ronutz
← Alle leverandører

Vendor lineage

NetScreen and Juniper Networks

One firewall company whose alumni went on to found or shape most of the others.

NetScreen was founded in 1996 by Yan Ke, Ken Xie and Feng Deng, on the argument that firewalling should be done in silicon rather than on a general-purpose processor. Juniper Networks, founded in 1996 by Pradeep Sindhu out of Xerox PARC, bought it in 2004 for roughly $4B in stock - and the more interesting story is who left.

The ASIC argument was the founding one. Software firewalls of the mid-1990s ran on commodity CPUs and slowed down as rules accumulated, so NetScreen built purpose-designed silicon and sold predictable throughput. That is the same argument every hardware security vendor has made since, and NetScreen made it first at scale.

Ken Xie left in 2000 and founded Fortinet with his brother Michael. Fortinet appears on this site as a vendor whose training is delivered by its author.

NetScreen bought OneSecure in 2002, which had been founded by Nir Zuk - one of Check Point's first employees. Zuk stayed through the Juniper acquisition, left in 2005, and founded Palo Alto Networks, which overtook Check Point in firewall revenue by 2014.

Changming Liu, also from NetScreen, co-founded Aerohive, which Extreme Networks acquired in 2019.

So a single 1996 startup seeded Fortinet, Palo Alto Networks and part of Extreme, and absorbed a company founded by an early Check Point employee on the way. Four of the eight vendors this site teaches trace some part of themselves to that one building.

Juniper itself was the other half of this chapter. Founded to build carrier routers that could survive internet-scale traffic, it made JUNOS - one operating system across the line, with a configuration model that committed atomically or not at all - and spent two decades as the credible alternative to Cisco in service provider networks. Its SSL VPN business was later carved out and sold, becoming Pulse Secure, which is a separate chapter here and ended inside Ivanti.

Founding stories

1996

Juniper Networks

Sunnyvale, California · Founders: Pradeep Sindhu, Dennis Ferguson, Bjorn Liencres

After eleven years at Xerox PARC's Computer Science Lab, Pradeep Sindhu took a 1995 leave, went on vacation, and came back with a company: routers built like computers-for-packets, with custom silicon separating forwarding from control, aimed at the Internet core Cisco held with over 90 percent share. Incorporated February 6, 1996 with Dennis Ferguson (ex-MCI) and Bjorn Liencres (ex-Sun); Kleiner Perkins' Vinod Khosla had spent six months of weekly meetings shaping the idea. Scott Kriens - a StrataCom veteran - became CEO at month seven while Sindhu turned CTO, and the 1997 funding round told the industry everything: four of the five largest telecom equipment makers - Siemens, Ericsson, Nortel, and 3Com - bought in.

1997

NetScreen Technologies

Sunnyvale, California · Founders: Yan Ke, Ken Xie, Feng Deng

Three Tsinghua University alumni built the security half of this page's story. Ken Xie - Tsinghua and Stanford EE - had already built the first ASIC-based firewall/VPN appliance in his Palo Alto garage in 1996; NetScreen incorporated in October 1997 to turn silicon-speed security into a company, and its NetScreen-1000 became the first gigabit-speed firewall. Robert Thomas arrived from Sun as CEO in 1998; Xie stayed CTO until 2000, when he left to found Fortinet with his brother Michael - FortiGate shipped in May 2002. Revenue ran $5.9 million to $245.3 million in four years, with IDC ranking NetScreen the number-one firewall vendor in Japan. (Incorporated October 1997 per the company's longtime counsel; the garage prototype and some histories date the venture to 1996.)

The timeline

  1. Juniper incorporates; IBM fabs the silicon

    February 6, 1996: Sindhu's clean-sheet core router company forms on $2 million of seed capital. By July, IBM is signed to manufacture Juniper's custom ASICs - the packet-forwarding engines that are the whole bet.

  2. The customers become investors; JUNOS ships

    A $40 million strategic round brings in Siemens, Ericsson, Nortel, and 3Com - four of the five largest telecom equipment makers - plus Qwest and AT&T money. In December, JUNOS ships: the industry's first operating system designed specifically for Internet backbone routing. The same fall, NetScreen incorporates around Xie's garage-built ASIC firewall.

  3. The M40 lands

    September 1998: the M40 ships - 40 million packets per second, control plane separated from a silicon forwarding plane, roughly ten times the throughput of the software-based competition, against Cisco's 90-plus percent core share. First-quarter revenue: $3.8 million.

  4. The IPO of the era

    June 25, 1999: Juniper prices at $34 and closes its first day at $99, raising $63 million. Revenue passes $100 million with the first profitable quarter; fifty carriers run the M40.

  5. 37 percent of the core; NetScreen goes public

    Juniper's share of core routing reaches 37 percent - the duopoly is real. In December, NetScreen IPOs on NASDAQ (NSCN) into the narrow post-9/11 window, one of the few security debuts of the downturn.

  6. NetScreen buys its future rivals' founders

    OneSecure, for $45 million in stock, brings in-line intrusion prevention - and its co-founders: Nir Zuk, one of Check Point's earliest employees, becomes NetScreen's CTO; Rakesh Loonkar later co-founds Trusteer. In 2003, Neoteris adds SSL VPN for roughly $245 million in stock plus $20 million cash.

    OneSecure reported at $45M (some accounts $40M); Neoteris terms per EE Times, Oct 2003.

  7. Juniper pays $4 billion for NetScreen

    Announced February 9, 2004 - 1.404 Juniper shares per NetScreen share, about $4 billion in stock - and completed April 16. Juniper gets ScreenOS, the ASIC security franchise, and Japan's top firewall vendor; the lineage becomes the SSG series and then the SRX.

    SEC Form 425 filings; completion per Juniper's April 16, 2004 release.

  8. The NetScreen mafia disperses

    Nir Zuk leaves Juniper to found Palo Alto Networks; Yan Ke and Feng Deng leave to start Northern Light Venture Capital; Ken Xie's Fortinet is already four years old. One Sunnyvale startup has now seeded three of security's defining institutions.

  9. The enterprise push - and my on-rampMy chapter

    Juniper ships its first Ethernet switch, the EX 4200, and launches the SRX services gateways; Kriens becomes chairman and Microsoft's Kevin Johnson takes the CEO chair. The MX edge routers (2006) - built by a team led by Kumar and Apurva Mehta, later of Versa - anchor the portfolio I represent when he joins Juniper in Brazil in 2009, through 2010.

  10. Pulse departs; employee #32 takes over

    The SSL VPN line descended from Neoteris is spun off to private equity for $250 million as Pulse Secure. Rami Rahim - Juniper employee number 32 - becomes CEO.

  11. The ScreenOS disclosure

    December 2015: Juniper announces it found unauthorized code in ScreenOS, present since 2012 - a root-access backdoor and an altered Dual_EC_DRBG constant enabling passive decryption. One of the most studied supply-chain incidents in security history.

  12. Mist: the AI turn

    Closed April 1, 2019 - announced at $405 million ($359.2 million net per the 10-Q) - Mist's AI-driven wireless becomes the center of Juniper's enterprise story and, later, the asset the regulators care most about.

    R1 canon: Juniper 10-Q.

  13. Into HPE

    Announced January 9, 2024 at $40 per share (~$14 billion); sued by the DOJ on January 30, 2025; settled June 28 - HPE divests Instant On and licenses Mist's AIOps source code, with the DOJ noting HPE plus Cisco hold over 70 percent of US enterprise networking - and closed July 2, 2025 at roughly $13.4 billion in cash per HPE's 10-K. Rami Rahim becomes president of HPE Networking; Gartner's 2025 wired-and-wireless Magic Quadrant still lists Juniper as a Leader.

Flagship products and solutions

  • JunosThe industry's first backbone-specific routing OS (December 1997) - and Juniper's one-OS discipline across routing, switching, and security for two decades.
  • M-series and T-seriesThe core routers that broke the monopoly: the M40's silicon forwarding plane, then the M160, T-series, and the multichassis core that carried the 2000s Internet.
  • MX edge routersThe 2006 edge platform - engineering led by Kumar and Apurva Mehta, later founders of Versa - that became Juniper's workhorse franchise.
  • ScreenOS, SSG, and SRXThe NetScreen lineage: ASIC firewalls and ScreenOS, evolved into the SSG series and then the SRX services gateways - the security line of my Juniper years.
  • EX switching and Mist AIThe 2008 enterprise switch entry and the 2019 Mist acquisition - the AI-driven wireless and wired portfolio that HPE valued enough to buy the whole company, and the DOJ valued enough to force open.

Key innovations

  • Separating control from forwardingThe M40's architecture - a silicon data plane under a software control plane - became how every serious router has been built since.
  • Customers as investorsThe 1997 round made four of the five biggest telecom equipment makers shareholders - distribution, validation, and capital in one move.
  • Security at wire speedXie's garage ASIC and the NetScreen-1000 - the first gigabit firewall - proved security did not have to be the network's bottleneck.
  • The NetScreen mafiaOne company's alumni founded Fortinet (Ken and Michael Xie), Palo Alto Networks (Nir Zuk), and Northern Light Venture Capital (Ke and Deng) - arguably the most consequential founder diaspora in network security.

Main markets

Juniper turned core routing from a monopoly into a duopoly - 37 percent share by 2001 - then spent two decades expanding into edge, security, switching, and AI-driven enterprise networking, ending as the $13.4 billion centerpiece of HPE's networking ambitions in 2025.

My chapter was Brazil, 2009-2010: the EX and SRX enterprise wave, Junos as the one-OS pitch, and the NetScreen-descended security line - the same years the MX franchise built by Riverstone alumni carried the carrier business.

Analyst standing

  • The duopoly, by the numbers: Cisco above 90 percent of core routing in 1998; Juniper at 37 percent by 2001 - the fastest share shift the router market has seen.
  • IDC ranked NetScreen the number-one firewall vendor in Japan before the 2004 acquisition; Gartner's 2025 Magic Quadrant for Enterprise Wired and Wireless LAN still lists Juniper as a Leader inside HPE - and the DOJ's 2025 settlement pegged HPE plus Cisco at over 70 percent of US enterprise networking.
→NetScreen co-founder Ken Xie went on to found Fortinet - my Fortinet hub
Worked with directlyInside this company, 2009 - 2014What the work actually was: the accounts, the escalations, the technologies, and what it certified.Read the career chapter →

Acquisitions

  1. 2002 OneSecure $40-45M in stock

    Intrusion prevention.

    Nir Zuk and Rakesh Loonkar. Zuk was one of Check Point's first employees.

    Zuk left in 2005 and founded Palo Alto Networks.

  2. 2004 NetScreen acquired BY Juniper ~$4B in stock

    The firewall and VPN business, in one of the largest security acquisitions of its era.

    • 2002 OneSecure (already inside NetScreen) — So Juniper acquired Nir Zuk's company by acquiring the company that had acquired it - and lost him a year later to the firm that would become its competitor.

    Juniper's security line; the SSL VPN part was later sold and became Pulse Secure.

NetScreen Technologies ↗
Sources