Overview
The Juniper Networks® cSRX Container Firewall, a containerized version of the Juniper Networks SRX Series Services Gateways, provides visibility into the network, allowing organizations to respond more quickly to emerging threats. Individual containerized applications or microservices can have their own content security-enabled next-generation firewall (NGFW), or even an entire chain of network security services, depending on the need of the organization.
The cSRX supports easy, flexible, and highly scalable deployment options covering various customer use cases, including application protection, microsegmentation, or as an edge gateway for secure IoT deployments through a Docker container management solution. The cSRX also integrates with other next-generation cloud orchestration tools such as Kubernetes.
Enterprises migrating to virtual or containerized cloud-based microservices in AWS can take advantage of the cost savings, faster boot time, and greater visibility while maintaining the same security posture across their public and private cloud environments. Integrated with the AWS classic, network and application load balancers, the cSRX offers protection for application workloads running either within the EKS cluster or outside it.
Highlights
- Full-featured Firewall providing comprehensive Next-Generation firewall capabilities in a compact footprint
- Container-Speed Security. Supports quick boot time; once container resources are available, the cSRX is able to instantiate in less than a minute to secure workloads.
- Cloud-Native Security. Delivers microsegmentation, encryption, and security at Layers 4-7 security for cloud-native applications.
Details
Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
This is a placeholder value. Please update this value via the AWS Marketplace Management Portal.
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
cSRX Container Firewall (BYOL)
- Amazon EKS
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
Starting in Junos OS Release 22.2R2, you can deploy cSRX Container Firewall in Amazon Web Services (AWS) Cloud using Amazon Elastic Kubernetes Services (Amazon EKS), which is a fully managed Kubernetes service. With cSRX, you can also set up automated service provisioning and orchestration, distributed and multitenant traffic security, centralized management with Juniper Security Director (including dynamic policy and address update, remote log collections, security events monitoring), and scalable security services with small footprints. cSRX is available with 60 days free trial eval license (S-CSRX-A1 SKU). The eval license in cSRX expires after 60 days. You can purchase bring your own license (BYOL) from Juniper Networks or a Juniper Networks authorized reseller for using the software features on the cSRX. Use this license to customize your license, subscription, and support.
Additional details
Usage instructions
Deployment guide for the cSRX in EKS: https://www.juniper.net/documentation/us/en/software/csrx/csrx-aws-deployment/index.html
GitHub link for deployment scripts:
https://github.com/Juniper/csrx-scripts/tree/master/csrx-eks-deploy
Resources
Vendor resources
Support
Vendor support
Juniper Networks Technical Assistance Center (JTAC) is your focal point of contact for post sales technical and network-related questions and issues on Juniper products 24x7x365.
Juniper Networks supports cSRX BYOL customers after a software license is purchased from Juniper via an authorized reseller. Please visit the Juniper Knowledge Base article below for steps to obtain support from Juniper Networks. Additional information may also be found in the JTAC User Guide below.
https://www.juniper.net/customers/support/ https://kb.juniper.net/KB31158 http://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf https://www.juniper.net/uk/en/partners/locator/
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.