China Mobile to Deploy Network Access Control with Juniper Networks.

Infranet Controller to Deliver End-to-End, Granular Network Protection

SUNNYVALE, Calif. -- Juniper Networks, Inc. (Nasdaq:JNPR) today announced that China Mobile, one of China's leading mobile services providers, will later this year deploy Juniper Networks Infranet Controller (IC) 4000 appliances to secure access to its corporate networks. The IC 4000 combines identity-based policy and endpoint intelligence to provide real-time visibility and policy control for China Mobile's network regardless of endpoint type, location or status.

"The IC 4000 appliances will secure China Mobile's entire network infrastructure, including the corporate LAN and groupware applications for billing, operations, e-mail and file sharing used by staff and business partners," said Eric Yu, Juniper's vice president of Greater China. "The appliances simplify the rollout of a comprehensive access system with detailed authentication, authorization and auditing (AAA) capability to a large number of users with easy manageability. The Infranet Controller also provides tools to help ensure compliance with Sarbanes-Oxley security requirements, which is critical to China Mobile's public listing on the New York Stock Exchange."

Juniper Networks' Infranet Controller appliances help to control access, prevent threats, ensure compliance, and deliver real-time network services. They offer endpoint and identity-based controls, and support both client-host and network-based enforcement of dynamically configured firewall and IPSec policies. The Infranet Controller obviates the need for client pre-installation with the ability to dynamically download the Infranet Agent if required (an agentless access method is also possible, for situations such as guest device usage), which assesses the endpoint's security state and collects user identity information. This information is relayed back to the Infranet Controller which seamlessly integrates security state information with the enterprise's existing AAA infrastructure to create a role-based policy for the session. These policy decisions can be enforced at a very granular level both by the client host and throughout the network by China Mobile's existing array of Juniper Networks firewall/VPN appliances, which are designed to communicate with the Infranet Controller and perform computationally intensive security functions without compromising throughput. Unique to the Infranet Controller is its ability to establish an encrypted tunnel session between the user device and the Juniper Networks firewall/VPN appliance to secure user traffic, providing additional protection against man-in-the-middle attacks. The endpoint security state is regularly checked throughout the session to ensure that the device remains compliant. If the endpoint security state changes, the information is relayed to the Infranet Controller, and the user's roles and resources access can change.

"Organizational networks must evolve along with today's growth in user and device diversity," said Simon Newstead, Juniper Networks' emerging technologies director for Asia Pacific. "Juniper's network access control solutions allow companies such as China Mobile to accommodate a wide range of users and endpoint devices, allowing access to business critical resources in a timely and reliable manner."

About Juniper Networks, Inc.

Juniper Networks develops purpose-built, high performance IP platforms that enable customers to support a wide variety of services and applications at scale. Service providers, enterprises, governments and research and education institutions rely on Juniper to deliver a portfolio of proven networking, security and application acceleration solutions that solve highly complex, fast-changing problems in the world's most demanding networks. Additional information can be found at www.juniper.net.

Juniper Networks and the Juniper Networks logo are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners.