Catalogs >
Juniper Networks >
SSG140 Secure Services Gateway

SSG140 Secure Services Gateway
6Pages

Catalog excerpts

DATASHEET SSG140 Secure Services Gateway Product Overview The SSG140 Secure Services Gateway is a purpose-built security appliance that delivers a perfect blend of performance, security, routing and LAN/WAN connectivity for medium sized branch offices and business deployments. Traffic flowing in and out of the branch office or business is protected from worms, spyware, trojans, and malware by a complete set of Unified Threat Management security features that include stateful firewall, IPsec VPN, intrusion prevention system (IPS), antivirus (includes antispyware, antiadware, antiphishing), antispam and Web filtering. Product Description The Juniper Networks® SSG140 Secure Services Gateway is a high-performance security platform for branch offices and small/medium sized standalone businesses that want to stop internal and external attacks, prevent unauthorized access, and achieve regulatory compliance. The SSG140 is a modular platform that delivers more than 350 Mbps of stateful firewall traffic and 100 Mbps of IPsec VPN traffic. Security: Protection against worms, viruses, trojans, spam, and emerging malware is delivered by proven unified threat management (UTM) security features that are backed by best-in-class partners. To address internal security requirements and facilitate regulatory compliance, the SSG140 supports an advanced set of network protection features such as security zones, virtual routers and VLANs that allow administrators to divide the network into distinct, secure domains, each with its own unique security policy. Policies protecting each security zone can include access control rules and inspection by any of the supported UTM security features. Connectivity and Routing: The SSG140 supports ten on-board interfaces (eight 10/100 plus two 10/100/1000) complemented by four I/O expansion slots that can house additional LAN and WAN interfaces (T1, E1, ADSL2/2+, G.SHDSL, ISDN BRI S/T, Serial, and 10/100/100), making the SSG140 the most extensible security platform in its class. This broad array of I/O options coupled with WAN protocol and encapsulation support in its routing engine make the SSG140 a platform that can easily be deployed as a traditional branch office router or as a consolidated security and routing device to reduce CapEx and OpEx. Access Control Enforcement: The SSG140 can act as an enforcement point in a Juniper Networks Unified Access Control (UAC) deployment with the simple addition of the IC Series Unified Access Control Appliance. The IC Series functions as a central policy management engine, interacting with the SSG140 to augment or replace the firewallbased access control with a solution that grants/denies access based on more granular criteria that include endpoint state and user identity, in order to accommodate the dramatic shifts in attack landscape and user characteristics. World Class Support: From simple lab testing to major network implementations, Juniper Networks Professional Services will collaborate with your team to identify goals, define the deployment process, create or validate the network design, and manage the deployment to its successful conclusion. 1

Open the catalog to page 1

Branch Office Headquarters WWW ZONE A Internet SSG140 M7i ISG2000 ZONE B The SSG140 deployed at a branch office for secure Internet connectivity and site-to-site VPN to corporate headquarters. Internal branch office resources are protected with unique security policies for each security zone. Features and Benefits Feature Feature Description Benefit High performance Purpose-built platform is assembled from custom-built hardware, powerful processing and a security-specific operating system. Delivers performance headroom required to protect against internal and external attacks now and into...

Open the catalog to page 2

Product Options Unified Threat Management/ Content Security (high memory option required) The SSG140 can be configured with any combination of the following best-in-class UTM and content security functionality: antivirus (includes antispyware, antiphishing), IPS (Deep Inspection), Web filtering, and/or antispam. Four SSG140 interface expansion slots support optional Tl, El, ISDN BRI S/T, ADSL2/2+, G.SHDSL and serial physical interface modules (PIMs), and 10/100/1000 and SFP universal PIMs (UPIMS). SSG140 high memory model only Maximum Performance and Capacity ScreenOS version tested...

Open the catalog to page 3

Specifications (continued) PKI certificate requests (PKCS 7 and Automated certificate enrollment (SCEP) Online Certificate Status Protocol (OCSP) Certificate Authorities supported Self signed certificates Verisign, Entrust, iPlanet (Netscape) OSPF instances OSPF routes Static routes Source-based routing Policy-based routing Equal-cost multipath (ECMP) Reverse Forwarding Path (RFP) Internet Group Management Protocol IGMP Proxy Protocol Independent Multicast (PIM) single mode Multicast inside IPsec tunnel Multilink Point-to-Point Protocol (MLPPP) MLPPP max physical interfaces Frame relay...

Open the catalog to page 4

Specifications (continued) System Management Dimensions and Power WebUI (HTTP and HTTPS) Yes Command line interface (console) Yes Command line interface (telnet) Yes Command line interface (SSH) Yes – v1.5 and v2.0 compatible Network and Security Manager (NSM) Yes All management via VPN tunnel on any interface Yes Rapid deployment Dimensions (W x H x D) No Weight 10.2 lb (4.63 kg) Rack mountable Yes, 1RU Power supply (AC) 100-240 VAC, AC Input line frequency 50 Hz or 60 Hz AC system current rating 2 A Maximum thermal output 580 BTU/hour (170 W) Noise Level Administration 17.5 x 1.8 x 15 in...

Open the catalog to page 5

Juniper Networks Services and Support Juniper Networks is the leader in performance-enabling services that are designed to accelerate, extend, and optimize your high-performance network. Our services allow you to maximize operational efficiency while reducing costs and minimizing risk, achieving a faster time to value for your network. Juniper Networks ensures operational excellence by optimizing the network to maintain required levels of performance, reliability, and availability. For more details, please visit www.juniper.net/us/en/ products-services. Ordering Information Model Number...

Open the catalog to page 6