System Security and Virus and Spam Defense

• Overview of Juniper Networks Secure Connectivity Solutions
• Juniper NetScreen Security Systems Consulting
• Juniper SSG Series Firewalls Consulting
• Juniper SRX Series Services Gateways and Firewalls Consulting
• Juniper J Series IPsec VPN Routers Consulting
• Juniper SA Series SSL VPN Appliances Consulting
• Junos OS Network Operating System Software Expertise

Juniper SSG Series Secure Services Gateways
Juniper's SSG Series is a broad family of high performance security appliances with integrated routing designed for organizations of virtually any size from small branch offices to large enterprises. SSG Series firewall/VPN devices feature built-in high-performance routing functionality plus the ability to protect against internal network, application-level, and content-based attacks. Integrated security features including antivirus, antispam, web filtering, and IPS deep inspection are each licensed annually. All devices in the SSG family are powered by Juniper's real-time, purpose-built ScreenOS software platform, and the 300 and 500 series products can be converted to Jupiter's Junos OS software platform.

Juniper SSG Models Supported by Progent
Progent's Juniper-certified consultants can help your business plan the deployment of Juniper SSG integrated firewall/VPN products, configure security policies to match your operational requirements, set up network OS software to streamline management processes, migrate from legacy Juniper products, and troubleshoot infrastructure issues.

Models within the SSG product line supported by Progent include:

Juniper's entry-level SSG5 integrated firewall is designed for small branch office, teleworkers, and small businesses. The SSG5 includes seven fixed 10/100 Ethernet ports and has no expansion slots. Internet Mix firewall performance is 90 Mbps and maximum firewall packets per second is 30,000. With the standard SSG5 license, the device supports 25 concurrent VPN tunnels, 8,000 concurrent sessions, 3 virtual routers, and 10 virtual LANs. IPsec VPN performance is 40 Mbps. With an Extended License, the SSG5 supports 40 concurrent VPN tunnels, 16,000 concurrent sessions, 4 virtual routers, and 50 virtual LANs. The SSG5 security platform is limited to a maximum of eight security zones and 200 security policies. Juniper offers a wireless and a wired-only version of the SSG5. The device includes the ScreenOS operating system and does not support Junos OS.

Juniper's SSG20 integrated firewall offers performance similar to the SSG5 model but has fewer fixed I/O ports and includes expansion slots. The SSG20 is intended for small branch office, teleworkers, and small businesses. The SSG5 includes five fixed 10/100 Ethernet ports and has two Mini-PIM expansion slots. IMIX firewall performance is 90 Mbps and maximum firewall packets per second is 30,000. With the standard SSG5 license, the device supports 25 concurrent VPN tunnels, 8,000 concurrent sessions, 3 virtual routers, and 10 virtual LANs. IPsec VPN performance is 40 Mbps. With an Extended License, the SSG5 supports 40 concurrent VPN tunnels, 16,000 concurrent sessions, 4 virtual routers, and 50 virtual LANs. The SSG5 security platform is limited to a maximum of eight security zones and 200 security policies. Juniper offers a wireless and a wired-only version of the SSG20. The ScreenOS operating system is included and the Junos OS is not supported.

Juniper's SSG140 is designed for small to medium size branch office and standalone small business environments. This modular Firewall/VPN device can replace Juniper's earlier NetScreen-25 or NetScreen-50 firewalls, which have been discontinued and for which Juniper no longer provides support. The SSG140 includes 10 fixed Ethernet ports (eight 10/100 and two 10/100/1000 ports) and has four PIM expansion slots. Internet Mix firewall performance is 300 Mbps and maximum firewall packets per second is 100,000. IPsec VPN performance is 100 Mbps. The SSG140 supports up to 48,000 concurrent sessions, six virtual routers, 500 VPN tunnels, and 100 virtual LANs. The SSG140 is powered by ScreenOS software and does not allow conversion to Junos OS.

Juniper's SSG320M integrated firewall is designed for regional branch office and mid-size business environments. The SSG320M includes four fixed 10/100/1000 Ethernet ports and supports up to 125 virtual LANs. The SSG320M has three PIM expansion slots, offers stateful firewall performance of 400 Mbps, and can handle a maximum of 175,000 firewall packets per second. The device offers IPsec VPN performance of 175 Mbps and supports 64,000 concurrent sessions and five virtual routers. The SSG320M comes standard with ScreenOS software and can be converted to Junos OS.

Juniper's SSG350M services gateway is intended for large regional branch offices and standalone mid-size businesses. The SSG350M includes four fixed 10/100/1000 Ethernet ports and supports up to 125 virtual LANs. The SSG350M includes five PIM expansion slots, delivers IMIX firewall performance of 500 Mbps, and supports a maximum of 225,000 firewall packets per second. IPsec VPN performance is 225 Mbps. The SSG350M also supports up to 128,000 concurrent sessions and eight virtual routers. The SSG350M includes ScreenOS control software and can be upgraded to run Junos OS.

Juniper's SSG520M integrated firewall is designed for large branch offices and mid-size businesses. The firewall/VPN appliance includes four fixed 10/100/1000 Ethernet ports, four PIM expansion slots, and two Enhanced PIM expansion slots. The device offers Internet Mix firewall throughput of more than 650 Mbps and supports a maximum of 300,000 firewall packets per second. IPsec VPN performance is 300 Mbps. The SSG520M can support 128,000 concurrent sessions, 11 virtual routers, and 125 virtual LANs. The integrated firewall is shipped with ScreenOS and can be converted to Junos OS software.

Juniper's SSG550M integrated firewall is engineered for large branch office and mid-size business environments. The device includes four fixed 10/100/1000 Ethernet ports, two PIM expansion slots, and four EPIM slots. The SSG550M offers stateful firewall throughput greater than 1 Gbps and can handle up to 600,000 firewall packets per second. IPsec VPN performance is 300 Mbps. The SSG550M can handle 256,000 concurrent sessions, 16 virtual routers, and 150 virtual LANs. ScreenOS software is standard and Junos OS software is an option.

Progent's Consulting Services for Juniper NetScreen and SSG Firewalls
Progent's Juniper-certified consultants can help you configure, manage, and troubleshoot Juniper's SSG Firewall/VPN appliances and can also help you take full advantage of Juniper's ScreenOS and Junos OS operating systems to optimize the security, performance, and dependability of your network infrastructure. Progent's CISSP certified network security consultants and CISA security experts offer economical online security compliance testing and can also help you to develop a comprehensive security plan and build protection into your business processes. In addition, Progent can help your organization to plan and operate comprehensive security information and event management (SIEM) solutions to help you comply with government requirements for promptly reporting events.

Progent's Technical Response Center (TRC) can provide emergency online technical support for Juniper technology and provides fast access to a Juniper-certified infrastructure engineer.

Call or Email Progent for Juniper Networks Support
If you want engineering services or problem analysis for Juniper security appliances, phone Progent at 800-993-9400 or see Contact Progent.