Computer Network Security and Virus and Spam Defense

Juniper Networks Firewall/VPN security appliances include NetScreen Series Security Systems and SSG Secure Services Gateways. Both product lines integrate fast routing and security services for organizations ranging from small businesses and branch offices to service providers and enterprise datacenters. Both families also offer advanced security features including stateful firewall, intrusion prevention, malware blocking, and external web filtering. In addition, these devices offer centralized policy-based management, virtualization support, high availability options, and fast installation features such as Auto Connect and Dynamic VPN. Progent's Juniper-certified network engineers can help you design and implement Juniper Firewall/VPN deployments, optimize and troubleshoot your network infrastructure, and migrate smoothly from discontinued devices to current products.

Juniper SSG Series Secure Services Gateways
Juniper's SSG Series is a broad family of high performance firewall/VPN devices with built-in routing functions plus the capability of protecting against internal network, application-level, and content-based attacks. Integrated security features including antivirus, antispam, web filtering, and IPS deep inspection are each licensed annually. All devices in the SSG family are powered by Juniper's real-time, purpose-built ScreenOS software platform, and the 300 and 500 series products can be converted to Jupiter's JUNOS software.

Juniper's SSG140 is designed for small to medium size branch office and standalone small business environments. This modular Firewall/VPN device can replace Juniper's earlier NetScreen-25 or NetScreen-50 firewalls, which have been discontinued and for which Juniper no longer provides support.

The SSG140 includes 10 fixed Ethernet ports (eight 10/100 and two 10/100/1000 ports) and has four PIM expansion slots. Stateful firewall performance is 300 Mbps, and IPsec VPN performance is 100 Mbps. The SSG140 supports up to 48,000 concurrent sessions, six virtual routers, and 100 virtual LANs. The device can not be converted to the JUNOS operating system.

Juniper's SSG320 and SSG350 integrated firewalls are designed for large regional branch office and standalone mid-size business environments. Both devices include four fixed 10/100/1000 Ethernet ports and support up to 125 virtual LANs. The SSG320 has three PIM expansion slots, offers stateful firewall performance of 400 Mbps and IPsec VPN performance of 175 Mbps, and supports 64,000 concurrent sessions and five virtual routers. The SSG350 includes five PIM expansion slots, delivers stateful firewall performance of 500 Mbps and IPsec VPN performance of 225 Mbps, and can handle 128,000 concurrent sessions and eight virtual routers. Both these devices can be converted to the JUNOS software platform.

Juniper's SSG520 and SSG550 integrated firewalls are intended for large branch offices and mid-size businesses. Both firewall/VPN appliances include four fixed 10/100/1000 Ethernet ports. The SSG520 Secure Services Gateway includes four PIM expansion slots and two Enhanced PIM expansion slots, offers stateful firewall throughput of more than 650 Mbps and IPsec VPN performance of 300 Mbps, and can handle 128,000 concurrent sessions, 11 virtual routers, and 125 virtual LANs. The SSG550 firewall has two PIM expansion slots and four EPIM slots, offers stateful firewall throughput in excess of 1 Gbps and IPsec VPN performance of 1 Gbps, and can handle 256,000 concurrent sessions, 16 virtual routers, and 150 virtual LANs. Both firewalls can be converted to JUNOS software.

Juniper NetScreen Series Security Systems
Juniper's current line of NetScreen Series Security Systems is a family of high-performance firewall/VPN appliances designed for large enterprise and carrier-class environments with high-density applications such as protecting server farms in datacenters or supporting a carrier's managed services. The latest NetScreen Series provides extensive scalability and versatility via PIM and Enhanced PIM expansion slots and high availability through redundant hot-swap power supplies and fans. A major focus of the NetScreen architecture is support for virtualization, Both the NetScreen 5200 and 5400 firewall/VPN appliances can be expanded to support more than 500 virtual routers and up to 4096 virtual LANs. This allows a network to be partitioned into multiple administrative domains, each with its own security policies and address books, without requiring multiple physical firewalls. Both the 5200 and 5400 can also be converted to the JUNOS operating system.

The NetScreen 5200 integrated firewall is a two-slot chassis with two interface expansion slots. LAN interface options include eight mini-GBIC interfaces or two XFP 10 Gig interfaces. Stateful firewall performance is 10 Gbps and IPsec VPN throughput is 5 Gbps. The 5200 can handle 1,000,000 concurrent sessions.

The NetScreen 5400 firewall/VPN device has a four-slot chassis with four interface expansion slots. LAN interface options include eight mini-GBIC interfaces or two XFP 10 Gig interfaces. Stateful firewall performance is 30 Gbps and IPsec VPN throughput is 15 Gbps. The 5400 can handle 2,000,000 concurrent sessions and by default supports three virtual routers, which can expanded to 503. The device also supports 4094 virtual LANs.

Juniper's popular NetScreen-25 and NetScreen-50 firewall/VPN devices have been discontinued but are still in wide use among small companies and enterprise branch and remote offices. These appliances feature:

• Integrated security solutions for the enterprise branch and remote offices and small to medium-sized companies
• Solutions for perimeter security with multiple DMZs, VPNs for wireless LAN security, or protection of internal networks
• IPSec VPN resiliency for fault-tolerant security solutions

Juniper Networks NetScreen Security Manager (NSM) system is an easy-to-use centralized management solution that controls all aspects of the Juniper Networks Firewall / IPSec VPN devices including device configuration, network settings, and security policy. The NSM system allows IT departments to control the entire device life cycle with a single, centralized solution that helps to improve network reporting and management efficiency while and reducing overhead and operating costs.

NetScreen Security Manager includes a high performance log storage mechanism that allows you to collect and monitor detailed historical information on key criteria such as network traffic and security events. Built-in reporting capabilities allow you to generate reports for investigative or compliance purposes. For more extensive analysis, you can export log files to a third party reporting tool or database. Real-time monitoring includes VPN and device up/down status and high availability cluster monitoring.

Progent's Consulting Services for Juniper NetScreen and SSG Firewalls
Progent's Juniper consultants can help you configure and support Juniper's NetScreen and SSG Firewall/VPN appliances and NetScreen Security Manager. In addition, Progent's CISSP certified consultants and CISM certified consultants offer affordable remote security vulnerability and compliance testing and can also help you develop a comprehensive security strategy and design security into your business processes. Progent’s Technical Response Center (TRC) can deliver emergency remote technical support for Juniper technology and offer quick access to a Juniper certified network engineer.

Find out how to contact a Progent security consultant.