Juniper NetScreen-208
Contents
1. Active Passive Yes SYN cookie Yes Redundant Interfaces Yes Zone based IP spoofing Yes Configuration synchronization Yes Session synchronization for firewall and VPN Yes VPN Session failover for routing change Yes Concurrent VPN tunnels Up to 1 000 Device failure detection Yes Tunnel interfaces Up to 256 Link failure detection Yes DES 56 bit 3DES 168 bit and AES encryption Yes Authentication for new HA members Yes MD 5 and SHA 1 authentication Yes Encryption of HA traffic Yes Manual Key IKE PKI X 509 Yes LDAP and RADIUS server failover Yes Perfect forward secrecy DH Groups 1 2 5 Prevent replay attack Yes Yole Remote access VPN Yes H 323 ALG Yes L2TP within IPSec Yes SOCP ALG Yes Dead Peer Detection Yes AP ALG Yes IPSec NAT Traversal Yes MGCP ALG Yes Redundant VPN gateways Yes NAT for H 323 SIP SCCP MGCP Yes VPN tunnel monitor Yes IP Address Assignment Firewall and VPN User Authentication oe PPPoE client Built in internal database user limit up to 1 500 Internal DHCP server Yes 3rd Party user authentication RADIUS RSA SecurID 802 1x and LDAP DHCP Rela y y es XAUTH VPN authentication Web based authentication Yes Yes ovv Net Juniper Juniper Networks Series NetScreen RADIUS Accounting Certifications Safety Certifications UL CUL CSA CB NEBS Level 3 NetScreen 208 with DC power supply EMC Certifications FCC class A BSMI CE class A C Tick VCCI class A Environment Opera2. E EAST AFRICA Copyright 2006 Juniper Networks Inc All rights reserved Juniper Networks and the Juniper Networks logo are registered trademarks of EOT in Juniper Networks Inc SAS HEADQUARTERS REGIONAL SALES HEADQUARTERS rios mark In this document are the propery of Juniper Networks or ther respective owners Al specteatlons are subject to change FOR NORTH AND SOUTH AMERICA property of Juniper orks or their resp owners All specifications are subject to change 10 Technology Park Drive Westford MA 01886 3146 USA Phone 978 589 5800 Fax 978 589 0800 Juniper Networks Hong Kong Ltd Suite 2507 11 Asia Pacific Finance Tower Citibank Plaza 3 Garden Road Central Hong Kong Phone 852 2332 3636 Fax 852 2574 7803 Juniper Networks UK Limited Juniper House Guildford Road Leatherhead Surrey KT22 QJH U K Phone 44 0 1372 385500 Fax 44 0 1372 385501 Juniper Networks Inc 1194 North Mathilda Avenue Sunnyvale CA 94089 USA Phone 888 JUNIPER 888 586 4737 or 408 745 2000 Fax 408 745 2100 wwwjuniper net 110004 009 Dec 2006 without notice Juniper Networks assumes no responsibility for any inaccuracies in this document or for any obligation to update information in this document Juniper Networks reserves the right to change modify transfer or otherwise revise this publication without notice
3. Page 1 Bphesiece Juniper Networks NetScreen 204 208 The Juniper Networks NetScreen 200 Series is one of the most versatile pair of security appliances available today They easily integrate and secure many different network environments including medium and large enterprise offices e business sites data centers and carrier infrastructure Complete with either four or eight auto sensing 10 100 Base T Ethernet ports the NetScreen 200 Series performs firewall functions at wire speed 375 Mbps on the NetScreen 204 and NetScreen 208 Even the most computationally intense applications such as 3DES and AES encryption are performed at speeds greater than 175 Mbps Juniper Networks NetScreen Juniper Networks D NetScreen 208 Juniper Networks NetScreen 200 Series Maximum Performance and Capacity PKI Support ScreenOS version support ScreenOS 5 4 ScreenOS 5 4 PKI Certificate requests PKCS 7 and PKCS 10 Yes Firewall performance 375 Mbps 375 Mbps Automated certificate enrollment SCEP Yes 3DES SHA 1 performance 175 Mbps 175 Mbps Online Certificate Status Protocol OCSP Yes Concurrent sessions 128 000 128 000 Self Signed Certificates Yes New sessions second 11 500 11 500 Certificate Authorities Supported Policies 4 000 Verisign Yes Interfaces 4 10 100 Base T 8 10 100 Base T Entrust Yes Juniper Networks Microsoft Yes NetScreen 200 Series RSA Keon Yes Mode of Operation iPlanet Netsca
4. and BGP dynamic rout NetScreen 208 BaselineUK power cord NS 208B 003 ing advanced High Availabilty and full capacity are not critical requirements The following NetScreen 208 BaselineEuropean power cord NS 208B 005 table shows the features and capacities that are different than the Advanced models NetScreen 208 Baseline Japanese power cord NS 208B 007 Sessions 64 000 64 000 NetScreen 204 BaselineUK power cord NS 204B 003 Concurrent VPN tunnels 500 500 NetScreen 204 BaselineEuropean power cord NS 204B 005 Deep Inspection Firewall N A N A NetScreen 204 BaselineJapanese power cord NS 204B 007 VLANs Os 0 1 Performance capacity and features listed are based upon systems running ScreenOS 5 4 and are the measured OSPF BGP N A N A maximums under ideal testing conditions unless otherwise noted Actual results may vary based on ScreenOS release and by High Availability HA Active Passive Active Passive deployment NetScreen Security Manager Supported Supported 2 The following features are not supported in Layer 2 transparent mode NAT PAT policy based NAT virtual IP mapped IP NetScreen 204 208 Baseline can be upgraded to include 96 VLANs 5 additional virtual routers and 10 additional security zones with purchase of an additional Virtualization Key VLANs OSPF BGP RIPv2 Active Active HA and IP address assignment i i J i iy Juniper f i E H NETWORKS CORPORATE HEADQUARTERS EAST COAST OFFICE ASIA PACIFIC REGIONAL EUROPE MIDDL
5. pe Yes Layer 2 mode transparent mode 2 Yes Baltimore Yes Layer 3 mode route and or NAT mode Yes DOD PRI Yes NAT Network Address Translation Yes Logging Monitoring PAT Port Address Translation Yes Syslog multiple servers External up to 4 servers Policy based NAT Yes E mail 2 addresses Yes Virtual IP 4 NetIQ WebTrends External Mapped IP 4 000 SNMP v1 v2 Yes MIP VIP Grouping Yes Standard and custom MIB Yes Users supported Unrestricted Traceroute Yes g At session start and end Yes Firewall Number of network attacks detected 31 Virtualization Network attack detection Yes Custom security zones 8 4 on NetScreen 204 DoS and DDoS protections Yes Virtual routers VRs 3 TCP reassembly for fragmented packet protection Yes VLANs supported 32 Malformed packet protections Yes Virtualization key Optional upgrade adds 10 security IPS Deep Inspection FW Yes zones 5 VRs and 96 VLANs Protocol anomaly Yes Routing Stateful protocol signatures Yes OSPF BGP Dynamic routing 3 instances each Content Inspection Yes RIPv1 v2 Dynamic routing Up to 8 instances Embedded antivirus No Static routes 4096 Embedded Anti spam Yes Source Based Routing Source Interface Based Routing Yes Malicious Web filtering up to 48 URLs Equal cost multi path routing Yes External Web filtering Websense or SurfControl Yes Integrated Web filtering No High Availability HA Brute force attack mitigation Yes Active Active Yes Deep Inspection DI attack pattern obfuscation Yes
6. rks NetScreen 208 w DC power supply Ne Screen 208 DC power NS 208 001 DC Event logs and alarms Yes Juniper Networks NetScreen 204 w AC power supply System config script Yes NetScreen 204 US power cord NS 204 001 ScreenOS software Yes NetScreen 204 UK power cord NS 204 003 Dimensions and Power NetScreen 204 European power cord NS 204 005 Dimensions H W L 1 73 17 5 10 8 inches NetScreen 204 Japanese power cord NS 204 007 Weight Rack mountable Power Supply AC 8 Ibs 19 standard 23 optional 90 to 264 VAC 45 watts Juniper Networks NetScreen 204 w DC power supply Ne Screen 204 DC power NS 204 001 DC Power Supply DC 36 to 72 VDC 50 watts Licensing Options The NetScreen 204 and NetScreen 208 are both available with two licensing options to provide two different levels of functionality and capacity Advanced Models The Advanced software license provides all of the features and capacities Juniper Networks NetScreen 200 Series Virtualization Ne Virtualization Key adds 32 VLANs 5 additional virtual routers and 10 additional security zones Only available with NetScreen ScreenOS 4 0 2 and later Screen 200 Virtualization Key NS 200 VIRT listed within this specsheet Baseline Products Baseline Models The Baseline software license provides an entry level solution for custom NetScreen 208 BaselineUS power cord NS 208B 001 er environments where features such as Deep Inspection OSPF
7. tional temperature 23 to 122 F 5 to 50 C Non operational temperature 4 to 158 F 20 to 70 C Humidity 10 to 90 non condensing MTBF Bellcore model NetScreen 204 6 8 years NetScreen 208 6 5 years RADIUS Start Stop Yes System Management WebUI HTTP and HTTPS Yes Command Line Interface console Yes Command Line Interface telnet Yes Command Line Interface SSH Yes v1 5 and v2 0 compatible NetScreen Security Manager Yes All management via VPN tunnel on any interface Yes SNMP Full Custom MIB Yes Rapid deployment Yes Administration Local administrators database 20 External administrator database RADIUS LDAP SecurID Restricted administrative networks 6 Security Certifications Advanced models only Common Criteria EAL4 and EAL4 FIPS 140 2 Level 2 ICSA Firewall and VPN Root Admin Admin and Read Only user levels Yes Software upgrades TFTP WebUI SCP NSM Ordering Information Configuration Roll back Yes x Product Part Number Traffic Management Guaranteed bandwidth Yes Juniper Networks NetScreen 208 w AC power supply Maximum bandwidth Yes NetScreen 208 US power cord NS 208 001 Ingress Traffic Policing Yes NetScreen 208 UK power cord NS 208 003 Priority bandwidth utilization Yes NetScreen 208 European power cord NS 208 005 DiffServ stamp Yes NetScreen 208 Japanese power cord NS 208 007 External Flash CompactFlash Supports 96 128 or 512 MB Industrial Grade SanDisk Juniper Netwo
Download Pdf Manuals
Related Search