Datasheet
7
SSG5 BASE/EXTENDED SSG20 BASE/EXTENDED
High Availability (HA)
(7)
Active/Active - L3 mode Yes Yes
Active/Passive -Transparent & L3 mode Yes Yes
Configuration synchronization Yes Yes
Session synchronization for firewall and VPN Yes Yes
Session failover for routing change Yes Yes
VRRP Yes Yes
Device failure detection Yes Yes
Link failure detection Yes Yes
Authentication for new HA members Yes Yes
Encryption of HA trac Yes Yes
System Management
WebUI (HTTP and HTTPS) Yes Yes
Command line interface (console) Yes Yes
Command line interface (telnet) Yes Yes
Command line interface (SSH) Yes v1.5 and v2.0 compatible Yes v1.5 and v2.0 compatible
Network and Security Manager (NSM) Yes Yes
All management via VPN tunnel on any interface Yes Yes
Rapid deployment Yes Yes
Administration
Local administrator database size 20 20
External administrator database support RADIUS, RSA SecurID, LDAP RADIUS, RSA SecureID, LDAP
Restricted administrative networks 6 6
Root Admin, Admin and Read Only user levels Yes Yes
Soware upgrades TFTP, WebUI, NSM, SCP, USB TFTP, WebUI, NSM, SCP, USB
Configuration rollback Yes Yes
Logging/Monitoring
Syslog (multiple servers) Yes - up to 4 servers Yes - up to 4 servers
Email (two addresses) Yes Yes
NetIQ WebTrends Yes Yes
SNMP (v2) Yes Yes
SNMP full custom MIB Yes Yes
Traceroute Yes Yes
VPN tunnel monitor Yes Yes
External Flash
Additional log storage USB 1.1 USB 1.1
Event logs and alarms Yes Yes
System configuration script Yes Yes
ScreenOS Soware Yes Yes
Specifications (continued)