NETSCREEN TO SRX SERIES

SERVICE GATEWAY MIGARTION

SERVICE
For Juniper Sales (Internal)

Professional Services

© 2020 Juniper Networks Juniper Business Use Only

AGENDA
• Juniper PS Opportunity and Services Value Proposition

• Business Drivers

• Customer Challenges

• Customer Value Proposition and Positioning

• Services Overview

• Service Delivery

• Quoting and Ordering

• Collateral
© 2020 Juniper Networks Juniper Business Use Only 2
PROFESSIONAL SERVICES SUPPORTING FIREWALL SERVICES

Opportunity

Safeguarding against new network and cybersecurity threats

requires utilizing the latest security features with a high-scale,
high-performance firewall. Replacing Juniper NetScreen
Security System with an SRX Series Services Gateway protects
organization while maintaining their competitive advantage

CUSTOMER
SUCCESS

Services Value Proposition

For legacy conversions, it is critical that your team understand

and be prepared to address typical conversion and migration
challenges that can occur. Juniper’s NetScreen-to-SRX Series
Migration Service uses a proven process and tested
technologies to reduce risk and accelerate migration to Juniper
Networks SRX Series firewalls.

© 2020 Juniper Networks Juniper Business Use Only 3

SECURITY LANDSCAPE CONTINUES TO DIVERSIFY
CLOUD IS EATING THE FIGHTING CYBER CRIME IS #1 REASON IT SECURITY
WORLD EXPENSIVE STRATEGIES FAIL

$8 3
of IaaS

50 % workloads
in the cloud
by 2020
(Gartner)
TRILLION
will be spent on fighting
cybercrime in 2022
MILLION
shortfall of security professionals
worldwide
(ISC2)
(Juniper Research)

IoT CREATES A VAST THREATS ARE MORE MONEY DRIVES

ATTACK SURFACE EVASIVE CYBERCRIME

75.4 BILLION 68
of attacks took months or
%
76
of breaches are financially
%
connected devices by 2025 longer to discover motivated
(Statista) (Verizon DBIR 2018) (Verizon DBIR 2018)

© 2020 Juniper Networks Juniper Business Use Only 4

CUSTOMER FIREWALL CONVERSION CHALLENGES

Complex
Complex
▪ Firewall configurations are
Threat
Threats
▪ Threats have evolved and
RiskRisk
▪ Challenges performing large
highly complex. traditional firewalls needs to scale conversions.
adapt
▪ Unlike routers and switches ▪ Lack of understanding of rule
firewalls block traffic by default. ▪ Recommendations on next base and legacy configuration.
generation security features like
▪ Many factors to consider like AppFW, IPS, sky and user ▪ Limited in-house resources
zones, NAT, rule placement and firewall.
optimizations. ▪ Limited in-house automation
▪ Difference in feature sets capability
between vendors.

© 2020 Juniper Networks Juniper Business Use Only 5

TECHNICAL FIREWALL CONVERSION CHALLENGES

Zones
Challenges/pain points: Challenges/pain points: Challenges/pain points:

▪ NAT can be highly complex ▪ Different implementations ▪ Generally the hardest part of
among vendors (interface- the conversion
▪ NAT context can be different based vs zone based)
(from interface vs from zone) ▪ Which one to use Route based
▪ Consolidate and simplify vs. policy based
▪ Subtle differences in simplified network
implementation between architecture. ▪ Potential Opportunity to
vendors simplify config by leveraging
▪ Reduce Complexity and AutoVPN or ADVPN
▪ Rule base needs to be adapted streamline security operations
(use of real vs mapped IP )

© 2020 Juniper Networks Juniper Business Use Only 6

JUNIPER NETSCREEN TO SRX FIREWALL MIGARTION SERVICE

Consultant Led Automated Tools

Turnkey Solution Automated Tools
Migration
▪ Juniper Professional Services ▪ Juniper PS Consultant can ▪ Less prone to errors
provides a turnkey solution for work onsite or remotely
converting NetScreen to SRX ▪ Juniper PS Consultants use a
configurations. ▪ PS will lead the migration combination of automated
efforts and will be on the MW tools as well as manual checks
▪ Extensive Professional Services call for performing the cutover for conversion
Experience performing large (including off-hours)
scale complex migrations for ▪ Conversion process has been
numerous customers ▪ Recommend migration refined using lessons learned
approach with lowest risk and with real world, large scale
▪ Extremely well versed in least business impact conversions performed by PS
converting ScreenOS to Junos

© 2020 Juniper Networks Juniper Business Use Only 7

 FIREWALL MIGRATON SERVICES POSITIONING

Customer Discovery → Design → Lab Test → Pilot → Operational Readiness → Production Deployment → Migration
Phase:

Juniper
Pre-Sales → Demo → Onsite integrated POC → Solution Sale → Post-Sale push for Solution Adoption → Grow
Phase:
Security Assessment and Build Services Firewall Migration

PRO-CUSTOM Fixed Packages

Juniper PS Services

PRO-NS-SRX-MIG-BAS
PRO-NS-SRX-MIG-PLS
PRO-NS-SRX-MIG-ADV

PRO-NS-SRX-MIG-PRM

Custom Scoped
PRO-NS-SRX-MIG-CUS

© 2020 Juniper Networks Juniper Business Use Only 8

SERVICE OVERVIEW
NetScreen to SRX Series Services Gateway Migration Professional Service allows migration of Juniper’s NetScreen Security
Products (NS,ISG,SSG Series) to Juniper’s SRX Series Services Gateways

BASIC PLUS ADVANCE PREMIUM CUSTOM

Scope Fixed / Packaged SKU Fixed / Packaged SKU Fixed / Packaged SKU Fixed / Packaged SKU Variable / Custom SKU

Pricing Model Fixed pricing Fixed pricing Fixed pricing Fixed pricing Custom Pricing

Target Customer Small Enterprises Small/Mid Enterprises Mid/Large Ent, SPs Service Providers Enterprises and SPs

Delivery Remote Remote Remote OnPrem + Remote OnPrem + Remote

Refresh / Technology Uplift / Technology Uplift / Technology Uplift / True Migration True Migration
Migration Refresh Refresh Refresh

4 Packaged Variants Optional Path to Custom Variant

✓ Rapid Migration with Basic Firewall Capabilities (Basic, Plus & Advance)
▪ Policies, NAT, VPNs, Screens, Dynamic Routing, VSYS ✓ True Migration w/Complex Firewall Capabilities
✓ Focused Migration Deliverables ✓ Fully customized migration deliverables
▪ 1:1 Feature Parity Config Translation (Basics, Plus and Advance pkg) ▪ Re-architect / Re-design with HLD/LLD
▪ Config Review, Network Implantation Planning (NIMP) ▪ DVT, Implementation execution
▪ Technical Assistance, Post Migration Network Operations Documents ▪ Post-Migration support, Knowledge Transfer
▪ Re-architect / Re-design and Knowledge Transfer (Premium Pkg only) ▪ NSM to Junos Space Migration
▪ NSM to Junos Space Migration (Premium Pkg only)

© 2020 Juniper Networks Juniper Business Use Only 9

PRICING, QUOTE, ORDER, SKU AND CONTRACT MANAGEMENT
BASIC PLUS ADVANCE PREMIUM CUSTOM

Service NetScreen To SRX FW NetScreen To SRX FW NetScreen To SRX FW NetScreen To SRX FW NetScreen To SRX FW
Variant Migration BASIC Migration PLUS Migration ADVANCE Migration PREMIUM Migration CUSTOM

SKU PRO-NS-SRX-MIG-BAS PRO-NS-SRX-MIG-PLS PRO-NS-SRX-MIG-ADV PRO-NS-SRX-MIG-PRM PRO-NS-SRX-MIG-CUS

Global $2,700 USD $11,000 USD $24,000 USD $175,000 USD Custom Pricing
List Price
Delivery Remote Delivery Remote Delivery Remote Delivery OnPrem + Remote OnPrem + Remote
Duration 1 week 2 weeks 3 weeks 10 weeks Delivery

Contract SOW SOW SOW SOW SOW

❑ Packages are fixed price and fixed scope-of-work with a set of pre-defined FW quantity to be migrated
❑ Packages have an add-on option for incremental firewall quantity to be migrated (with fixed per firewall pricing)
❑ Custom offering available to address large volume firewall migration projects or specific customer needs with features
and deliverables outside of the pre-defined packages (custom pricing)
❑ Quoting – Direct via SAP and through CPQ
❑ Contracting – Legal approved SoW templates, deal review

© 2020 Juniper Networks Juniper Business Use Only 10

PRICING GUIDANCE FOR PACKAGES
BASIC PLUS ADVANCE PREMIUM CUSTOM
SKU PRO-NS-SRX-MIG-BAS PRO-NS-SRX-MIG-PLS PRO-NS-SRX-MIG-ADV PRO-NS-SRX-MIG-PRM PRO-NS-SRX-MIG-CUS

List Price: $2,700 List Price: $11,000 List Price: $24,000 List Price: $175,000 Custom Pricing
Global Without Discount Global Without Discount Global Without Discount Global Without Discount
40% margin 45% margin 50% margin 55% margin

Suggested Min. Qty Suggested Min. Qty Suggested Min. Qty Suggested Min. Qty
Suggested Low End SRX up to 6 FWs / Low End SRX up to 6 FWs / Low End SRX up to 6 FWs / For all SRX Ranges 1 FW
Pricing Mid Range SRX up to 3 FWs / Mid Range SRX up to 3 FWs / Mid Range SRX 3 FWs /
High End SRX 1 FW High End SRX 1 FW High End SRX 1 FW

Included - Single Base Config Included - Single Base Config

Includes NIMP, NOD for one

base config with single (up to 8
hr) Maintenance Window Tech
Assist

Incremental per FW Price Incremental per FW Price Incremental

(Same Base Config) (Same Base Config) Maintenance Window
All SRX Ranges $500 All SRX Ranges $500 (8 Hr) $6,000
Add-on (Up to Max 20 FWs) (Up to Max 20 FWs)
Pricing
Incremental VPN
(Custom Incremental per FW Price Incremental per FW Price
conversion (up to 5)
Incremental per FW Price (New Base Config) (New Base Config) Incremental per FW Price
SKU) $6,000
Low End SRX $450 Low End SRX $4,000 Low End SRX $12,000 For all SRX Ranges:
Mid-Range SRX $900 Mid-Range SRX $7,500 Mid-Range SRX $18,000 $175,000 (with VPN)
High End SRX $2,700 High End SRX $11,000 High End SRX $24,000 $125,000 (w/o VPN)

© 2020 Juniper Networks Juniper Business Use Only 11

PRICING GUIDANCE FOR CUSTOM IN-THEATER DELIVERY (FEDERAL)
CUSTOM (BASIC) CUSTOM (PLUS) CUSOM (ADVANCE) CUSTOM (PREMIUM) CUSTOM

SKU PRO-NS-SRX-MIG-CUS PRO-NS-SRX-MIG-CUS PRO-NS-SRX-MIG-CUS PRO-NS-SRX-MIG-CUS PRO-NS-SRX-MIG-CUS

Targeted List Price: Targeted List Price: Targeted List Price: Targeted List Price: Custom Pricing
$5,400 $14,000 $28,000 $175,000

40% margin 45% margin 50% margin 55% margin

Suggested Min. Qty Suggested Min. Qty Suggested Min. Qty Suggested Min. Qty
Low End SRX up to 6 FWs / Low End SRX up to 6 FWs / Low End SRX up to 6 FWs / For all SRX Ranges 1 FW
Suggested Mid Range SRX up to 3 FWs / Mid Range SRX up to 3 FWs / Mid Range SRX 3 FWs /
Pricing High End SRX 1 FW High End SRX 1 FW High End SRX 1 FW

Included - Single Base Config Included - Single Base Config

Includes NIMP, NOD for one

base config with single (up to 8
hr) Maintenance Window Tech
Assist

Incremental per FW Price Incremental per FW Price Incremental

(Same Base Config) (Same Base Config) Maintenance Window
All SRX Ranges $1000 All SRX Ranges $1000 (8 Hr) $6,000
Add-on (Up to Max 20 FWs) (Up to Max 20 FWs)
Pricing
Incremental VPN
(Custom Incremental per FW Price Incremental per FW Price
conversion (up to 5)
Incremental per FW Price (New Base Config) (New Base Config) Incremental per FW Price
SKU) $6,000
Low End SRX $900 Low End SRX $4,700 Low End SRX $14,000 For all SRX Ranges:
Mid-Range SRX $1,800 Mid-Range SRX $9,400 Mid-Range SRX $21,000 $175,000 (with VPN)
High End SRX $5,400 High End SRX $14,000 High End SRX $28,000 $125,000 (w/o VPN)

© 2020 Juniper Networks Juniper Business Use Only 12

SERVICE VARIANTS – FIREWALL FEATURE COVERAGE
BASIC PLUS ADVANCE PREMIUM CUSTOM
Policies ✔ ✔ ✔ ✔ ✔

NAT ✔ ✔ ✔ ✔ ✔

VPNs ✔ ( up to 5) ✔ (up to 10) ✔ ( up to 100) ✔

Screens ✔ ✔ ✔ ✔ ✔
HA Config ✔ ✔ ✔ ✔
Simple Dynamic Routing ✔ ✔ ✔ ✔
VSYS ✔ (Root +1 VSYS) ✔ (Root +1 VSYS) ✔
NSM to Space Migration ✔ ✔
QOS ✔
UTM ✔

IPS recommended ✔

SKY ATP+PE ✔
Remote Access VPN ✔
CGNAT ✔
Integrated FW ✔
CTP/SCTP ✔
Customized IDP ✔

© 2020 Juniper Networks Juniper Business Use Only 13

 SERVICE VARIANTS – DEILVERBALES
BASIC PLUS ADVANCE PREMIUM CUSTOM
Requirements Review Document (RRD) ✔L ✔
High Level Design (HLD) ✔R ✔
Low Level Design (LLD) ✔R ✔
File Translation ✔R ✔R ✔R ✔L ✔
Base Config Creation & Translation Verification ✔R ✔R ✔L ✔
Design Verification Testing (DVT) ✔L ✔
Network Acceptance Test Plan (NATP) ✔R ✔
Network Acceptance Test Plan Execution (NATPE) ✔L ✔
NMP (Assistance) / NIMP (Full) ✔1 R ✔R ✔
Network Implementation and Migration Plan ✔L ✔
Execution (NIMPE)
Cutover Technical Assistance / ✔2 R ✔R ✔
Post-NIMP Execution Support
NSM to Space/SD Migration Plan ✔R ✔

NSM to Space/SD Migration Execution ✔R ✔

Network Operations Doc (NOD) ✔R ✔R ✔

Knowledge Transfer Workshop (KTW) ✔R ✔

1 - NMP (Assistance only), 2 - Cutover Technical Assistance (up to 8hrs), R – Remote Deliverable , L – Local Deliverable

© 2020 Juniper Networks Juniper Business Use Only 14

 SERVICE - MIGRATION PRODUCTS

LOW END MID RANGE HIGH END

(Small Enterprise, Branch office) (Mid-Size Enterprise, Data Center) (Large DC, Service Providers)

NetScreen Security SSG-5, SSG-20, SSG-50 SSG-140, SSG-320, SSG-350, ISG-1000, ISG-2000,
System Product SSG-520, SSG-550 NS-5200, NS-5400

SRX Series SRX300, SRX550 SRX1500, SRX4100, SRX4200, SRX4600 SRX5400, SRX5600, SRX5800
Gateways .

© 2020 Juniper Networks Juniper Business Use Only 15

ADDITIONAL INFORMATION AND RESOURCE
➢ Sales Training: High Spot
➢ Internal Sales PPT: Sales Central
➢ Customer Facing PPT: Sales Central

➢ Datasheet: https://juniper.highspot.com/

➢ Direct Quote Process – Available via SAP

➢ Configurator with options – In CPQ

➢ Reach out to Services PLM Team - Ask-services-plm@juniper.net

❑ PS Engagement in AMER Theater: AMER PS Request Form

❑ PS Engagement in EMEA Theater: EMEA PS Scope based Pricing Request​ page
❑ PS Engagement in APAC Theater: Email: PS Engagement in APAC Theater

© 2020 Juniper Networks Juniper Business Use Only 16

 BACK UP SLIDES

© 2020 Juniper Networks Juniper Business Use Only 17

MIGRATION STEPS
FOR BASE, PLUS AND ADVNACE PACKAGES NOD
• Automated tool to
perform pre- and
Juniper Juniper PS Cutover Technical post-migration
(Maintenance checks, used during
Window) migration window
Assistance
• Provides clear
analysis on
migration, If/when
Automated NMP (Assistance)
needed, guides post-
Config/MOP Generator migration rollback

Translation File
Config
Verification
Convertor

• An intelligent configuration translator that delivers the desired end-

Base Configuration state configuration
Creation
• Highly Customizable and automates configuration conversion
• Harmonize Config with the Network
NetScreen configuration
File Translation
Security BU to SRX
Development

Feature Parity &

Functionality mapping

© 2020 Juniper Networks Juniper Business Use Only 18

 Post migration

MIGRATION STEPS service check

FOR PREMIER PACKAGE AND CUSTOM OPTION Migration

• Automated tool to
perform pre- and
Juniper Juniper PS post-migration
Pre migration checks, used during
service verification migration window
• Provides clear
analysis on
Testing new migration, If/when
Automated optimized
configuration needed, guides post-
Config/MOP Generator migration rollback

Base Configuration
Config Creation and Translated
Convertor File Verification

• An intelligent configuration translator that delivers the desired end-

NetScreen configuration
File Translation state configuration
to SRX • Highly Customizable and automates configuration conversion
• Harmonize Config with the Network
New Design
Existing Design
Security BU validation
Development

Feature Parity &

Functionality mapping

© 2020 Juniper Networks Juniper Business Use Only