users have the flexibility to scale to largedeployments as their business grows. JSA Series can be easily deployed in largedistributed environments.HDD implementationJSA Series utilizes SAS HDD in RAID 1 and RAID 10setups. SAS HDD is designed for 24x7 operations. RAID 1/10 implementation provides best possibleperformance and redundancy.Easy and quick installJSA Series comes with an easy, out-of-the-box setupwizard. Users can install and manage JSA Series appliancesin a couple of steps.Automatic updatesSecure Analytics automatically downloads anddeploys reputation feeds, parser updates, andpatches. Users don’t need to worry about maintainingappliance and OS updates and patches.High availability (HA)Users can deploy all JSA Series appliances in HA mode Users can deploy JSA Series with full active/passive redundancy. This supports all deploymentscenarios, all-in-one and distributed.Built-in compliance reportsOut-of-the-box compliance reports are included withthe JSA Series. JSA Series provides 500 out-of-the-boxcompliance reports.Reporting and alertingcapabilities for controlframework Control Objectives for Information and relatedTechnology (CobiT) International Organization for Standardization (ISO)ISO/IEC 27002 (17799) Common Criteria (CC) (ISO/IEC 15408) NISTspecial publication 800-53 revision 1 and FederalInformation Processing Standard (FIPS) 200 JSA Series enables repeatable compliancemonitoring, reporting, and auditing processes.Compliance-focusedregulation workflow Payment Card Industry Data Security Standard (PCIDSS) Health Insurance Portability and Accountability Act(HIPAA) Sarbanes-Oxley Act (SOX) Graham-Leach-Bliley Act (GLBA) Federal Information Security Management Act (FISMA) JSA Series supports multiple regulations andsecurity best practices. Includes compliance-driven report templates tomeet specific regulatory reporting and auditingrequirements.Management-level reports onoverall security stateThe JSA Series reports interface allows you to create,distribute, and manage reports that are generated inPDF, HTML, RTF, XML, or XLS formats. Users can use the report wizard to create executiveand operational level reports that combine anynetwork traffic and security event data in a singlereport.One stop supportJuniper Networks Technical Assistance Center (JTAC)supports all aspects of the JSA Series. Users don’t need to go to several places to getsupport, even for multivendor issues.2

JSA Series Secure AnalyticsData SheetLog AnalyticsJSA Series provides a comprehensive log analytics framework that includes scalable and secure log analytics capabilities integratedwith real-time event correlation, policy monitoring, threat detection, and compliance reporting.Table 2. Log Analytics Features and BenefitsFeaturesFeature DescriptionBenefitsComprehensive log managementJSA Series delivers scalable and secure loganalytics with storage capabilities from GB to TB ofdata storage.Provides long term collection, archival, search, andreporting of event logs, flow logs, and applicationdata that enables logging taxonomy from acentralized view.Comprehensive reportingJSA Series comes with 1,300 canned reports.Report Wizard allows users to customize andschedule daily, weekly, and monthly reports thatcan be exported in PDF, HTML, RTF, Word, Excel,and XML formats.Provides users not only the convenience of cannedreports but also the flexibility to create andcustomize their own reports according to theirbusiness needs.Log management and reportingonly optionJSA Series provides a comprehensive logmanagement and reporting solution with adistributed log analytics only solution to collect,archive, customize, and analyze network securityevent logs.Allows users to start with a log management andreporting only option and then upgrade to fullblown JSA Series functionality as their businessneed grows—without upgrading their existinghardware.Log retention and storageJSA Series database can easily archive logs andintegrate into an existing storage infrastructure forlong-term log retention and hassle-free storage.Enables organizations to archive event and flowlogs for whatever time period is specified by aspecific regulation.Tamperproof data Event and flow logs are protected by SHA-x (1256) hashing for tamper proof log archives. Support of extensive log file integrity checksincluding National Institute of Standards andTechnology (NIST) log management standards.Provides secure storage based on industryregulations.Real-time event viewingJSA Series allows users to monitor and investigateevents in real time or perform advanced searches.The event viewer indicates what events are beingcorrelated to offenses and which are not. Users have the ability to quickly and effectivelyview and filter real-time events. Provides a flexible query engine that includesadvanced aggregating capability and ITforensics.Data warehousingJSA Series includes a purpose-built datawarehouse for high speed insertion and retrievalof data archive of all security logs, event logs, andnetwork activity logs(flow logs).Enables full audit of all original events and flowcontent without modification.Threat Analytics Host and Application Logs: Includes log data from industry-JSA Series Secure Analytics’ network security managementleading host operating systems (Microsoft Windows,solution takes an innovative approach to managing computer-UNIX, and Linux) and from critical business applicationsbased threats in the enterprise. Recognizing that discrete analysis(authentication, database, mail, and Web).of security events is not enough to properly detect threats, the Network and Application Flow Logs: Includes flow dataJSA Series was developed to provide an integrated approachgenerated by network devices and provides an ability to buildto threat analytics that combines the use of traditionally siloeda context of network and protocol activity.information to more effectively detect and manage today’scomplex threats. Specific information that is collected includes: Network Events: Events generated from networkedresources, including switches, routers, servers, and desktops. Security Logs: Includes log data generated from securitydevices like firewalls, VPNs, intrusion detection/prevention,antivirus, identity management, and vulnerability scanners. User and Asset Identity Information: Includesinformation from commonly used directories, includingActive Directory and Lightweight Directory Access Protocol(LDAP). By incorporating patent pending “offense”management technology, this integrated information isnormalized and correlated by the JSA Series, resulting inautomated intelligence that quickly detects, notifies, andresponds to threats missed by other security solutionswith isolated visibility.3