System Management - Juniper SSG140 Product Overview

Specifications
(continued)

System Management

WebUI (HTTP and HTTPS)
Command line interface (console)
Command line interface (telnet)
Command line interface (SSH)
Network and Security Manager (NSM)
All management via VPN tunnel on any
interface
Rapid deployment
Administration
Local administrator database size
External administrator database support
Restricted administrative networks
Root Admin, Admin, and Read Only user
levels
Software upgrades
Configuration roll-back
Logging/Monitoring
System log (multiple servers)
Email (2 addresses)
NetIQ WebTrends
SNMP (v3)
SNMP full custom MIB
Traceroute
VPN tunnel monitor
External Flash
Additional log storage
Event logs and alarms
System configuration script
ScreenOS Software
IPS (Deep Inspection Firewall) Signature Packs
Signature packs provide the ability to tailor the attack protection to the specific deployment and/or attack type. The following signature
packs are available for the SSG140:
Signature Pack Target Deployment
Base Branch offices, small/medium
businesses
Client Remote/branch offices
Server Small/medium businesses
Worm mitigation Remote/branch offices of large
enterprises
yes
yes
yes
yes – v1.5 and v2.0
compatible
yes
yes
No
20
RADIUS, RSA SecureID,
LDAP
6
yes
TFTP, WebUI, NSM, SCP,
USB
yes
yes – up to 4 servers
yes
yes
yes
yes
yes
yes
USB 1.1
yes
yes
yes
Defense Type
Client/server and worm protection
Perimeter defense, compliance for hosts
(for example desktops)
Perimeter defense, compliance for
server infrastructure
Most comprehensive defense against
worm attacks
Dimensions and Power
Dimensions (W x H x D)
Weight
Rack mountable
Power supply (AC)
Maximum thermal output
Noise Level
Certifications
Safety certifications
Electromagnetic compatibility (EMC)
certifications
Network Equipment Building System
(NEBS)
Mean time between failures (MTBF)
(Bellcore model)
Security Certifications
Common Criteria: EAL4
FIPS 140-2: Level 2
ICSA Firewall and VPN
Operating Environment
Operating temperature
Non-operating temperature
Humidity
(1) Performance, capacity and features listed are based upon systems running ScreenOS 6.2
and are the measured maximums under ideal testing conditions unless otherwise noted.
Actual results may vary based on ScreenOS release and deployment. For a complete list of
supported ScreenOS versions for SSG Series gateways, please visit the Juniper Customer
Support Center (www.juniper.net/customers/support/) and click on ScreenOS Software
Downloads.
(2) IMIX stands for Internet mix and is more demanding than a single packet size as it represents
a traffic mix that is more typical of a customer's network. The IMIX traffic used is made up
of 58.33% 64 byte packets + 33.33% 570 byte packets + 8.33% 1518 byte packets of UDP
traffic.
(3) UTM Security features (IPS/Deep Inspection, antivirus, antispam and Web filtering) are
delivered by annual subscriptions purchased separately from Juniper Networks. Annual
subscriptions provide signature updates and associated support. The high memory option is
required for UTM Security features.
(4) Redirect Web filtering sends traffic from the firewall to a secondary server. The redirect
feature is free, however it does require the purchase of a separate Web filtering license from
either Websense or SurfControl.
(5) NAT, PAT, policy-based NAT, virtual IP, mapped IP, virtual systems, virtual routers, VLANs,
OSPF, BGP, RIPv2, active/active HA and IP address assignment are not available in layer 2
transparent mode.
17.5 x 1.8 x 15 in
(44.5 x 4.5 x 38.1 cm)
10.2 lb (4.63 kg)
yes, 1RU
100-240 VAC,
AC Input line frequency
50 Hz or 60 Hz
AC system current
rating 2 A
580 BTU/hour (170 W)
48.8 dB
UL, CUL, CSA, CB
FCC class B, CE class B
No
16 years
yes (ScreenOS 6.2)
yes
yes
32° to 104° F
(0° to 40° C)
-4° to 158° F
(-20° to 70° C)
10% to 90%
noncondensing
Type of Attack Object
Range of signatures and protocol
anomalies
Attacks in the server-to-client direction
Attacks in the client-to-server direction
Worms, trojans, backdoor attacks
5