DATASHEET SA Series SSL VPN Appliances SA2500, SA4500, SA6500 Product Overview Juniper Networks SA Series SSL VPN Appliances provide a complete range of remote access appliances for all size companies, as well as Juniper Networks SA Series SSL VPN Virtual Appliances (see separate datasheet). The SA Series includes Juniper Networks Junos Pulse, which provides a simple, intuitive enabling user interface that provides secure, authenticated access for mobile and remote users from any web-enabled device The SA Series combines the security of SSL with standards-based access controls, granular policy creation, and unparalleled flexibility. The result is ubiquitous security for all enterprise tasks, with options for increasingly stringent access control to protect the most sensitive applications and data, and deliver lower total cost of ownership over traditional IPsec client solutions. Product Description The Juniper Networks® SA2500, SA4500, and SA6500 SSL VPN Appliances meet the needs of companies of all sizes. SA Series SSL VPN Appliances use SSL, the security protocol found in all standard Web browsers. The use of SSL eliminates the need for pre-installed client software, changes to internal servers, and costly ongoing maintenance and desktop support. The SA Series also offers sophisticated partner/customer extranet features that enable controlled access to differentiated users and groups without requiring infrastructure changes, demilitarized zone (DMZ) deployments, or software agents. The SA Series includes Juniper Networks Junos® Pulse, a dynamic, integrated, multiservice network interface for mobile and nonmobile devices. Junos Pulse enables optimized, accelerated, anytime, anywhere access to corporate networks, clouds, and the data they hold. Junos Pulse enables secure SSL access from a wide range of mobile and nonmobile devices, including smartphones, tablets, laptops, and desktop PCs, as well as Wi-Fi or 3G/4G and Long Term Evolution (LTE)-enabled devices. Junos Pulse delivers enterprises improved productivity and secure, ubiquitous access to corporate applications and data— anytime, anywhere. Architecture and Key Components The SA2500 SSL VPN Appliance enables small to medium-sized businesses (SMBs) to deploy granular, cost-effective mobile and remote network and cloud access, as well as intranet security and business continuity in case of disaster or emergency. Users can access the corporate resources and applications from any endpoint device over the Web. The SA2500 offers high availability (HA) with seamless user failover. And because the SA2500 runs the exact same software as the larger SA4500 and SA6500, even smaller organizations gain the same high performance, administrative flexibility, and end user experience. The SA4500 SSL VPN Appliance enables mid- to large-sized organizations to provide efficient, role-based corporate network, cloud, and application access to mobile and remote employees, as well as authorized contractors and partners, requiring only a Web browser connected to the Internet. The SA4500 features rich access privilege management functionality that can be used to create secure customer/partner extranets and to enable secure access to the corporate intranet, so that employees and other authorized users can use the same access means but with differentiated, role-based access while still adhering to enterprise security policies. Built-in compression for all traffic types speeds performance, and SSL acceleration is available for more demanding environments. The SA4500 also offers HA with seamless user failover. 1

The SA6500 SSL VPN Appliance is purpose-built for large enterprises and service providers. It features best-in-class performance, scalability, and redundancy for organizations with high volume secure access and authorization requirements. Additionally, the SA6500 offers HA with seamless user failover. The SA6500 also features a built-in compression for Web and files, and a state-of-the-art SSL acceleration chipset to speed CPU-intensive encryption/decryption processes. Because each of the SA Series SSL VPN Appliances runs the same software, there is no need to compromise user or administrator...

High Scalability Support on SA6500 SSL VPN Appliance • Three-unit cluster of SA6500 devices: Supports up to 26,000 concurrent users The SA6500 is designed to meet the growing needs of large enterprises and service providers with its ability to support thousands of users accessing the network remotely. The following list shows the number of concurrent users that can be supported on the SA6500 platform: All performance testing is done based on real-world scenarios with simulation of traffic based on observed customer networks. • Single SA6500 device: Supports up to 10,000 concurrent users • Two-unit...

Ease of Administration In addition to enterprise-class security benefits, the SA2500, SA4500, and SA6500 appliances have a wealth of features that make it easy for the administrator to deploy and manage. Table 2: Ease of Administration Features and Benefits Feature Feature Description Benefits Bridge certificate authority (CA) support Enables the SA Series to support federated public key infrastructure (PKI) deployments with client certificate authentication. Bridge CA is a PKI extension (as specified in RFC 5280) to cross-certify client certificates that are issued by different trust anchors...

Table 3: Access Privilege Management Features and Benefits Feature Feature Description Benefits UAC-SA federation Seamlessly provision SA Series user sessions into Juniper Networks Unified Access Control upon login—or the alternative (provisioning of UAC sessions into the SA Series). Users need to authenticate only one time to get access in these types of environments. Provides users—whether remote or local—seamless access with a single login to corporate resources that are protected by access control policies from UAC or the SA Series. Simplifies the end user experience. Certificate authentication...