Overview

Juniper Networks cSRX Container Firewall delivers a complete firewall solution in a container form factor, to provide next-generation firewall capabilities including application security, IP, automated life cycle, and policy management capabilities for container workload environments. The cSRX empowers security professionals to deploy and scale firewall and advanced security detection and prevention in highly dynamic container environments.

NGFW for container and Kubernetes workloads: Extend market-leading security, policies and technologies used in physical and virtual data-centers to container environments.
Easy Management through API, netconf or management Interface: Each cSRX can be managed using Netconf, Junos Space Security Director (centralized management), APIs or even through the same JUNOS CLI that is used to manage other SRX firewalls.
Easy Deployment with Kubernetes orchestration: The cSRX can be deployed like any other container in a Kubernetes environments. Deploy the cSRX as a service in Kubernetes to achieve the benefits of horizontal scaling across multiple cSRX instances.
Flexible, extensible Licensing: Available in an easy, three-tier licensing model for various security features; the cSRX can be subscribed to, for an annual, 3 year or 5 year term.
Unified policy management: Use the same central Management platform – the Junos Space Security Director, to manage the cSRX and your virtual and physical SRX platforms, wherever they be located.

Compatibility matrix

This matrix displays product versions and their claimed compatibility with Red Hat platforms, as provided by the partner through Partner Validations and the Red Hat Certifications.

Partner product version	Red Hat platform	Certification type
23.2R1	Red Hat OpenShift Container Platform 4.15	Partner Validated

Next steps

Get started with OpenShift

A container platform to build, modernize, and deploy applications at scale.

Try it

Deployment options

Resources

cSRX Datasheet cSRX Datasheet
cSRX Container Firewall Website Visit the website for more information, collateral and buying options
Building Container Security with cSRX This Day One book is guaranteed to get you up and running with the cSRX in no time
Deployment guide for cSRX on Kubernetes Deployment guide for cSRX on Kubernetes
Extending Juniper Connected Security to Containers White paper on Extending Juniper Connected Security to Containers

Certifications

Learn about Red Hat Certification and Partner Validation

Red Hat certified products are tested to meet Red Hat’s criteria and supported as defined in the Red Hat Collaborative Support Process.

Partner validated products are tested by Red Hat Partners and supported as defined in the Red Hat Third Party Component Policy.

Certification standards

This product hasn't been tested by Red Hat

	Product	Partner product version	Certification type	Level
	Red Hat OpenShift Container Platform 4.15 Architecture: x86_64 View Kbase	23.2R1	RHOCP 4 CNF	Partner Validated

FAQs

How does the cSRX secure the container workloads?

The cSRX deploys as a container, similar to any other container workload that you would be deploying in your Red Hat OpenShift environment. You will need to configure an overlay network comprised of network bridges to ensure communication between the containers and the cSRX will be a part of that overlay network. Policies will be configured on the cSRX to restrict access to those applications or workloads residing in zones that need to be protected or segmented.

Does the cSRX modify any host OS parameters?

No, the cSRX deploys as a container and does not modify any parameters of the host OS.

Can the cSRX be deployed as a Service in Kubernetes?

Yes, because the cSRX is a container, all the Kubernetes constructs available to containers are applicable to the cSRX as well.

Which CNI does the cSRX support?

The cSRX needs multiple interfaces to effectively segment and protect the network. Currently only Multus CNI allows for the creation of multiple interfaces to a single container. Therefore, the cSRX needs the Multus CNI in Kubernetes deployments.

Compatibility matrix

This matrix displays product versions and their claimed compatibility with Red Hat platforms, as provided by the partner through Partner Validations and the Red Hat Certifications.

Partner product version	Red Hat platform	Certification type
23.2R1	Red Hat OpenShift Container Platform 4.15	Partner Validated

Certifications

Learn about Red Hat Certification and Partner Validation

Certification standards

This product hasn't been tested by Red Hat

	Product	Partner product version	Certification type	Level
	Red Hat OpenShift Container Platform 4.15 Architecture: x86_64 View Kbase	23.2R1	RHOCP 4 CNF	Partner Validated

Juniper cSRX Container Firewall Partner Validated

Compatibility matrix

Next steps

Get started with OpenShift

Certifications

Get started

Platforms

Products & services

Try, buy, sell

Help

About Red Hat Ecosystem Catalog

Red Hat legal and privacy links

Red Hat legal and privacy links

Juniper cSRX Container Firewall Partner Validated

Compatibility matrix

Next steps

Get started with OpenShift

Certifications

Get started