Juniper vSRX Virtual Firewall for Azure

Scalable Hardware Support

• Feature Description: Allows you to start with 4 CPU cores and 14 GB of memory and scale up to 16 cores and 56 GB memory.
• Benefit: Provides a flexible and scalable hardware footprint to support your needs now and into the future as traffic grows.

Metadata-based Firewall Policies

• Feature Description: Allows administrators to leverage the power of Dynamic Address Group functionality on the vSRX to create object metadata-based user-intent firewall policies.
• Benefit: Simplifies policy creation and maintenance workflows by allowing firewall policies to be enabled or disabled based on metadata such as Azure tags.

Flexible Licensing

• Feature Description: Supports both pay-as-you-go (PAYG) and bring-your-own-license (BYOL) options.
• Benefit: Provides flexible license and purchase options to secure workloads in Azure and connectivity between your data center and Azure.

Azure Load Balancer Integration

• Feature Description: Provides traffic distribution or load balancing to a pool of vSRX virtual firewalls deployed in Azure.
• Benefit: Increases the capacity and performance of vSRX firewalls deployed in Azure.

Microsoft Azure Key Vault HSM

• Feature Description:
  • Uses SHA256-bit encryption to hash the current configuration file.
  • Encrypts the device primary password used to encrypt data at rest on the vSRX.
  • Ensures key pairs are generated and stored in Azure Key Vault — only the public key is stored on the vSRX.
• Benefit: Reduces risk and improves security by securely encrypting the data at rest on the vSRX running in Azure.

Azure Instance Types

Product Description

• vSRX Next-Generation Firewall:
  • Core firewall featuring IPsec VPN, Network Address Translation (NAT), Class of Service (CoS), and rich routing services.
  • AppSecure featuring AppID, AppFW, AppQoS, and AppTrack.
  • Content security services that include Intrusion Prevention System (IPS).