 |
 |
 |
 |
Purpose-built security appliances that deliver a perfect mix of high performance, security and LAN/WAN connectivity for regional and branch office deployments
Dedicated, security specific processing hardware and software platform delivers performance required to protect high speed LAN as well as lower speed WAN connections
Extensible I/O architecture delivers LAN and WAN connectivity options on top of unmatched security to reduce costs and extend investment protection
The Juniper Networks Secure Services Gateway 500 Series (SSG) represents a new class of purpose-built security appliance that delivers a perfect mix of high performance, security and LAN / WAN connectivity for regional and branch office deployments. With proven network and application level protection, the SSG 520 and SSG 550 can both be implemented as standalone security devices to stop worms, Spyware, Trojans, malware and other emerging attacks. In addition, the SSG 500 Series combines security and LAN routing functionality from the market leading firewall appliances running ScreenOS with best-in-class routing hardware and WAN protocols from the Juniper Networks J-series routers and JUNOS. The result is a high performance security platform that can be deployed as a combination firewall and routing device for those customers who wish to consolidate routing and security devices and reduce IT expenses.
SSG 550: The SSG 550 delivers 1 Gbps of IMIX firewall traffic, 500 Mbps of IPSec VPN and 500 Mbps of IPS (Deep Inspection). The SSG 550 supports redundant power supplies and is NEBS compliant.
The SSG 520 and SSG 550 are ideally suited for regional/branch offices, medium businesses and service providers that want a security platform to protect their WAN and high speed internal networks while extending the platform return on investment through high levels of system and interface modularity.
Key features and benefits of the Juniper Networks SSG 500 Series solutions include:
- Purpose-built, high performance platform that delivers WAN connectivity and security, plus the muscle to protect your high-speed LAN against internal network and application-level attacks
- Combination of security and LAN/WAN routing functionality, that provides the ability to consolidate devices and reduce IT expenditures
- Comprehensive range of LAN and WAN interfaces supporting Serial, T1/E1, DS3, 10/100/1000, SFP and FE
- Interface and routing flexibility for varying network connectivity requirements and future growth requirements
- Integrated Deep Inspection firewall for protection against worms, Spyware, Trojans, malware and other emerging attacks, applied on a per-policy basis
- Comprehensive high availability solution for sub-second failover between interfaces or devices
- Customizable security zones to increase interface density without additional hardware expenditures, lower policy creation costs, contain unauthorized users and attacks, and simplify management of firewall/VPNs
- Management through graphical Web UI, CLI, or the NetScreen-Security Manager central management system
- Policy-based management to allow centralized, end-to-end life-cycle management
Specifications
| Feature/Capacity |
SSG 520 |
SSG 550 |
| Number of Interfaces |
4x 10/100/1000 |
4x 10/100/1000 |
| Maximum Number of IP Addresses in Trusted Interfaces |
Unrestricted |
Unrestricted |
| Physical Interface Module (PIM) Expansion Slots |
6 |
6 |
| Enhanced PIM Expansion Slots |
2 |
4 |
| WAN Interface Options |
Serial, T1, E1, DS3 |
Serial, T1, E1, DS3 |
| LAN Interface Options |
SFP, FE, 10/100/1000 |
SFP, FE, 10/100/1000 |
| Maximum Throughput |
600 Mbps IMIX FW 300 Mbps VPN 300 Mbps IPS
|
1 Gbps IMIX FW 500 Mbps VPN 500 Mbps IPS
|
| Packets per second (64 byte) |
300,000 |
600,000 |
Maximum Number of Sessions
|
64,000 |
128,000 |
Maximum Number of VPN Tunnels
|
500 |
1,000 |
Maximum Number of Policies
|
1,000 |
4,000 |
Maximum Number of Virtual LANs
|
125 |
150 |
Maximum Number of Security Zones
|
12 |
18 |
Maximum Number of Virtual Routers |
5 |
8 |
| WAN Encapsulations Supported |
Frame Relay, Multilink Frame Relay, PPP, Multilink PPP, HDLC |
Frame Relay, Multilink Frame Relay, PPP, Multilink PPP, HDLC |
Routing Protocols Supported
|
OSPF, BGP, RIPv1/v2 |
OSPF, BGP, RIPv1/v2 |
High Availability Modes Supported
|
Active/Passive |
Active/Passive Active/Active
|
| IPS (Deep Inspection FW) |
Yes |
Yes |
| Embedded Antivirus (Includes Anti-Phishing & Anti-Spyware) |
Expected in 2nd half, 2006 |
Expected in 2nd half, 2006 |
| Embedded Anti-Spam |
Expected in 2nd half, 2006 |
Expected in 2nd half, 2006 |
Integrated / Redirect Web Filtering
|
Yes / Yes |
Yes / Yes |
|
|
 |
 |
 |
 |
|
 |

|