With the advent of virtual private networks (VPNs), companies began to face the challenge of offering valuable business assets to remote and mobile users in the extended enterprise. Juniper Networks solved this problem with the award-winning Secure Access SSL VPN, which effectively binds remote user identity with endpoint assessment for dynamic access privilege management. As access has become more ubiquitous, however, the balancing act between the need for access to resources and the ability to secure them has grown past the extended enterprise to other key network deployments including the remote office/distributed enterprise, the server front end, WAN access, and the campus network.Enterprise users, business partners or guests with unmanaged or ill managed devices may become unknowingly infected when surfing the Internet or working remotely, then bring those infected devices directly into the network. Users accessing the WAN from within the LAN without any access controls can open the enterprise to a host of threats. Meanwhile the contents of vulnerable servers or those in the data center are becoming simultaneously more accessible and more mission-critical. Those accessing these servers from an inadequately protected endpoint can pose a risk and defeat regulatory compliance. Enterprises need a solution that ties together all aspects of the user's identity, device, and network, and can uniformly enforce policy throughout these diverse groups, many of which they do not control.Juniper Networks solves the problem of access control with the Infranet Controller. These purposebuilt, hardened appliances leverage Juniper's market-leading Secure Access SSL VPN policy control engine, which seamlessly integrates with the enterprise's existing AAA/identity and access management infrastructure. The appliance itself supports multi unit clustering and failover capabilities for optimal scalability and reliability, with operational convenience. Endpoint security state is assessed using the Infranet Agent, a lightweight agent that is dynamically downloaded from the Controller when a user first logs in.The Infranet Controller 6000 is designed for large enterprises, with the capabilities to handle tens of thousands of concurrent endpoints. The IC 6000 has a number of high availability features, including a hot swappable power supply that can be field upgraded, as well as a field-upgradeable hard disk. The IC 6000 can be deployed in multi unit clusters, to increase performance and provide additional scalability.