Avoiding the N(N-1)/2 Problem In Distributed Security Networks

This paper looks at the use of virtualization in the Juniper Networks SRX Series Services Gate- way and the Juniper Networks MX960 3D Universal Edge Router as a means to reduce the com- plexity of security policies. When a firewall is used to provide security to a distributed group of users, the complexity of the firewall policies can become overwhelming. By using virtualization, a cookie cutter approach can be applied to the distributed groups while keeping control and complexity centralized.