Juniper SSG-20-SH

Product Description

The Juniper Networks® SSG5 and SSG20 Secure Services Gateways are high-performance security platforms for small branch office and standalone businesses that want to stop internal and external attacks, prevent unauthorized access and achieve regulatory compliance. Both the SSG5 and SSG20 deliver 160 Mbps of stateful firewall traffic and 40 Mbps of IPsec VPN traffic.

Security: Protection against worms, viruses, trojans, spam, and emerging malware is delivered by proven unified threat management (UTM) security features that are backed by best-in-class partners. To address internal security requirements and facilitate regulatory compliance, the SSG5 and SSG20 both support an advanced set of network protection features such as security zones, virtual routers and VLANs that allow administrators to divide the network into distinct secure domains, each with its own unique security policy. Policies protecting each security zone can include access control rules and inspection by any of the supported UTM security features.

Connectivity and Routing: The SSG5 has seven on-board 10/100 interfaces with optional fixed WAN ports. The SSG20 has five 10/100 interfaces with two I/O expansion slots for additional WAN connectivity. The broad array of I/O options coupled with WAN protocol and encapsulation support in the routing engine make both the SSG5 and the SSG20 a solution that can easily be deployed as a traditional branch office router or as a consolidated security and routing device to reduce CapEx and OpEx. Both the SSG5 and SG20 support 802.11 a/b/g as a factory configured option supported by a wide array of wireless specific security features.

Access Control Enforcement: The SSG5 and SSG20 can act as enforcement points in a Juniper Networks Unified Access Control deployment with the simple addition of the IC Series UAC appliance. The IC Series functions as a central policy management engine, interacting with the SSG5 or SSG20 to augment or replace the firewall-based access control with a solution that grants/denies access based on more granular criteria that include endpoint state and user identity in order to accommodate the dramatic shifts in attack landscape and user characteristics.

World Class Support: From simple lab testing to major network implementations, Juniper Networks Professional Services will collaborate with your team to identify goals.

 Would you like more information about Juniper SSG20?
Then please download the datasheet by clicking here

High performance - Purpose-built platform is assembled from custom-built hardware, powerful processing and a security-specific operating system. Delivers performance headroom required to protect against internal and external attacks now and into the future.

Best-in-class UTM security features - UTM security features (antivirus, anti-spam, Web filtering, IPS) stop all manner of viruses and malware before they damage the network.
Ensures that the network is protected against all manner of attacks.

Integrated antivirus - Annually licensed antivirus engine is based on Kaspersky Lab engine. Stops viruses, spyware, adware and other malware.

Integrated anti-spam - Annually licensed anti-spam offering is based on Symantec technology. Blocks unwanted email from known spammers and phishers.

Integrated Web filtering - Annually licensed Web filtering solution is based on Websense SurfControl technology. Controls/blocks access to malicious Web sites.

Integrated IPS (Deep Inspection) - Annually licensed IPS engine. Prevents application-level attacks from flooding the network.

Fixed Interfaces - Seven fixed 10/100 interfaces on the SSG5, and five fixed 10/100 interfaces on the SSG20. The SSG5 is factory configured with either RS232 Serial/AUX or ISDN BRI S/T or V.92 fixed WAN backup. Both models include one console port and one auxiliary port. Provides high-speed LAN connectivity, redundant WAN connectivity and flexible management.

Network segmentation - Security zones, virtual LANs and virtual routers allow administrators to deploy security policies to isolate guests, wireless networks and regional servers or databases. Facilitates deployment of internal security to prevent unauthorized access, contain attacks and assist in achieving regulatory compliance.

Interface modularity - Two interface expansion slots (SSG20 only) supporting optional ADSL 2+, T1, E1, ISDN BRI S/T, Serial, SFP and v.92 Mini physical interface modules (Mini-PIMs). Delivers combination of LAN and WAN connectivity on top of unmatched security to reduce costs and extend investment protection.

Robust routing engine - Proven routing engine supports OSPF, BGP, and RIP v1/2. Enables the deployment of a consolidated security and routing device, thereby lowering operational and capital expenditures.

802.11 a/b/g wireless-specific security features - Wireless-specific privacy and authentication features augment the UTM security capabilities to protect wireless traffic. Provides additional device consolidation opportunities (WLAN access point, security, routing) for small office environment. Serial and SFP Mini-PIMs only supported in ScreenOS 6.0 or greater releases

Juniper Networks Unified Access Control enforcement point - Interacts with the centralized policy management engine (IC Series) to enforce session-specific access control policies using criteria such as user identity, device security state and network location. Improves security posture in a cost-effective manner by leveraging existing customer network infrastructure components and best-in-class technology.

Management flexibility - Use any one of three mechanisms, command line interface (CLI), WebUI or Juniper Networks Network and Security Manager (NSM) to securely deploy, monitor and manage security policies. Enables management access from any location, eliminating onsite visits thereby improving response time and reducing operational costs.

World-class professional services - From simple lab testing to major network implementations, Juniper Networks Professional Services will collaborate with your team to identify goals, define the deployment process, create or validate the network design and manage the deployment. Transforms the network infrastructure to ensure that it is secure, flexible, scalable and reliable.