Межсетевой экран Juniper NS-5200-CHA

Технические характеристики Juniper NS-5200-CHA: NetScreen-5200 Chassis General Information Manufacturer: Juniper Product ID: NS-5200-CHA Product Description: NetScreen-5200 Chassis Product Type: Network Security/Firewall Appliance Marketing Information The Juniper Networks NetScreen 5200 is a high-performance security system designed to deliver a new level of high-performance capabilities for large enterprise, carrier, and data center networks. The NetScreen 5200 security system integrates firewall, DoS and DDoS protection, VPN, and traffic management functionality in lowprofile modular chassis. Built around NetScreen's third generation security ASIC and distributed system architecture, the NetScreen 5200 offers excellent scalability and exibility while providing high levels of security through NetScreen s custom operating system, NetScreen ScreenOS. The NetScreen 5200 employs a switch fabric for data exchange and separate multi-bus channel for control information, delivering scalable performance for the most demanding environments. Technical Information Virtualization: 1000000 x Concurrent Session 26000 x Concurrent Session 40000 x Policies 16000 x Site-to-Site VPN Tunnel 25000 x Concurrent VPN Tunnel 4095 x Tunnel Interface 16 x Security Zone Firewall Protection: Network Attack Detection Denial of Service (DoS) Distributed Denial of Service (DDoS) TCP Reassembly for Fragmented Packet Protection Malformed Packet Attack Deep Inspection Firewall Protocol Anomaly Detection Stateful Protocol Signature Content Inspection URL Filtering Web Filtering Integrated Web Filtering Brute Force Attack Mitigation IP Spoofing Replay Attack Prevention User Authentication Features: PAT Interfaces/Ports Total Number of Ports: 24 Network & Communication Ethernet Technology: Ethernet Network Standard: 10/100Base-TX I/O Expansions Number of Total Expansion Slots: 2 Power Description Input Voltage: 110 V AC 220 V AC Power Source: Power Supply Physical Characteristics Form Factor: Rack-mountable Height: 3.4" Width: 17.5" Depth: 20" Weight (Approximate): 37 lb Miscellaneous Additional Information: MTBF: 7.9 years 8 mini GBIC (SX or LX) or 2 mini GBIC + 24 10/100 Base-T Rack mountable: 23" optional NAT for H.323/SIP Protects against Deep inspection attack pattern obfuscation and Zone-based IP spoofing Self Signed Certificates SYN cookie Supports MS-RPC RADIUS Accounting: Start/Stop Mode of Operation: Layer 2 mode (transparent mode) Layer 3 mode (route and/or NAT mode) Policy-based NAT Virtual IP 64 per VSYS Mapped IP: 10,000 IPSec pass through in NAT mode Firewall and VPN User Authentication: Built-in (internal) database: User limit up to 25,000 3rd Party user authentication: RADIUS, RSA SecurID, and LDAP XAUTH VPN authentication Web-based authentication Routing: OSPF dynamic routing: Up to 8 instances each RIP v1/v2 dynamic routing: up to 512 instances Source-based routing Static routes: 30,000 Equal cost multi-path routing IGMP group High Availability (HA): Active/Active Active/Passive Redundant Interfaces Configuration synchronization Session synchronization for firewall and VPN Session failover for routing change Device failure detection Link failure detection Authentication for new HA members Encryption of HA traffic LDAP & RADIUS server failover IP Address Assignment: Static DHCP relay Certificate Authorities Supported: Verisign Entrust Microsoft RSA Keon iPlanet (Netscape) Baltimore DOD PKI Traffic Management: Maximum bandwidth: Per port DiffServ stamp: per policy External Flash: CompactFlash: Supports 128 or 512 MB Industrial Grade SanDisk Event logs and alarms System config script Certifications & Standards: Safety Certifications: UL CUL CSA CB Austel NEBS Level 3 EMC Certifications: FCC class A BSMI CE class A C-Tick VCCI class A IEEE: IEEE 802.3 IEEE 802.3u Juniper NetScreen-5200 представляет собой шасси с 2 слотами с поддержкой функций межсетевого экрана, VPN, управления трафиком, систему защиты от атак типа "отказ в обслуживании" (DoS) и распределенных атак типа "отказ в обслуживании" (DDoS). Juniper NetScreen-5200 обеспечивает пропускную способность межсетевого экрана до 10 Гбит/с.