SRX

hi all

would someone plz differentiate between IPS,, IDM,, and UTM....if someone can give clear demarcation...
in which scenarios to apply what????

Hi

For Juniper, IPS=IDP - Intrusion detection functionality, that allows you to catch network attacks and protect your servers from known (sometimes even unknown) application-layer vulnerabilities. Can be used to protect clients from server-initiated attacks as well.

UTM includes network Antivirus, Antispam, Web filtering and Content filtering features, this functionality is usually needed to protect users of your branch offices.

thanks peter for kind reply....i understand the difference...

1...now gen juniper srx devices support IPS/IDP,, still it offers dedicated IDP devices...how to take decision that should i deploy a dedicated device for IDP or should i configure IPS/IDP on same srx devices

2....is there some dedicated device for UTM too???which one is it???

Hi

1. It depends on so many parameters, I'm afraid I can't give you the unambiguous advice. High-end SRX are more powerful then any standalone IDP sensor, and SRX's IDP performance can be increased gradually by inserting new cards. So for very high performance deployment SRX are, I think, preferred. At the lower end, you will not benefit from having a separate device for IDP so again, SRX (branch model) will be preferred. Somewhere in between - you need to look at prices. 

2. No separate device for that currently.

thanks peter for fruitful explanation