Juniper Networks - Firewalls
Juniper Networks offers a wide variety of firewall choices all running a single image of the ScreenOS operating system! The firewalls start with units available from under $1,000 USD and offering over 170 Mbps of firewall throughput to demanding enterprise solutions with over 30 Gbps of throughput. The firewall family previously known as Netscreen is available for small branch offices to carrier class environments.
Brief comparison of the Juniper Networks firewall product line:
SRX series - Juniper's latest product line all based on the JUNOS® operating system for branch office and high end enterprise. Models vary from 750 Mbps to more than 120 Gbps. Available from entry levels with high-performance to enterprise ISP class models. Includes SRX210, SRX240, SRX650, SRX3400, SRX3600, SRX5600 and SRX5800. High-end models offers up to 30 Gbps of IDP and 350,000 new connections per second. Now includes anti-spam capabilities from SOPHOS. Includes mew dynamic SSL VPN client delivery capability.
SSG series - Excellent product line based on ScreenOS from entry level 160 Mbps to 1+ Gbps. Models include SSG5, SSG20, SSG140, SSG320M, SSG350M, SSG520M and SSG550M. Scales from the SOHO to Enterprise with the same easy to use operating system and user interface.
ISG series - First model to include optional integrated IDP (Intrusion Detection and Prevention) in two models offering either 2 Gbps or 4 Gbps of firewall throughput. Models include the ISG1000 and ISG2000 running ScreenOS.
Netscreen series - Original NetScreen product line still includes the two high-performance models that offer 10 Gbps or up to 30 Gbps. Models include the Netscreen-5200 and Netscreen-5400 running ScreenOS.
Show firewall models.
Juniper Networks SSG firewall product line offers UTM (Unified Threat Management) features.
All the Juniper firewalls include:
The SSG firewall product line has a comprehensive set of Unified Threat Management (UTM) security features which includes:
The ISG 1000 and ISG 2000 firewalls are available with optional purpose built IDP blades for demanding IDS and IDP requirements.
The 5200 and 5400 offer modular chassis-based security systems for large enterprises. These systems, depending upon the model, include:
Juniper now offers a wide range of affordable and high-performance firewalls with the new SRX firewall product line running JUNOS. With the entry small form-factor firewall providing up to 750 Mbps of firewall capability and an enterprise solution that supports more than 120 Gbps of firewall.
All the firewalls can be optionally centrally managed with Juniper's NSM management product including the new NSM appliance.
Brief comparison of the Juniper Networks firewall product line:
SRX series - Juniper's latest product line all based on the JUNOS® operating system for branch office and high end enterprise. Models vary from 750 Mbps to more than 120 Gbps. Available from entry levels with high-performance to enterprise ISP class models. Includes SRX210, SRX240, SRX650, SRX3400, SRX3600, SRX5600 and SRX5800. High-end models offers up to 30 Gbps of IDP and 350,000 new connections per second. Now includes anti-spam capabilities from SOPHOS. Includes mew dynamic SSL VPN client delivery capability.
SSG series - Excellent product line based on ScreenOS from entry level 160 Mbps to 1+ Gbps. Models include SSG5, SSG20, SSG140, SSG320M, SSG350M, SSG520M and SSG550M. Scales from the SOHO to Enterprise with the same easy to use operating system and user interface.
ISG series - First model to include optional integrated IDP (Intrusion Detection and Prevention) in two models offering either 2 Gbps or 4 Gbps of firewall throughput. Models include the ISG1000 and ISG2000 running ScreenOS.
Netscreen series - Original NetScreen product line still includes the two high-performance models that offer 10 Gbps or up to 30 Gbps. Models include the Netscreen-5200 and Netscreen-5400 running ScreenOS.
Show firewall models.
Juniper Networks SSG firewall product line offers UTM (Unified Threat Management) features.
All the Juniper firewalls include:
- One ScreenOS image across the entire product line, no more juggling with finding the right version
- Stateful firewall inspection to stop application level attacks
- Site-to-site VPN to establish secure communications between offices across the Internet
- Denial of service (DoS) mitigation capabilities
- Virtual Router support to make internal, private or overlapped IP addresses to a new IP address
- Customizable security zones. Multiple interfaces can be bound to a single security zone for ease of administration.
- Transparent mode to allow the device to function as a Layer 2 IP security bridge, providing firewall, VPN and DoS protections with minimal network change
- Management via graphical web UI, CLI (console, telnet or ssh) or Juniper's NSM product
- IPv6 support
- Multiple routing protocols supported including: OSPF, BGP, RIP v1/v2
- Wireless options on some of the products in the SSG family
- Modular expansions in most units to support other WAN or LAN interfaces depending upon the SSG model often replacing existing routers and yielding additional cost savings and recurring expenses
The SSG firewall product line has a comprehensive set of Unified Threat Management (UTM) security features which includes:
- IPS (Deep Inspection IDS capability)
- Best in class antivirus from Kaspersky (includes Anti-Phishing, Anti-Spyware, Anti-Adware) to stop viruses,Trojans and other malware
- Anti-Spam via a partnership with Symantec to block known spammers and phishers
- Web filtering using SurfControl (now Websense) to block access to known malicious download sites or other material deemed inappropriate to your business
The ISG 1000 and ISG 2000 firewalls are available with optional purpose built IDP blades for demanding IDS and IDP requirements.
The 5200 and 5400 offer modular chassis-based security systems for large enterprises. These systems, depending upon the model, include:
- Comprehensive high-availability solutions for sub-second failover between interfaces or devices
- Full mesh configurations
- Support for up to 30 Gbps of firewall throughput and 15 Gbps 3DES VPN
- Maximum 1,000,000 sessions
- Maximum number of 25,000 VPN tunnels
- Maximum number of 40,000 policies
Juniper now offers a wide range of affordable and high-performance firewalls with the new SRX firewall product line running JUNOS. With the entry small form-factor firewall providing up to 750 Mbps of firewall capability and an enterprise solution that supports more than 120 Gbps of firewall.
All the firewalls can be optionally centrally managed with Juniper's NSM management product including the new NSM appliance.
Additional documentation and information
