Juniper Networks NetScreen-50f w/ AC power supply
Contents
1. Juniper Networks NetScreen 50 IP Address Assignment Static Yes Yes DHCP PPPoE client Yes Yes Internal DHCP server Yes Yes DHCP Relay Yes Yes System Management WebUI HTTP and HTTPS Yes Yes Command Line Interface console Yes Yes Command Line Interface telnet Yes Yes Command Line Interface SSH Yes v1 5 and Yes v1 5 and v2 0 compatible v2 0 compatible NetScreen Security Manager Yes Yes All management via VPN tunnel on any interface Yes Yes SNMP Full Custom MIB Yes Yes Rapid deployment Yes Yes Administration Local administrators database 20 20 External administrator database RADIUS LDAP RADIUS LDAP SecurID SecurID Restricted administrative networks 6 6 Root Admin Admin and Read Only user levels Yes Yes Software upgrades TFTP TFTP WebUI SCP NSM WebUI SCP NSM Configuration Roll back Yes Yes Traffic Management Guaranteed bandwidth Yes Yes Maximum bandwidth Yes Yes Ingress Traffic Policing Yes Yes Priority bandwidth utilization Yes Yes DiffServ stamp Yes Yes External Flash CompactFlash Supports 96 128 or 512 MB Industrial Grade SanDisk Event logs and alarms Yes System config script Yes ScreenOS software Yes Supports 96 128 or 512 MB Industrial Grade SanDisk Yes Yes Yes Dimensions and Power Dimensions H W L 1 73 17 5 10 8 inches 1 73 1 Weight 8 Ibs Rack mountable 19 standard 23 optional Power Supply AC Power Supply DC 90 to 264 VAC 45 watts 36 to 722. Page 1 Bphesiece Juniper Networks NetScreen 25 50 The Juniper Networks NetScreen 25 and NetScreen 50 offer a complete security solution for enterprise branch and remote offices as well as small and medium size companies Featuring four auto sensing 10 100 Ethernet ports the NetScreen 25 and NetScreen 50 provide solutions for perimeter security with multiple DMZs VPNs for wireless LAN security or protection of internal networks The NetScreen 25 has the same number of Ethernet interfaces and offers 100 Mbps of firewall and 20 Mbps of 3DES or AES VPN performance with support for 32 000 concurrent sessions and 125 VPN tunnels The NetScreen 50 is a high performance security appliance offering 170 Mbps of firewall and 45 Mbps of 3DES or AES VPN performance with support for 64 000 concurrent sessions and 500 VPN tunnels Juniper Networks NetScreen 25 Maximum Performance and Capacity ScreenOS version support ScreenOS 5 4 ScreenOS 5 4 Firewall performance 100 Mbps 170 Mbps 3DES SHA 1 performance 20 Mbps 45 Mbps Concurrent sessions 32 000 64 000 New sessions second 4 000 5 000 Policies 500 1 000 Interfaces 4 10 100 Base T 4 10 100 Base T Juniper Networks NetScreen 50 Juniper Networks Juniper Networks NetScreen 25 NetScreen 50 Firewall and VPN User Authentication Mode of Operation Built in internal database user limit up to 250 Up to 250 3rd Party user authentication RA
3. HA Lite NetScreen Security Manager Supported Supported HA Lite provides configuration synchronization only does not provide session or tunnel synchronization Ordering Information Product Part Number Juniper Networks NetScreen 50 w AC power supply NetScreen 50 US power cord NS 050 001 NetScreen 50f US power cord NS 050 101 NetScreen 50 UK power cord NS 050 003 NetScreen 50f UK power cord NS 050 103 NetScreen 50 European power cord NS 050 005 NetScreen 50f European power cord NS 050 105 NetScreen 50 Japanese power cord NS 050 007 NetScreen 50f Japanese power cord NS 050 107 f products do not include VPN functionality international only Juniper Networks NetScreen 50 w DC power supply NetScreen 50 w DC power supply DC power NS 050 001 DC Juniper Networks NetScreen 25 w AC power supply NetScreen 25 US power cord NS 025 001 NetScreen 25 UK power cord NS 025 003 NetScreen 25 European power cord NS 025 005 NetScreen 25 Japanese power cord NS 025 007 Baseline Products NetScreen 50 Baseline US power cord NS 050B 001 NetScreen 50 Baseline UK power cord NS 050B 003 NetScreen 50 Baseline European power cord NS 050B 005 NetScreen 50 Baseline Japanese power cord NS 050B 007 NetScreen 50 Baseline to Advanced Upgrade NS 050 UPG A NetScreen 25 Baseline US power cord NS 025B 001 NetScreen 25 Baseline UK power cord NS 025B 003 NetScreen 25 Baseline European power cord NS 025B 005 NetScreen 25 Baseline Japanese
4. VDC 50 watts 7 5 10 8 inches 8 Ibs 19 standard 23 optional 90 to 264 VAC 45 watts 36 to 72 VDC 50 watts Certifications Safety Certifications UL CUL CSA CB EMC Certifications FCC class A BSMI Class A CE class A C Tick VCCI class A Environment Operational temperature 23 to 122 F 5 to 50 C Non operational temperature 4 to 158 F 20 to 70 C Humidity 10 to 90 non condensing MTBF Bellcore model NetScreen 25 8 1 years NetScreen 50 8 1 years Security Certifications Advanced models only Common Criteria EAL4 and EAL4 Licensing Options The NetScreen 25 and NetScreen 50 are both available with two licens ing options to provide two different levels of functionality and capacity Advanced Models The Advanced software license provides all of the features and capaci ties listed within this specsheet Baseline Models The Baseline software license provides an entry level solution for cus tomer environments where features such as Deep Inspection OSPF and BGP dynamic routing advanced High Availabilty and full capacity are not critical requirements The fol lowing table shows the features and capacities that are different than the Advanced models Sessions Site to site tunnels Remote Access Tunnels Shared wi site to site 24 000 50 48 000 150 Shared wi site to site Deep Inspection Firewall N A N A VLANs 0 0 OSPF BGP N A N A High Availability HA HA Lite
5. DIUS RSA RADIUS RSA SecurID and LDAP SecurID and LDAP XAUTH VPN authentication Yes Yes Web based authentication Yes Yes PKI Support PKI Certificate requests PKCS 7 and PKCS 10 Yes Yes Automated certificate enrollment SCEP Yes Yes Online Certificate Status Protocol OCSP Yes Yes Self Signed Certificates Yes Yes Certificate Authorities Supported Verisign Yes Yes Entrust Yes Yes Microsoft Yes Yes RSA Keon Yes Yes iPlanet Netscape Yes Yes Baltimore Yes Yes DOD PKI Yes Yes Logging Monitoring Syslog multiple servers External up to External up to 4 servers 4 servers E mail 2 addresses Yes Yes NetIQ WebTrends External External SNMP v1 v2 Yes Yes Standard and custom MIB Yes Yes Traceroute Yes Yes At session start and end Yes Yes Virtualization Layer 2 mode transparent mode Yes Yes Layer 3 mode route and or NAT mode Yes Yes NAT Network Address Translation Yes Yes PAT Port Address Translation Yes Yes Policy based NAT Yes Yes Virtual IP 2 2 Mapped IP 500 500 MIP VIP Grouping Yes Yes Users supported Unrestricted Unrestricted Firewall Number of network attacks detected 31 31 Network attack detection Yes Yes DoS and DDoS protections Yes Yes TCP reassembly for fragmented packet protection Yes Yes Malformed packet protections Yes Yes IPS Deep Inspection FW Yes Yes Protocol anomaly Yes Yes Stateful protocol signatures Yes Yes Content Inspection Yes Yes Embedded antivirus No No Embedded Anti Spam Yes Yes M
6. alicious Web filtering up to 48 URLs up to 48 URLs External Web filtering Websense or SurfControl Yes Yes Integrated Web filtering Yes Yes Brute force attack mitigation Yes Yes Deep Inspection DI attack pattern obfuscation Yes Yes Zone based IP spoofing Yes Yes VPN Concurrent VPN tunnels 125 500 Tunnel interfaces 25 50 DES 56 bit 3DES 1 68 bit and AES encryption Yes Yes Manual Key IKE PKI X 509 Yes Yes Perfect forward secrecy DH Groups 1 2 5 1 2 5 Prevent replay attack Yes Yes Remote access VPN Yes Yes L2TP within IPSec Yes Yes Dead Peer Detection Yes Yes IPSec NAT Traversal Yes Yes Redundant VPN gateways Yes Yes VPN tunnel monitor Yes Yes Custom security zones 4 4 Virtual routers VRs 3 3 VLANs supported 16 16 Routing OSPF BGP Dynamic routing 3 instances each 3 instances each RIPv1 v2 Dynamic routing 3 instances 3 instances Static routes 2 048 2 048 Source Based Routing Source Interface Based Routing Yes Yes Equal cost multi path routing Yes Yes High Availability HA HA mode HA Lite Active Passive Firewall VPN session synchronization No Yes Redundant Interfaces Yes Yes Configuration synchronization Yes Yes Device failure detection Yes Yes Link failure detection Yes Yes Authentication for new HA members Yes Yes Encryption of HA traffic Yes Yes VolP H 323 ALG Yes Yes SCCP ALG Yes Yes SIP ALG Yes Yes MGCP ALG Yes Yes NAT for H 323 SIP SCCP MGCP Yes Yes Juniper Networks NetScreen 25
7. da Avenue Sunnyvale CA 94089 USA Phone 888 JUNIPER 888 586 4737 or 408 745 2000 Fax 408 745 2100 wwwjuniper net 110003 010 Sept 2006 Juniper Networks UK Limited Juniper House Guildford Road Leatherhead Surrey KT22 QJH U K Phone 44 0 1372 385500 Fax 44 0 1372 385501 without notice Juniper Networks assumes no responsibility for any inaccuracies in this document or for any obligation to update information in this document Juniper Networks reserves the right to change modify transfer or otherwise revise this publication without notice
8. power cord NS 025B 007 NetScreen 25 Baseline to Advanced Upgrade NS 025 UPG A 1 Performance capacity and features listed are based upon systems running ScreenOS 5 4 and are the measured maximums under ideal testing conditions unless otherwise noted Actual results may vary based on ScreenOS release and by deployment 7 5 J H 2 The following features are not supported in Layer 2 transparent mode NAT PAT policy based NAT virtual IP mapped IP E H u pe r VLANs OSPF BGP RIPv2 Active Active HA and IP address assignment NETWORKS CORPORATE HEADQUARTERS EAST COAST OFFICE ASIA PACIFIC REGIONAL EUROPE MIDDLE EAST AFRICA Copyright 2006 Juniper Networks Inc All rights reserved Juniper Networks and the Juniper Networks logo are registered trademarks of AND SALES HEADQUARTERS Iiei SALES HEADQUARTERS REGIONAL SALES HEADQUARTERS Juniper Networks Inc in the United States and other countries All other trademarks service marks registered trademarks or registered FOR NORTH AND SOUTH AMERICA ii service marks in this document are the property of Juniper Networks or their respective owners All specifications are subject to change 10 Technology Park Drive Westford MA 01886 3146 USA Phone 978 589 5800 Fax 978 589 0800 Juniper Networks Hong Kong Ltd Suite 2507 11 Asia Pacific Finance Tower Citibank Plaza 3 Garden Road Central Hong Kong Phone 852 2332 3636 Fax 852 2574 7803 Juniper Networks Inc 1194 North Mathil
Download Pdf Manuals
Related Search