JNCIE #16

Hi All,

I got something nice in my post yesterday.




It always fun to get something like this.

Juniper EMEA partner of the year

Hi all,

I am very proud to announce that Securelink won the "EMEA partner of the year" for Juniper Networks.

The last 2 years we won the "Juniper Partner of the Year for Northern Europe"

Greetz,
Frac

Redundante VPN tunnels

I made a other movie explaining how redundante vpn's work on juniper firewalls.

hope you enjoy it.

Movie about Vrouters juniper firewall

Hi All,

I made some movies explaining some features of juniper firewalls. The first one will explain what you can do with "Vrouters" on juniper firewalls. Hope you understand it a bit more after this movie.

Speed Ahead

Hey all,

Probably you saw or heard the news that juniper has build (Again) the fastest firewall of the world.

This with the SRX5600 and SRX5800. (60 Gbps fw and 15 Gbps IDP // 120 Gbps fw and 30 Gbps IDP)

If you want to know more about these monsters, look at:





GreetZ,
Frac

Juniper Networks WXC Project

Hey all,

sorry that i didn't post a lot the last month, but i was traveling for work and had some holiday.

Some post ago i talked about a project with WXC, now i want to show you some figures about the preformance of these devices in real network.

This is from a office to hq in the same country (so no latency problems).









This image clearly show that they don't use object caching, but Molecular Sequence Reduction™ (MSR™) compression and Network Sequence Caching technologies. the first one is in memory, the second on harddisks (MSR can be done by WX, but only NSC can be done by WXC)

why do i say you clearly see it doesn't use object caching? Because when you see the image you see that at 10/07/08 someone is asking a file with a size of +/- 4.5 gig and is compressed by almost 95% (so out of cache), this can also be done by object caching, BUT then someone needs to ask the same file before (which will need to pass the line 1 time compleetly). This is not the case here (you see clearly see in the image that never before there has been a request for a file larger then 500MB.).

Some other figures:

Compression Summary

Peak Data Compression	98,00%
Total Data Compression	86,10%
Total Bytes Into Compression	17,7 GB
Total Bytes Compressed	15,3 GB
Total Bytes Out of Compression	2,5 GB
Effective WAN Capacity	7,20 X

Wow, isn't this nice ! this means that from the 17,7 GB that is asked to pass the line only 2,5 GB Really crossed the line. and i can even say that from that 2,5 GB only 1.4 GB needed to pass the line, because 1.1 GB was bypassed because of license issues! (see below)

Passthrough Data
Category Bytes Packets
No Remote WX 79.253.312
By Filter Rule 675.185.052
Overflow 68.746.046
No Local Reducer 8.299
Non-IP 210.496
License Violation 1.135.001.661

But hey which traffic includes this figures?



Now you have a idea about which traffic it is. OK, i need to be clear about one thing, this is the best figure i have of all my sites :). BUT, still it is real traffic.

Comparing WAN Accelleration Products (Juniper WXC vs Riverbed vs Bluecoat)

Hey All,

For some weeks now i am busy with a project that includes Juniper Firewalls (with VPN's), Bluecoat (WAN ACC), Juniper WXC (WAN ACC), Juniper NSM (Management station), Juniper CMS (WAN Management station).

The Firewall/VPN part was difficult, because at HQ they had 2 ISP, but also at the remote side they had 2 ISP. The customer asked full redundancy (so we needed to create 4 VPN tunnel from remote to HQ). This i did before so wasn't to hard! (just play around with Vrouters and everything is up and running).

The real hard part was which WAN Accellerator will they take! So the customer start testing together with me.

Products we tested:

Bluecoat
Juniper WXC
Riverbed

We provider the tests for Bluecoat and Juniper, After these test we saw that on a satelite link bluecoat wasn't doing well (especially when using http!)

Personal i had the feeling that bluecoats proxy kicked in here and didn't do alot of WAN Accell. We also called bluecoat and they came over to do some tweaking, and saw that the customer his webpages wheren't cacheable (and this is the reason it didn't work that well)

After the bluecoat test, they tested Riverbed (which wasn't that bad, and better then Bluecoat).
The last test we came again with Juniper WXC and it seems that this was the fastes solution.

So because of the outstanding Juniper FW/VPN concept (vrouter and routing based vpn's) and the good performance of Juniper WXC, the customer choosed us to build there international Network.

JNCIS-ER (Juniper Networks Certified Internet Specialist)

Hi All,

So we did the JNCIS-ER exams today, and ...... YES we passed again.

This was the first exam I was afraid of, all this because I didn't have real life practical experience. (only in a lab).

But the score was fantastic (96%)

Now i will prepare myself for the JNCIE-ER exam (this will take some time, because i need to do some other exams also (To keep the company there Partner level: JNCIS-FWV, all the Sales and Presales exams (JNSS/JNSA for all products).

Will keep you all up to date!

Preparing for JNCIS-ER

Hi All,

So i passed the first Certification for the Enterprise Routing Track of juniper. The next step is to get the JNCIS-ER certification so i can do the JNCIE-ER Lab exams.

Because i passed the JNCIA-ER, i got a extra Free Voucher. For this exam i will study the Advanced Juniper Networks Routing in the Enterprise student courseware and lab guides.

Today i booked the exam (will be 28/09/07 at 11:00 AM)

JNCIA-ER (Juniper Networks Certified Internet Associate)

Hey all,

Today i toked my JNCIA-ER exames!!

And i passed, so i am one step closer to the JNCIE-ER (which is one of my goals).

welcome to Securelink

1 may 2007, i left Telindus (Telindus) and joined Securelink. They are a small company specialist in juniper products (WX/WXC/FW/VPN/SSL/IDP/Switching/Routing), Nortel, Bluecoat, Ironport, Trapeze, Imprivata, etc.

My daily tasks are making designs, implementation, support, but also technical sales support (often called Pre-sales). Beside that i also coordinate the technical people and there projects.

My Life At Work

Competence Domain Captain Secure Converged Networks

At this stage Belgacom bought Telindus, and after some months there where some things that where changing...

Once again a headhunter contacted me for a job at JUNIPER (which has bought netscreen), i thougth my old dream would maybe come out now...
But once again, they stopped interviewing me at last stage (meeting with person of juniper) when juniper saw i was working for Telindus.

Then a litle company called Securelink asked a friend of mine if he wanted to join them. (This friend was Tim Carlens).They are a company specialised in all the Juniper product, bluecoat, nortel, etc.

He also asked if they needed someone else to. this was the case, so they talked to me.

Couple of months later we both joined Securelink.

Technical Security Consultant

Well i think Telindus was sure i wasn't a youngster anymore and decided i could leave the Junior title.

Because Security group was getting bigger, with alot of new people starting (new people from school), they needed someone that could train and guide thess young people. At this time there where 3 big groups

- Application and System security
- Emerging Technoligies
- Secure Converged Network

They wanted a person for each group, that would be technical trained of that group, define the futher of this group and decide what will be important.

I was intrested to pick up that task for the last group. But, i wasn't the only one (15 candidates). After some interviews, they decided i was the best person for this task and became...

Interview with Headhunter (For Netscreen)

BUT, BUT, BUT, my succes was also my pain .... :(, I was loving this product more and more! And my new dream was to work for this company. Then the real pain started ..., Because Telindus was a Big partner of Netscreen. After some interviews via Headhunters, they always needed to stop the interview because i was working for Telindus....

Started at Telindus (System Engineer)

After the 6 months of training (basic network training (See my CV for which courses i had)) i started at the Switching and Routing section of Telindus. Then i decided i was gona study the Cisco stuff (strange isn't it :), i choosed to work for Telindus instead of Cisco, but i still wanted to know there products))

After 7 months i finished my CCNP (while working).

In this periode, Security was getting my attention more and more, so i decided for myself this was the way to go. Security at Telindus was just started up (5 persons), i did some more studing and passed CCNA (Checkpoint), NSA (Nokia) which where the products they did most.

Then there was a litle firewall company who called themself "Netscreen", who only had 3 model ns5, ns10 and ns100. There Checkpoint and Cisco Pix where the most used firewalls at Telindus, this netscreen device was new, i thought i give it a try.

Then things went fast! I was surprised by the box and believed that this would become very important firewall in the market. I followed there courses and did the exams: Passed NCSA and NCSP.

Product Captain Netscreen

After some time i became responseble for Netscreen product within Telindus, this is when i gave myself the task to make it product number 1 at telindus!

After 2-3 Years, We (Me and my close buddy "Tim Carlens") succided with this plan .... Netscreen is product number one at Telindus.

First Job

When i finished school i wanted to know more about Networks. Because of this i have send a letter to 2 companies.

One of them was Cisco. They called me up and did a interview via my mobile phone, once for a plain interview and one time for a technical interview. After some hours they called me back to tell me i was in, and could come to there office is Belgium (Diegem).

But, i also had send a letter to Telindus, which is a company that does designs, installations, etc of a lot of products (Cisco, Checkpoint, Nortel, Juniper, Bluecoat, etc). Before the call of Cisco i went already for one interview to telindus, and they wanted me be a part of a group of people who would get 6 months of training.

The day after Cisco told me on the phone that i could work for them, i had a 2 interview with Telindus, which was technical. After this interview, someone from HR showed me the training plan (6 months) and what they would pay me and which car i would get. Me just finishing school, this was like a dream (new car, 6 months training and after this the best people could choose what they wanted to do)

So i couldn't resist this offer.

I called Cisco and explained that i wasn't gona join them, because i joined Telindus.