Juniper NS-500ES-FE2-AC Datasheet

Juniper
Brand
Juniper
Model
NS-500ES-FE2-AC
Category
Hardware firewalls
Type
Datasheet

This manual is also suitable for

J
J
u
u
n
n
i
i
p
p
e
e
r
r
N
N
e
e
t
t
w
w
o
o
r
r
k
k
s
s
N
N
e
e
t
t
S
S
c
c
r
r
e
e
e
e
n
n
-
-
5
5
0
0
0
0
((11))
M
M
a
a
x
x
i
i
m
m
u
u
m
m
P
P
e
e
r
r
f
f
o
o
r
r
m
m
a
a
n
n
c
c
e
e
a
a
n
n
d
d
C
C
a
a
p
p
a
a
c
c
i
i
t
t
y
y
((11))
S
creenOS version support ScreenOS 5.4
F
irewall performance 700 Mbps
3DES+SHA-1 performance 250 Mbps
Concurrent sessions
(2)
250,000
New Sessions/Second 7,000
Po
licies
(2)
20,000
I
nterfaces 8
10/10
0 or mini-GBIC
(SX or LX), 4 GBIC (SX or LX)
M
M
o
o
d
d
e
e
o
o
f
f
O
O
p
p
e
e
r
r
a
a
t
t
i
i
o
o
n
n
Layer 2 mode (transparent mode)
(4)
Yes
Layer 3 mode (route and/or NAT mode) Yes
NAT (Network Address Translation) Yes
PAT (Port Address Translation) Yes
Policy-based NAT Yes
Virtual IP 4
Mapped IP
(3)
4,096
MIP/VIP Grouping Yes
Users supported Unrestricted
F
F
i
i
r
r
e
e
w
w
a
a
l
l
l
l
Number of network attacks detected 31
Network attack detection Yes
DoS and DDoS protections Yes
TCP reassembly for fragmented packet protection Yes
Malformed packet protections Yes
Deep Inspection (DI) firewall Yes
Protocol anomaly Yes
IPS (Deep Inspection) firewall Yes
Stateful protocol signatures Yes
Content Inspection Yes
Embedded antivirus
No
Malicious Web filtering up to 48 URLs
External Web filtering (Websense or SurfControl) Yes
Integrated Web filtering No
Brute force attack mitigation Yes
Deep Inspection (DI) att
ack pattern obfuscation Yes
SYN cookie Yes
Z
one-based IP spoofing
Yes
V
V
P
P
N
N
Site-to-site VPN tunnels
(2)
up to 5,000
Remote access VPN tunnels 10,000
(3)
T
unnel interfaces up to 1,024
DES (56-bit), 3DES (168-bit) and AES encryption
Y
es
MD-5 and SHA-1 authentication Yes
Manual K
e
y
, IKE, PKI (X.509)
Y
es
Perfect forward secrecy (DH Groups) 1,2,5
Prevent replay attack Yes
R
emote access VPN
Y
es
L2TP within IPSec Yes
Dead Peer Detection Yes
IPSec NAT Traversal Yes
R
edundant VPN gate
ways Yes
VPN tunnel monitor Yes
F
F
i
i
r
r
e
e
w
w
a
a
l
l
l
l
a
a
n
n
d
d
V
V
P
P
N
N
U
U
s
s
e
e
r
r
A
A
u
u
t
t
h
h
e
e
n
n
t
t
i
i
c
c
a
a
t
t
i
i
o
o
n
n
Built-in (internal) database – user limit
(2)
up to 1,500
3rd Party user authentication RADIUS, RSA SecurID, 802.1X and LDAP
XA
UTH VPN authentication Yes
W
eb-based authentication
Yes
J
J
u
u
n
n
i
i
p
p
e
e
r
r
N
N
e
e
t
t
w
w
o
o
r
r
k
k
s
s
N
N
e
e
t
t
S
S
c
c
r
r
e
e
e
e
n
n
-
-
5
5
0
0
0
0
((11))
P
P
K
K
I
I
S
S
u
u
p
p
p
p
o
o
r
r
t
t
P
KI Certificate requests (PKCS 7 and PKCS 10) Yes
A
utomated certificate enrollment (SCEP) Yes
Online Certificate Status Protocol (OCSP) Yes
Self Signed Certificates Yes
Certificate Authorities Supported
Ve
risign Yes
E
ntrust Ye
s
Microsoft Yes
RSA Keon Yes
iPlanet (Netscape) Yes
Baltimore Yes
DOD PKI Yes
L
L
o
o
g
g
g
g
i
i
n
n
g
g
/
/
M
M
o
o
n
n
i
i
t
t
o
o
r
r
i
i
n
n
g
g
Syslog (multiple servers) External, up to 4 servers
E-mail (2 addresses) Yes
NetIQ WebTrends External
SNMP (v1, v2) Yes
Standard and custom MIB Yes
Traceroute Yes
V
V
i
i
r
r
t
t
u
u
a
a
l
l
i
i
z
z
a
a
t
t
i
i
o
o
n
n
Maximum number of Virtual Systems
(5)
0 Default, upgradeable to 25
Maximum number of security zones
(5)
8 default, upgradeable to 58
Maximum number of virtual routers
(5)
3 default, upgradeable to 28
Number of VLANs supported 100 per port
R
R
o
o
u
u
t
t
i
i
n
n
g
g
OSPF/BGP dynamic routing
(
2)
up to 8 instances each
RIPv1/v2 dynamic routing
(2)
Up to 256 instances
Static routes 8,192
Sour
ce Based R
outing, Source Interface Based Routing Yes
Equal cost multi-path routing Yes
H
H
i
i
g
g
h
h
A
A
v
v
a
a
i
i
l
l
a
a
b
b
i
i
l
l
i
i
t
t
y
y
(
(
H
H
A
A
)
)
A
ctive/A
ctiv
e
Y
es
Active/Passive Yes
Redundant Interfaces Yes
Configuration synchronization Yes
Session synchronization for firewall and VPN Yes
Device failure detection Yes
Link f
ailur
e detection
Yes
A
uthentication f
or ne
w HA member
sYes
Encryption of HA traffic Yes
LD
AP and RADIUS serv
er f
ailo
v
er
Yes
V
V
o
o
I
I
P
P
H.323 ALG Yes
SIP AL
G
Y
es
SCCP ALG Yes
MGCP ALG Yes
NAT for H.323/SIP/MGCP/SCCP Yes
I
I
P
P
A
A
d
d
d
d
r
r
e
e
s
s
s
s
A
A
s
s
s
s
i
i
g
g
n
n
m
m
e
e
n
n
t
t
Static Yes
DHCP
, PPP
oE client
No
Internal DHCP server No
DHCP Relay Yes
The NetScreen-500 is a purpose-built, security system designed to provide a flexible, high performance
solution for medium and large enterprise central sites and service providers. The NetScreen-500
security system integrates firewall, DoS, VPN and traffic management functionality in a low-profile,
modular chassis. It provides high levels of total throughput for firewall and VPN plus support for virtual
systems and security zones. Combined with a flexible and resilient hardware architecture incorporating
modular physical interfaces, redundant power supplies, fans and high availability interfaces, the
NetScreen-500 exceeds most enterprises’ typical traffic conditions. It is well suited to match the peak
load and strong deterrence requirements of the most demanding environments.
P
age 1
Datasheet
Juniper Networks NetScreen-500
J
J
u
u
n
n
i
i
p
p
e
e
r
r
N
N
e
e
t
t
w
w
o
o
r
r
k
k
s
s
N
N
e
e
t
t
S
S
c
c
r
r
e
e
e
e
n
n
-
-
5
5
0
0
0
0
((11))
R
R
A
A
D
D
I
I
U
U
S
S
A
A
c
c
c
c
o
o
u
u
n
n
t
t
i
i
n
n
g
g
R
ADIUS Start/Stop Yes
S
S
y
y
s
s
t
t
e
e
m
m
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
W
ebUI (HTTP and HTTPS) Yes
C
ommand Line Interface (console) Yes
Command Line Interface (telnet) Yes
Command Line Interface (SSH) Yes, v1.5 and v2.0 compatible
NetScreen-Security Manager Yes
A
ll management via VPN tunnel on any interface Yes
S
NMP Full Custom MIB Yes
R
apid deployment No
A
A
d
d
m
m
i
i
n
n
i
i
s
s
t
t
r
r
a
a
t
t
i
i
o
o
n
n
L
ocal administrators database 20
E
xternal administrator database RADIUS/LDAP/SecurID
R
estricted administrative networks 6
Root Admin, Admin, and Read Only user levels Yes
Software upgrades TFTP/WebUI/SCP/NSM
Configuration Roll-back Yes
T
T
r
r
a
a
f
f
f
f
i
i
c
c
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
Guara
nteed bandwidth Ye
s
Maximum bandwidth Yes
Ingress Tra
ffic Policing Yes
P
riority-bandwidth utilization Yes
DiffServ stamp Yes
E
E
x
x
t
t
e
e
r
r
n
n
a
a
l
l
F
F
l
l
a
a
s
s
h
h
PCMCIA (PC Card) Supports 96, 128, 440, and 512 MB
Event logs and alarms Yes
System config script Yes
NetScreen ScreenOS software Yes
D
D
i
i
m
m
e
e
n
n
s
s
i
i
o
o
n
n
s
s
a
a
n
n
d
d
P
P
o
o
w
w
e
e
r
r
Dimensions (H/W/L) 3.5/17.5/17 inches
Weight 27 lbs.
Rack mountable 19” standard, 23” optional
Power Supply (AC) 90 to 264 VAC, 100 watts
Power Supply (DC) -36 to -72 VDC, 100 watts
Licensing Options: The NetScreen-500 is available with two licensing options to provide
tw
o different levels of functionality and capacity.
Advanced Models: The A
dvanced software license provides all of the features and
capacities listed within this specsheet.
Baseline Models: The Baseline software license provides an entry-level solution for
customer environments where features such as Deep Inspection™, OSPF and BGP
dynamic routing, advanced High Availabilty, and full capacity are not critical
requirements. The following table shows the features and capacities that are different
than the Advanced models:
NetScreen-500 Baseline
Sessions 128,000
Concurrent VPN tunnels 1,000
Deep Inspection Firewall N/A
OSPF/BGP N/A
High Availability (HA) Active/Passive only
NetScreen Security Manager Supported
C
C
e
e
r
r
t
t
i
i
f
f
i
i
c
c
a
a
t
t
i
i
o
o
n
n
s
s
Safety Certifications
UL, CUL, CSA, CB
E
MC Certifications
F
CC class A, BSMI Class A, CE class A, C-Tick, VCCI class A
E
E
n
n
v
v
i
i
r
r
o
o
n
n
m
m
e
e
n
n
t
t
O
perational temperature: 32° to 122° F, 0° to 50° C
N
on-operational temperature: -4° to 158° F, -20° to 70° C
H
umidity: 10 to 90% non-condensing
M
M
T
T
B
B
F
F
(
(
B
B
e
e
l
l
l
l
c
c
o
o
r
r
e
e
m
m
o
o
d
d
e
e
l
l
)
)
6
.5 years
S
S
e
e
c
c
u
u
r
r
i
i
t
t
y
y
C
C
e
e
r
r
t
t
i
i
f
f
i
i
c
c
a
a
t
t
i
i
o
o
n
n
s
s
(
(
A
A
d
d
v
v
a
a
n
n
c
c
e
e
d
d
m
m
o
o
d
d
e
e
l
l
s
s
o
o
n
n
l
l
y
y
)
)
Common Criteria: EAL4
FIPS 140-2: Level 2
I
CSA Firewall and VPN
O
O
r
r
d
d
e
e
r
r
i
i
n
n
g
g
I
I
n
n
f
f
o
o
r
r
m
m
a
a
t
t
i
i
o
o
n
n
P
P
r
r
o
o
d
d
u
u
c
c
t
t
P
P
a
a
r
r
t
t
N
N
u
u
m
m
b
b
e
e
r
r
J
J
u
u
n
n
i
i
p
p
e
e
r
r
N
N
e
e
t
t
w
w
o
o
r
r
k
k
s
s
N
N
e
e
t
t
S
S
c
c
r
r
e
e
e
e
n
n
-
-
5
5
0
0
0
0
S
S
P
P
B
B
u
u
n
n
d
d
l
l
e
e
s
s
N
etScreen-500 System SX GBIC, AC power NS-500SP-GB1-AC
N
etScreen-500 System SX GBIC, DC power NS-500SP-GB1-DC
N
etScreen-500 System SX dual-GBIC, AC power NS-500SP-GB2-AC
N
etScreen-500 System SX dual-GBIC, DC power NS-500SP-GB2-DC
SP Systems include 25 Virtual Systems and 2 power supplies
J
J
u
u
n
n
i
i
p
p
e
e
r
r
N
N
e
e
t
t
w
w
o
o
r
r
k
k
s
s
N
N
e
e
t
t
S
S
c
c
r
r
e
e
e
e
n
n
-
-
5
5
0
0
0
0
E
E
S
S
B
B
u
u
n
n
d
d
l
l
e
e
s
s
NetScreen-500 System 2 SX GBIC modules,
2 AC power supplies NS-500ES-GB1-AC
NetScreen-500 System 2 SX GBIC modules,
2 DC power supplies NS-500ES-GB1-DC
NetScreen-500 System 2 SX dual-GBIC modules,
2 AC power supplies NS-500ES-GB2-AC
NetScreen-500 System 2 SX dual-GBIC modules,
2 DC power supplies NS-500ES-GB2-DC
NetScreen-500 System 3 dual-10/100 modules,
2 AC power supplies NS-500ES-FE1-AC
NetScreen-500 System 3 dual-10/100 modules,
2 DC power supplies NS-500ES-FE1-DC
NetScreen-500 System 2 dual-10/100 modules,
1 AC power supply NS-500ES-FE2-AC
NetScreen-500 System 2 dual-10/100 modules,
1 DC power supply NS-500ES-FE2-DC
ES Systems include 0 Virtual Systems.
J
J
u
u
n
n
i
i
p
p
e
e
r
r
N
N
e
e
t
t
w
w
o
o
r
r
k
k
s
s
N
N
e
e
t
t
S
S
c
c
r
r
e
e
e
e
n
n
-
-
5
5
0
0
0
0
B
B
a
a
s
s
e
e
l
l
i
i
n
n
e
e
S
S
y
y
s
s
t
t
e
e
m
m
s
s
NetScreen-500 System 2 dual-10/100 modules, 1 AC power supply NS-500B-FE2
NetScreen-500 System 2 SX GBIC modules, 1 AC power supply NS-500B-GB1
J
J
u
u
n
n
i
i
p
p
e
e
r
r
N
N
e
e
t
t
w
w
o
o
r
r
k
k
s
s
N
N
e
e
t
t
S
S
c
c
r
r
e
e
e
e
n
n
-
-
5
5
0
0
0
0
V
V
i
i
r
r
t
t
u
u
a
a
l
l
S
S
y
y
s
s
t
t
e
e
m
m
U
U
p
p
g
g
r
r
a
a
d
d
e
e
s
s
Upgrade to 5 Virtual Systems NS-500-VSYS-5
Upgrade from 5 to 10 Virtual Systems NS-500-VSYS-10
Upgrade from 10 to 25 Virtual Systems NS-500-VSYS-25
Ev
ery Virtual Sy
stem includes one virtual r
outer and 2 security zones, usable in the virtual
or r
oot sy
stem.
(1) Performance, capacity and features listed are based upon systems running ScreenOS 5.4 and are the measured maximums
under ideal testing conditions unless otherwise noted. Actual results may vary based on ScreenOS release and by
deployment.
(2)
Shar
ed among all Virtual Sy
stems
(3) Not available with Virtual Systems
(4) The following features are not supported in Layer 2 (transparent mode): NAT, PAT, policy based NAT, virtual IP, mapped IP,
virtual sy
stems
, virtual r
outer
s
, VLANs
, OSPF
, BGP, RIPv2, Active/Active HA, and IP address assignment.
(5) Requires purchase of virtual system key. Every virtual system includes one virtual router and two security zones, usable in
the virtual or root system.
Page 2
Copyright 2006, Juniper Networks, Inc. All rights reserved. Juniper Networks and the Juniper Networks logo are registered trademarks of Juniper
Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered trademarks, or registered service marks in
this document are the property of Juniper Networks or their respective owners. All specifications are subject to change without notice. Juniper
Networks assumes no responsibility for any inaccuracies in this document or for any obligation to update information in this document. Juniper
Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
110005-007 July 2006
CCOORRPPOORRAATTEE HHEEAADDQQUUAARRTTEERRSS
AANNDD SSAALLEESS HHEEAADDQQUUAARRTTEERRSS
FFOORR NNOORRTTHH AANNDD SSOOUUTTHH AAMMEERRIICCAA
Juniper Networks, Inc.
1194 North Mathilda Avenue
Sunnyvale, CA 94089 USA
Phone: 888-JUNIPER (888-586-4737)
or 408-745-2000
Fax: 408-745-2100
wwwwww..jjuunniippeerr..nneett
EEAASSTT CCOOAASSTT OOFFFFIICCEE
Juniper Networks, Inc.
10 Technology Park Drive
Westford, MA 01886-3146 USA
Phone: 978-589-5800
Fax: 978-589-0800
AASSIIAA PPAACCIIFFIICC RREEGGIIOONNAALL
SSAALLEESS HHEEAADDQQUUAARRTTEERRSS
Juniper Networks (Hong Kong) Ltd.
Suite 2507-11, Asia Pacific Finance Tower
Citibank Plaza, 3 Garden Road
Central, Hong Kong
Phone: 852-2332-3636
Fax: 852-2574-7803
EEUURROOPPEE,, MMIIDDDDLLEE EEAASSTT,, AAFFRRIICCAA
RREEGGIIOONNAALL SSAALLEESS HHEEAADDQQUUAARRTTEERRSS
Juniper Networks (UK) Limited
Juniper House
Guildford Road
Leatherhead
Surrey, KT22 9JH, U. K.
Phone: 44(0)-1372-385500
Fax: 44(0)-1372-385501
  • Page 1 1
  • Page 2 2

Juniper NS-500ES-FE2-AC Datasheet

Juniper
Brand
Juniper
Model
NS-500ES-FE2-AC
Category
Hardware firewalls
Type
Datasheet
This manual is also suitable for
Download PDF
report

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI

Related papers

Other documents