Juniper JUNOS PUS MOBILE SECURITY SUITE User manual

DATASHEET
1
Product Description
Juniper Networks® Junos® Pulse Mobile Security Suite is a comprehensive solution that
includes smartphone security, management, and control. The offering can be sold with
Juniper Networks SA Series SSL VPN Appliances or as a standalone solution. The Mobile
Security Suite includes both a client component, Juniper Networks Junos Pulse, and the
Junos Pulse Mobile Security Gateway, which is available as a Software as a Service (SaaS)
hosted offering from Juniper. All functionality converges on the Junos Pulse user interface
and includes:
• Antivirus
• Antispam
• Personal firewall
• Loss/theft protection (anti-theft)
• Backup and restore
• Application monitoring and control
While mobile attacks are increasing rapidly and hackers are financially motivated to steal
data, identities, and intercept corporate communications, it has become crucial to protect
mobile devices such as smartphones and cell phones. The Junos Pulse Mobile Security
Suite supports most major smartphone platforms. It provides protection from viruses and
malware, physical compromise, as well as other threats for Windows Mobile®, Symbian
Series 60®, BlackBerry®, and Google Android® smartphones.
Virus protection updates automatically defend you in real time from malicious
applications that may be downloaded from various app stores or through files sent via
Multimedia Messaging Service (MMS), Short Message Service (SMS), or email. Theft and
loss protection ensure that your sensitive data is secure (and backed up centrally) should
your device be lost or stolen. Control and monitoring capabilities ensure that appropriate
device usage can be monitored and maintained at all times.
With the Junos Pulse Mobile Security Suite, you can continue to use all of your
smartphone features while receiving nonintrusive, effective protection. It is the industry’s
simplest and most comprehensive solution to secure, manage, and control a broad range
of smartphones.
Product Overview
The use of smartphones continues to
grow rapidly worldwide. Smartphones
provide the benefit of seamless access
to information—anytime, anywhere.
However, smartphones go completely
unprotected while Web browsing,
downloading applications, checking
email, conducting online banking, and
connecting to social networking sites.
They contain sensitive information
that must be protected against
viruses, malware, spam, breach, the,
and other threats. For enterprises,
while smartphones help improve
employees’ productivity, unprotected
devices can mean loss or the of
valuable, confidential data and cause
noncompliance with regulations such
as the Health Insurance Portability
and Accountability Act (HIPAA)
or Sarbanes-Oxley Act (SOX). For
consumers, threats of this nature
can mean loss or the of financial
information, credit card data, and
personal files such as photos or music
downloads. Junos Pulse Mobile Security
Suite oers enterprises and consumers
a wide range of security features to
protect various mobile devices.
JUNOS PULSE MOBILE
SECURITY SUITE

2
Architecture and Key Components
Junos Pulse Mobile Security Suite provides the industry’s most
comprehensive mobile security solution, oering the widest range
of security functionality across the broadest set of devices. For
example, Figure 1 depicts how the Junos Pulse Mobile Security
Suite would look on a Google Android phone. All features described
below are delivered by the Junos Pulse client, available for each
of the supported mobile platforms (Apple iOS, Google Android,
Windows Mobile, Nokia Symbian, and BlackBerry). The Pulse clients*
themselves are available in the following app stores of each platform
and can be downloaded by the mobile device free of charge.
• Junos Pulse for iOS: Apple App Store
• Junos Pulse for Google Android*: Google Apps Marketplace
• Junos Pulse for Nokia Symbian*: Nokia Ovi Store
• Junos Pulse for Windows Mobile*: Windows Marketplace
• Junos Pulse for BlackBerry*: BlackBerry App World
Please note that the Junos Pulse Mobile Security Suite SKUs
(shown later in the Ordering Information section) do not
include the Junos Pulse clients. The clients are available for
download only from the app stores mentioned above. The Junos
Pulse Mobile Security Suite delivers a comprehensive array
of smartphone and mobile device management and security
capabilities, including the following features.
Figure 1: Junos Pulse Mobile Security Suite on Google
Android Smartphone
Proactive Malware Protection
Viruses and malware cause unwanted billing, damage to valuable
user data, and can render smartphones unusable. The Junos Pulse
Mobile Security Suite protects mobile devices against viruses
and malware delivered via email, SMS, MMS, direct download,
Bluetooth, or infrared transmission. The Mobile Security Suite
is a unique solution that takes into account specific challenges
presented by mobile devices such as limited device memory and
limited battery capabilities. It also does not negatively impact
device or network performance. Figure 2 depicts how the antivirus
module of the Junos Pulse Mobile Security Suite would look on a
Google Android phone.
The Mobile Security Suite employs on-access scanning to monitor
the integrity of files every time they are accessed. It will protect
your smartphone from malware on Windows Mobile, Symbian,
BlackBerry, and Google Android devices by automatically
detecting malicious code infections as they attempt to infect the
operating system. In addition, it has the ability to scan secure
digital (SD) cards upon insert to prevent device infection from
malware that may have been stored in error. It will also protect
your device by scanning all data going to and from your device
to ensure that it is free from infection. It is also the only mobile
antivirus solution employing advanced heuristic detection.
Key antivirus capabilities of the Mobile Security Suite include:
• First Open Mobile Alliance (OMA) device management-
compliant antivirus functionality
• Full protection from the latest mobile threats via automatic
virus definition updates
• Real-time monitor scanning of any file received via SMS, MMS,
Bluetooth, Wi-Fi, infrared, or desktop sync
• Scans of internal memory, memory card, and/or full device on
demand
• Alerts upon detection
• Subscription-based license entitling user to automatic updates,
with seamless transfer to new devices
Figure 2: Junos Pulse Mobile Security Suite antivirus module on
Google Android Smartphone
* Junos Pulse for Google Android and Junos Pulse for BlackBerry will be available in late October 2010. Junos Pulse for Nokia Symbian will be available in late November 2010. Junos Pulse for Windows
Mobile will be available in late December 2010.

3
Personal Firewall
The personal firewall capability of the Mobile Security Suite
protects you from current and future threats by providing filtering
and blocking of TCP/IP traffic. Through a bidirectional, port, and
IP-based packet filtering option, it automatically protects the
mobile device from accessing harmful or questionable content,
preventing malicious content from being transferred to the device.
The personal firewall of the Mobile Security Suite provides
inbound and outbound traffic monitoring using network-level
packet filtering and two levels of protection: high and low. By
selecting a high level of protection, the user limits allowed ports
to the ones specified in the “whitelist,” and blocks traffic from
all other unknown ports. The low level of protection will allow
communication with all but the blacklisted ports. The firewall
can also be configured to block/accept traffic from a specific IP
or range of IP addresses, giving you ultimate control over all data
traffic on the device.
Key capabilities of the personal firewall capability in the Mobile
Security Suite include:
• Inbound and outbound traffic monitoring
• Network-level packet filtering
• Full control of alerts and logging functions
• Filtering based on a customizable whitelist and blacklist
Spam Protection
The antispam capability of the Mobile Security Suite is the premier
message and call manager for mobile devices. Enhanced call
and message filtering allow you to prevent interruptions and
disturbances, blocking voice and SMS spam. With the capability
of customizing the contacts into groups of blacklisted (blocked)
numbers, you can choose to block calls and messages from those
numbers.
The convenient auto-add feature lets you block incoming calls and
messages from rejected numbers. Upon rejecting a call, you will
be prompted with the option to add the number to the blacklist,
preventing further calls.
Key capabilities of the antispam feature in the Junos Pulse Mobile
Security Suite include:
• Blacklist and whitelist filtering
• Simple settings for message disposition (save in the inbox, save
to the spam folder, or delete)
• Option to block calls or messages or both
• Automatic addition of contacts to the blacklist
• Option to disable alerts for incoming messages
• Automatic denial for unknown or unwanted calls
Advanced Protection for Lost and Stolen Devices
(Anti-The)
Without question, the number of lost and stolen mobile devices
is staggering. The ultra-portable nature of smartphones enables
you to essentially carry your personal computer in your pocket
to sporting events, grocery stores, airports, and restaurants,
significantly increasing the chance of loss and theft.
The unique loss and theft prevention capabilities of the Junos
Pulse Mobile Security Suite enables an IT administrator to quickly
and easily pinpoint the exact location of a lost or stolen device
and have that location displayed in an online map. Users and
administrators also have the option to remotely lock a device,
remotely set off an alarm on the lost or stolen device, or wipe
a user’s personal data to ensure that if it falls into the wrong
hands, their personal and business data will not be accessed. The
personal data can be remotely backed up and easily imported into
a new device. With these capabilities, enterprise customers can
minimize the risk of loss of corporate data when their employees
lose their smartphones.
Key capabilities of loss and theft protection in the Junos Pulse
Mobile Security Suite include:
• Remote backup of personal or business data so that it is
available for immediate and future use
• Remote restore of personal or business data to any new device
regardless of operating system
• GPS location commands
• Remote GPS tracking in case of loss or theft
• Remote lock of device to make sure identity data is not
accessible
• Remote data wipe to ensure personal or business data no
longer exists on the device
• SIM change notification
• Automatic security measures taken in case of SIM change
Application Monitoring and Control
Application monitoring and control features of the Junos Pulse
Mobile Security Suite allow administrators to define strict security
policy settings for mobile devices. This includes restricting the
types of applications installed on them, and monitoring data such
as SMS, MMS, etc., that resides on them. The following actions
can be taken by administrators to bolster their security policies on
smartphone devices:
• View applications installed on mobile handsets
• Define a blacklist of applications that should not be allowed
• Monitor SMS, MMS, or email message content
• Monitor phone call log and contacts
• View photos stored on the device
These features enable enterprise customers to control the types
of applications deployed on their employees’ smartphone devices.
As a use case for service providers, these features enable parental
control services, whereby parents can control the smartphone
usage of their children. The Junos Pulse Mobile Security Suite
enables a parent to monitor their child’s device and mobile
activities via a web-based “dashboard.” Via this easy-to-use
interface, parents can view a list of all applications currently
installed on the child’s mobile device.

4
Simple, flexible client deployment
The Junos Pulse client for mobile platforms enables simple, scalable and flexible deployment of features in the Junos Pulse Mobile
Security Suite. These include the following:
• Over-the-air (OTA) license enablement and registration
• Automatic boot upon device restart
• User-friendly interface
• Full logging capability with ability to email logs for troubleshooting
Smartphones Supported with Junos Pulse Mobile Security Suite
JUNOS PULSE MOBILE
SECURITY FEATURE
APPLE IPHONE IOS 4.X
(EXACT RELEASE VERSION
IS TO BE DETERMINED)
GOOGLE ANDROID 2.0,
2.1, 2.2
WINDOWS MOBILE 6.0,
6.1, 6.5
NOKIA SYMBIAN S60 3RD,
5TH EDITIONS
BLACKBERRY 4.2 AND
BEYOND
VPN to the SA Series SSL
VPN Appliances
3Email and Web
Access only
3 3 Web Access only
Antivirus
*
3333
Firewall * 3 3 *
Antispam * 3 3 *
Monitor and Control 3333
Backup and Restore 3333
Loss and The Protection 3333
* The features of the Junos Pulse Mobile Security Suite are dependent on the capabilities and functions within the supported mobile operating systems. As capabilities and
functions become available, the list of features within the Junos Pulse Mobile Security Suite on specific mobile operating platforms will likely increase.
Junos Pulse Mobile Security Gateway
Junos Pulse introduces the Mobile Security Gateway—an easy-
to-use management console for managing and controlling all of
the aforementioned features on mobile devices. The Junos Pulse
Mobile Security Gateway can be deployed by enterprises and
service providers as a Software as a Service (SaaS) hosted option
for easy deployment without the need for an onsite server, and
wireless setup and maintenance.
The SaaS deployment allows IT administrators to manage
mobile security and remote management policies by logging into
a web-based console using any SSL-enabled Web browser. The
management console is hosted on Juniper’s secure data center,
with secure anytime access enabled for IT administrators to
manage policies.
Key capabilities of the Junos Pulse Mobile Security Gateway include:
• Detailed security policies for mobile devices
• Protection of mobile devices with antivirus and antispam
• Detailed security reports on infections, updates, firewall rules,
and the latest threats
• Quick list and removal of unwanted third-party applications
installed across the entire mobile device population
• Remote tracking, lock, wipe, backup, and restore of lost or
stolen devices
• Device antispam to control unwanted text and voice
communications
• Device firewall
• Document compliance to HIPAA, SOX, GLBA
(Gramm-Leach-Bliley Act), etc.
Host Checker Enhancement on the SA Series
SSL VPN Appliances
Host Checker is a key feature on the SA Series SSL VPN
Appliances. Host Checker verifies that an endpoint device meets
corporate security policy requirements before granting the
device access into the network. In addition, Host Checker can
remediate the device and quarantine users when necessary if
security policies are not met. In essence, Host Checker protects
network resources from being infected by devices that are not in
compliance with corporate security policies.
With the introduction of the Junos Pulse Mobile Security Suite,
a new enhancement has been added to Host Checker. If Host
Checker is enabled on the SA Series, Junos Pulse will ensure that
the Mobile Security Suite is enabled and active on the mobile
device. If the suite is not enabled, the mobile device will not
be allowed to authenticate to the SA Series for access into the
network. This Host Checker feature on the SA Series will make
sure that the device is protected by the Mobile Security Suite prior
to being allowed within the enterprise to ensure greater control of
mobile devices that are granted access into the corporate network.
For more information about the SA Series SSL VPN Appliances,
please visit www.juniper.net/us/en/products-services/security/
sa-series.

5
Juniper Networks Services and Support
Juniper Networks is the leader in performance-enabling services
and support, which are designed to accelerate, extend, and
optimize your high-performance network. Our services allow
you to bring revenue-generating capabilities online faster so
you can realize bigger productivity gains and faster rollouts of
new business models and ventures. At the same time, Juniper
Networks ensures operational excellence by optimizing your
network to maintain required levels of performance, reliability, and
availability. For more details, please visit www.juniper.net/us/en/
products-services.
Ordering Information
Each SKU includes the following:
• License to deploy the Junos Pulse client on as many devices as
indicated in the SKU
• Subscription license for the duration indicated in the SKU
• Service and support for the duration indicated in the SKU
• Mobile Security Gateway as a Hosted (SaaS) deployment
MODEL NUMBER DESCRIPTION
ACCESS-MSS-50U-1YR Mobile Security Suite (MSS) 1 year subscription
for 50 users
ACCESS-MSS-100U-1YR Mobile Security Suite (MSS) 1 year subscription
for 100 users
ACCESS-MSS-250U-1YR Mobile Security Suite (MSS) 1 year subscription
for 250 users
ACCESS-MSS-500U-1YR Mobile Security Suite (MSS) 1 year subscription
for 500 users
MODEL NUMBER DESCRIPTION
ACCESS-MSS-1000U-1YR Mobile Security Suite (MSS) 1 year subscription
for 1,000 users
ACCESS-MSS-2000U-1YR Mobile Security Suite (MSS) 1 year subscription
for 2,000 users
ACCESS-MSS-2500U-1YR Mobile Security Suite (MSS) 1 year subscription
for 2,500 users
ACCESS-MSS-5000U-1YR Mobile Security Suite (MSS) 1 year subscription
for 5,000 users
ACCESS-MSS-7500U-1YR Mobile Security Suite (MSS) 1 year subscription
for 7,500 users
ACCESS-MSS-10KU-1YR Mobile Security Suite (MSS) 1 year subscription
for 10,000 users
ACCESS-MSS-15KU-1YR Mobile Security Suite (MSS) 1 year subscription
for 15,000 users
ACCESS-MSS-20KU-1YR Mobile Security Suite (MSS) 1 year subscription
for 20,000 users
ACCESS-MSS-25KU-1YR Mobile Security Suite (MSS) 1 year subscription
for 25,000 users
ACCESS-MSS-50U-2YR Mobile Security Suite (MSS) 2 year subscription
for 50 users
ACCESS-MSS-100U-2YR Mobile Security Suite (MSS) 2 year subscription
for 100 users
ACCESS-MSS-250U-2YR Mobile Security Suite (MSS) 2 year subscription
for 250 users
ACCESS-MSS-500U-2YR Mobile Security Suite (MSS) 2 year subscription
for 500 users
ACCESS-MSS-1000U-2YR Mobile Security Suite (MSS) 2 year subscription
for 1,000 users
ACCESS-MSS-2000U-2YR Mobile Security Suite (MSS) 2 year subscription
for 2,000 users
Features and Benefits
Junos Pulse Mobile Security Suite offers the broadest platform coverage with the most comprehensive range of security applications,
including antivirus, antispam, firewall, parental controls, and anti-theft and identity protection. Below are some of the significant features
and benefits of the Mobile Security Suite.
Table 1: Features and Benefits
FEATURE BENEFIT
Automatic virus and spyware definition
updates
Provides full real-time protection from whatever latest smartphone threats can occur
Scanning of files received over all network
connections
Protects the smartphone from potential malware that can infiltrate the device from multiple sources,
including via SMS, MMS, Bluetooth, Wi-Fi, 2.5G, 3G, 4G, infrared or desktop sync
Inbound and outbound trac monitoring Protects mobile device from accessing harmful or questionable content and prevents malicious content
from being transferred to the device
Blacklist and whitelist filtering Blocks calls and SMS spam (blacklisted) and allows acceptable calls from whitelisted contacts
Loss/the protection Mitigates risks of losing corporate and personal data on a lost or stolen smartphone by remotely locating
the device, remotely locking it, setting o an alarm on it, or even remotely wiping the device contents
Remote backup/restore Allows remote backups of personal and business data and easy imports into a new device, if needed
SMS, MMS, and email message content
monitoring
Enables parents to view all messages sent and received
Voice monitoring Provides call logs of all voice conversations conducted on the device
Picture monitoring Enables viewing of all photos stored on the device

6
1000328-002-EN Oct 2010
Copyright 2010 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Junos,
NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other
countries. All other trademarks, service marks, registered marks, or registered service marks are the property of
their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper
Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
EMEA Headquarters
Juniper Networks Ireland
Airside Business Park
Swords, County Dublin, Ireland
Phone: [phone]
EMEA Sales: 00800.4586.4737
Fax: [phone]
APAC Headquarters
Juniper Networks (Hong Kong)
26/F, Cityplaza One
1111 King’s Road
Taikoo Shing, Hong Kong
Phone: [phone]
Fax: [phone]
Corporate and Sales Headquarters
Juniper Networks, Inc.
1194 North Mathilda Avenue
Sunnyvale, CA 94089 USA
Phone: 888.JUNIPER (888.586.4737)
or 408.745.2000
Fax: [phone]
www.juniper.net
Printed on recycled paper
To purchase Juniper Networks solutions,
please contact your Juniper Networks
representative at 1-866-298-6428 or
authorized reseller.
MODEL NUMBER DESCRIPTION
ACCESS-MSS-2500U-2YR Mobile Security Suite (MSS) 2 year subscription
for 2,500 users
ACCESS-MSS-5000U-2YR Mobile Security Suite (MSS) 2 year subscription
for 5,000 users
ACCESS-MSS-7500U-2YR Mobile Security Suite (MSS) 2 year subscription
for 7,500 users
ACCESS-MSS-10KU-2YR Mobile Security Suite (MSS) 2 year subscription
for 10,000 users
ACCESS-MSS-15KU-2YR Mobile Security Suite (MSS) 2 year subscription
for 15,000 users
ACCESS-MSS-20KU-2YR Mobile Security Suite (MSS) 2 year subscription
for 20,000 users
ACCESS-MSS-25KU-2YR Mobile Security Suite (MSS) 2 year subscription
for 25,000 users
ACCESS-MSS-50U-3YR Mobile Security Suite (MSS) 3 year subscription
for 50 users
ACCESS-MSS-100U-3YR Mobile Security Suite (MSS) 3 year subscription
for 100 users
ACCESS-MSS-250U-3YR Mobile Security Suite (MSS) 3 year subscription
for 250 users
ACCESS-MSS-500U-3YR Mobile Security Suite (MSS) 3 year subscription
for 500 users
ACCESS-MSS-1000U-3YR Mobile Security Suite (MSS) 3 year subscription
for 1,000 users
ACCESS-MSS-2000U-3YR Mobile Security Suite (MSS) 3 year subscription
for 2,000 users
ACCESS-MSS-2500U-3YR Mobile Security Suite (MSS) 3 year subscription
for 2,500 users
ACCESS-MSS-5000U-3YR Mobile Security Suite (MSS) 3 year subscription
for 5,000 users
ACCESS-MSS-7500U-3YR Mobile Security Suite (MSS) 3 year subscription
for 7,500 users
ACCESS-MSS-10KU-3YR Mobile Security Suite (MSS) 3 year subscription
for 10,000 users
ACCESS-MSS-15KU-3YR Mobile Security Suite (MSS) 3 year subscription
for 15,000 users
ACCESS-MSS-20KU-3YR Mobile Security Suite (MSS) 3 year subscription
for 20,000 users
ACCESS-MSS-25KU-3YR Mobile Security Suite (MSS) 3 year subscription
for 25,000 users
About Juniper Networks
Juniper Networks, Inc. is the leader in high-performance
networking. Juniper offers a high-performance network
infrastructure that creates a responsive and trusted environment
for accelerating the deployment of services and applications
over a single network. This fuels high-performance businesses.
Additional information can be found at www.juniper.net.
Ordering Information (continued)