Juniper SKY ATP+Pulse Policy Secure along with Network/Network Security Director Advice needed.

Hey guys,

I need some advice before I write up my RFP and contact Juniper etc, currently we have no DMZ a lot of compliance issues for a Finance network (currently we are in the process of being audited so now is the time for me to get this approved) We also have a lot of malware/attacks and vulnerabilities.

So my question is Juniper sky able to detect encrypted malware similar to Cisco Stealthwatch/Palo Alto wildfire?

Question 2. Since 70% of our network is Juniper ex2200/ex2300 would it be a good idea to just go with Juniper overall and be done? We have around 4000+ users (both insurance and banking)

Note our Core is ex Juniper 4300

Question 3. As I`m trying to get our own Security Operation Centre any ideas on what to add to the RFP for this section?

Question 4. As I`m trying to get Pulse policy secure integrated into our network would it be possible to have wired 802.1x tied back to active directory without needing to edit each user PC 802.1x (this would be hard as it`s 5000+ users)

​

Question 5. With Pluse policy secure with 802.1x how do you fine it works compared to Cisco ISE?

Question 6. Does network director allow me to configure Juniper routing/switching without needed CLI or the on-box GUI?

Lastly anyone know how much the Pluse/Security/Network Director along with Sky ATP would cost for a gold panther or in General?

Thanks ill get consultants but it`s useful if i get feedback from the experts here as i`m a Cisco guy that`s now in a Juniper environment.