Juniper Identity Management Service Datasheet

User identity is a core requirement of next-generation firewalls, enabling administrators to create security policies that address business rather than networking needs. This creates a powerful mechanism for defining, managing, and refining security policies by creating firewall rules defined by user identity rather than an IP address.

Juniper^® Identity Management Service (JIMS) is a Windows-based application that links IP addresses to specific user identities, providing visibility into and control over network activity per user. JIMS integrates directly with Active Directory servers to verify user-to-IP address relationships and determine specific role and group assignments. This enables SRX Series Services Gateways to manage security policy decisions that directly associate application activity with user roles. Based on this information, the SRX Series firewall either permits or denies users access to applications and data based on detailed security policies.

Juniper Identity Management Service has a highly scalable user identity management system, supporting 20 domain controllers, which can scale up to 150 and support more than 256,000 users. Juniper Identity Management Services also tracks and prevents unauthorized users from accessing corporate resources before a data breach occurs.

On Juniper Networks^® SRX Series Services Gateways, this capability is called a “user firewall.” The SRX Series device will associate network traffic with specific user identities defined by Active Directory. The SRX Series firewall typically performs a local lookup of the user-id associated with a specific IP address.

The Juniper^® Identity Management Service for Windows maintains a large database of active users and their associated IP addresses, enabling an SRX Series firewall to identify thousands of users in a large distributed enterprise rapidly. The SRX Series device queries the JIMS server, obtains the proper user-id relationship, and enforces the appropriate security policy. Once applications, users, and groups are identified, JIMS provides full visibility and control over the security infrastructure.