Datasheet

9
ISG1000 ISG2000
External Flash
Additional log storage Supports 1 GB or 2 GB industrial-grade
SanDisk
Supports 1 GB or 2 GB industrial-grade
SanDisk
Event logs and alarms Ye s Ye s
System configuration script Yes Yes
ScreenOS Soware Yes Yes
Dimensions and Power
Dimensions (W x H x D) 17.5 x 5.25 x 17.3 in
(44.5 x 13.3 x 43.9 cm)
17.5 x 5.25 x 23 in
(44.5 x 13.3 x 58.4 cm)
Weight 30 lb/14 kg 50 lb/23 kg
Rack-mountable Yes, 3 RUs Yes, 3 RUs
Power supply (AC) Single, field upgradeable Dual, redundant
Power supply (DC) Single, field upgradeable Dual, redundant
Maximum thermal output 444 BTU/hour (W) 537 BTU/hour (W)
Certifications
Safety certifications UL, CUL, CSA, CB UL, CUL, CSA, CB
EMC certifications FCC class A, CE class A, C-Tick, VCCI class A FCC class A, CE class A, C-Tick, VCCI class A
NEBS Yes Yes
MTBF (Bellcore model) 7.6 years 7.6 years
Security Certifications
Common Criteria: EAL4 and EAL4+ Yes Ye s
FIPS 140-2: Level 2 Yes Ye s
ICSA firewall and VPN Yes Ye s
Operating Environment
Operating temperature 32° to 122° F (0° to 50° C) 32° to 122° F (0° to 50° C)
Nonoperating temperature - 4° to 158° F (-20° to 70° C) - 4° to 158° F (-20° to 70° C)
Humidity 10% to 90% noncondensing 10% to 90% noncondensing
1. Performance, capacity, and features listed are based upon systems running ScreenOS 6.3 and are the measured maximums under ideal testing conditions unless otherwise noted. Actual results
may vary based on ScreenOS release and by deployment. For a complete list of supported ScreenOS versions for ISG1000 and ISG2000 gateways, please visit the Juniper Customer Support Center
(www.juniper.net/customers/support/).
2. Additional IDP license and hardware upgrade required.
3. Concurrent sessions listed are based upon maximums with current shipping ISG Series hardware. Older ISG Series units may need the optional memory upgrade to achieve maximum concurrent
session capacity. Firewall/VPN concurrent sessions maximum for older ISG Series units without the optional memory upgrade are 250,000 for the ISG1000 and 500,000 for the ISG2000. Older
ISG Series units with the optional IDP upgrades installed already have the maximum concurrent session capacity and do not require a memory upgrade.
4. IPS (Deep Inspection firewall) is automatically disabled when optionally integrated IDP is installed.
5. Security features (IPS/Deep Inspection, antispam and Web filtering) are delivered by annual subscriptions purchased separately from Juniper Networks. Annual subscriptions provide signature
updates and associated support.
6. Redirect Web filtering sends traffic to a secondary server and therefore entails purchasing a separate Web filtering license from either Websense or SurfControl.
7. NAT, PAT, policy-based NAT, virtual IP, mapped IP, virtual routers, VLANs, OSPF, BGP, RIPv2, active/active HA, and IP address assignment are not available in layer 2 transparent mode.
8. Shared among all virtual systems.
9. Not available with virtual systems.
10. Additional license required.
11. Requires 4-port mini GBIC modules - NS-ISG-SX4, NS-ISG-LX4 or NS-ISG-TX4.
Specifications (continued)