“The current security model needs to change, and we’re working at Juniper on a strategy that has a few important elements where we think security has to go,” said Kevin Hutchins, SVP of strategy and product line management at Juniper, during a keynote at the company’s NXTWORK 2017 user’s conference. “Security that’s pervasive and dynamic, adaptive and open, and automated and simple.”
He admitted that it is still a work in progress. “We’re not there yet.” But he said the new machine learning and automation capabilities of Juniper’s Software-Defined Secure Networks (SDSN) platform are a step in the right direction.
Specifically, the company announced three updates.
First, it is adding automated policy management to Security Director — this is the software that provides network security policy management. The new dynamic policy actions capability reduced time to create remediation policies “from 30-plus hours down to a few minutes,” said Mihir Maniar, Juniper’s VP of security business and strategy, in an earlier interview.
Security Director also now allows teams to define enforcement policies based on metadata that are auto-provisioned across environments. This can reduce time spent on firewall rule management by more than 80 percent, the company claims.
The second piece of Juniper’s security announcement centers on one-touch mitigation. It is an on-premises appliance that uses technology acquired from Cyphort, a security startup Juniper bought in August. At the time, Juniper said it would integrate Cyphort’s software into its Sky ATP platform to provide both on-premises and cloud support.
The new device announced today is the on-premises counterpart to the cloud-delivered Sky ATP product. Both use Cyphort’s analytics and remediation technology to provide built-in threat behavior visibility and one-touch mitigation.
“This gives CISOs the ability to correlate this threat information with visualization,” Maniar said. It also aims to accelerate incident response. The on-premises device is geared toward organizations with strict data sovereignty requirements.
Finally, Juniper announced its latest SRX next-generation firewall. It’s built for private cloud environments and integrates with Security Director. This feature provides a single pane of glass view of enterprise security environments.
The security announcements come as Juniper’s security business revenue has been falling since 2016. Speaking at the 2017 Instinet Media and Telecom Conference, Hutchins said he expects Juniper’s security business to recover by the end of the year.
In an interview with SDxCentral at NXTWORK, Juniper CTO Bikash Koley said the company’s security strategy is “very well prepared for where the world is going. I’m personally super bullish about what Juniper can do in this space.”
Photo: Kevin Hutchins, SVP strategy and product line management at Juniper, discusses the company’s security strategy during a keynote at NXTWORK.