Datasheet

3
Specifications
(1)
Juniper Networks Juniper Networks
SSG 5 Base/Extended SSG 20 Base/Extended
Maximum Performance and Capacity
(2)
ScreenOS version tested ScreenOS 6.1 ScreenOS 6.1
Firewall performance (Large packets) 160 Mbps 160 Mbps
Firewall performance (IMIX)
(3)
90 Mbps 90 Mbps
Firewall Packets Per Second (64 byte) 30,000 PPS 30,000 PPS
Advanced Encryption Standard (AES) 256+SHA-1 VPN performance 40 Mbps 40 Mbps
3DES encryption +SHA-1 VPN performance 40 Mbps 40 Mbps
Maximum concurrent sessions 8,000/16,000 8,000/16,000
New sessions/second 2,800 2,800
Maximum security policies 200 200
Maximum users supported Unrestricted Unrestricted
Network Connectivity
Fixed I/O 7x10/100 5x10/100
Mini-Physical Interface Module (Mini-PIM) slots 0 2
WAN interface options Factory congured: RS232 Serial Mini-PIMs: 1xADSL 2+, 1xT1,
AUX or ISDN BRI S/T or V.92 1xE1, V.92, ISDN BRI S/T, 1xSFP, 1xSerial
Firewall
Network attack detection Yes Yes
DoS and DDoS protection Yes Yes
TCP reassembly for fragmented packet protection Yes Yes
Brute force attack mitigation Yes Yes
SYN cookie protection Yes Yes
Zone-based IP spoong Yes Yes
Malformed packet protection Yes Yes
Unified Threat Management
(4)
IPS (Deep Inspection rewall) Yes Yes
Protocol anomaly detection Yes Yes
Stateful protocol signatures Yes Yes
IPS/DI attack pattern obfuscation Yes Yes
Antivirus Yes Yes
Instant message AV Yes Yes
Signature database 200,000+ 200,000+
Protocols scanned POP3, HTTP, SMTP, IMAP, FTP, IM POP3, HTTP, SMTP, IMAP, FTP, IM
Anti-spyware Yes Yes
Anti-adware Yes Yes
Anti-keylogger Yes Yes
Anti-spam Yes Yes
Integrated URL ltering Yes Yes
External URL ltering
(5)
Yes Yes
Voice over IP (VoIP) Security
H.323. Application-level gateway (ALG) Yes Yes
SIP ALG Yes Yes
MGCP ALG Yes Yes
SCCP ALG Yes Yes
Network Address Translation (NAT) for VoIP protocols Yes Yes
IPSec VPN
Auto-Connect VPN Yes Yes
Concurrent VPN tunnels 25/40 25/40
Tunnel interfaces 10 10
DES encryption (56-bit), 3DES encryption (168-bit) and
Advanced Encryption Standard (AES) (256-bit) Yes Yes