Juniper Networks Quick Reference Guide

Quick Reference Guide
Juniper Networks Quick Reference Guide

Juniper Networks Overview

Contents 1
Juniper Networks Overview
Juniper Networks Overview Transforming our Business Partners......................................................................................2 J-Partner Reseller Program Overview ....................................................................................3 Specialization Helps Capture New Opportunity ........................................................3
Juniper Networks transforms the business of networking. A leading global provider of networking and security solutions, Juniper Networks maintains an intense focus on customers who derive strategic value from their networks. Its customers include major network operators, enterprises, government agencies, and research and educational institutions globally. Juniper Networks delivers a portfolio of networking solutions that support the complex scale, security and performance requirements of the worlds most demanding mission-critical networks, including the worlds top 25 service providers and 8 of the top 15 Fortune 500 companies. Juniper Networks was founded with a single mission - to anticipate and solve the industrys most difficult networking and security problems. Today, Juniper Networks is enabling customers worldwide to create a competitive advantage by transforming the business of networking through: Securing networks against increasingly frequent and sophisticated attacks Leveraging networked applications and services that provide a competitive market advantage Providing secure and tailored access to remote resources for customers and business partners Juniper Networks brings a new pace of innovation to the industry through purpose-built platforms and sophisticated software. It is recognized as a center of excellence in the development of silicon and software that support high- performance, intelligent networks, and remains at the forefront of industry initiatives that drive the continuing transformation of these networks and the businesses they support.
Maximizing the Total Financial Opportunity The Juniper TFO...............................3 Juniper Networks Product Portfolio .......................................................................................4 Routers ................................................................................................................................6 Juniper Enterprise Routers at a Glance.....................................................................6 JUNOS Router Software............................................................................................6 J-Series Routers ........................................................................................................8 M-Series Routers .....................................................................................................11 Firewall / IPSec VPN Products .............................................................................................17 NetScreen ScreenOS Software................................................................................18 Small Office / Remote Office Security Solutions.....................................................19 Juniper Networks NetScreen-Hardware Security Client ...........................................21 Juniper Networks NetScreen-5GT ...........................................................................22 Juniper Networks NetScreen-5GT ADSL ..................................................................23 Juniper Networks NetScreen-5GT Wireless .............................................................24 Juniper Networks NetScreen-5XT ...........................................................................26 Regional Office / Medium Enterprise Security Solutions.........................................27 Juniper Networks NetScreen-25 / NetScreen-50 .....................................................29 Juniper Networks NetScreen-204 / NetScreen-208 .................................................30 Central Office / Large Enterprise Security Solutions ...............................................31 Juniper Networks NetScreen-500............................................................................33 Juniper Networks NetScreen-ISG 2000 ...................................................................34 Juniper Networks NetScreen-5200 / NetScreen-5400 .............................................36 Juniper Networks NetScreen-Remote VPN & NetScreen-Remote Security Client ....38 SSL VPN Juniper Networks SSL VPN Appliance Line.............................................................39 Juniper Networks NetScreen-RA 500 Series............................................................40 Juniper Networks NetScreen-SA 1000 Series ..........................................................42 Juniper Networks NetScreen-SA 3000 Series ..........................................................44 Juniper Networks NetScreen-SA 5000 Series ..........................................................46 Intrusion Detection and Prevention (IDP) ...........................................................................48 Security Management Juniper Networks NetScreen-Security Manager ......................................................50 Juniper Networks NetScreen-SA Central Manager...................................................53 Juniper Networks Frequently asked Questions....................................................................54 Product Warranty Information ...............................................................................56 General Disclaimer..............................................................................................................57

2 Transforming our Business Partners

J-Partner Reseller Program Overview 3
Transforming our Business Partners
J-Partner Reseller Program Overview
This compact reference guide gives you all the information needed to help you sell Juniper Networking Solutions. It includes product overviews, key features and benefits, plus essential selling suggestions that will enable you to effectively and efficiently position Juniper Networking solutions.
Juniper Networks revolutionizes the way resellers and vendors work together with the J-Partner Reseller program. Regardless of purchase volume, J-Partner rewards you for the value you add to selling and supporting Juniper Networks solutions. Through specialization and certification options, you gain access to one of the broadest portfolios of networking and security solutions available today.
You can use this quick reference guide to:

Identify key sales opportunities and recommend Juniper Network solutions Identify customer scenarios and cross sell Juniper Networking products Familiarize yourself with the Juniper Networks Product portfolio Get all the extra information that you need when closing a deal.
Specialization Helps Capture New Opportunity

Define your value-add through specialization in one or more Juniper Networks solutions: Enterprise Networking solutions associated with deploying, securing and maintaining enterprise business-critical networks Advanced Security solutions associated with bringing network and application-level protection to high performance networks Service Provider Infrastructure solutions deployed in the core of large service providers to deliver an assured customer experience on their networks J-Partner gives you the flexibility to do business with Juniper Networks in the way that best fits your business model.
Maximizing the Total Financial Opportunity The Juniper TFO

Juniper Networks is committed to the financial health of our partners. The J-Partner Total Financial Opportunity, or TFO, goes beyond pricing and gross margin. We find innovative ways to expand the financial opportunity for you. Beyond product access via specialization and value add pricing, the Juniper Networks TFO includes investment protection for industry certifications earned, flexible service programs, and the J-Rewards personal incentive program. To learn more about the J-Partner Reseller Program, please visit www.juniper.net/partners.
Juniper Networks Product Portfolio

4 Juniper Networks Product Portfolio
Fixed Telecommuter or Small Medium Office (Trusted)
NS J230 0

Juniper Networks Product Portfolio
Branch Office
NS-ID 10 P NS
NetScreen-5GT or - HSC
NS 5GT NS HSC -
J2300
NetScreen-IDP 10
NetScreen-25 or -50
NS25
....
J-series J6300 J4300 J2300 M-series M320 M40e M20 M10i M7i
E-series ERX-1440 ERX-1410 ERX-710 ERX-310 T-series T640 T320
NetScreen-5GT
NetScreen-HSC
or
NS50
....
NetScreen-25
NetScreen-50
Small Medium Office (Untrusted)

Per Application Secure Access to NetScreen-SA 1000/ 3000/ 5000 Network Secure Access to NetScreen-RA 500 Online Collaboration to NetScreen-SM 3000
Regional Office or Medium Central Site

J430 0 NS NS-ID 100 P
Remote or Mobile Employee / Partner / Customer

Remote Mobile Employee Employee Trusted Network Untrusted Network Managed or Unmanaged Device Per Application Secure Access to NetScreen-SA 1000/ 3000/ 5000 Partner Customer Network Secure Access to NetScreen-RA 500 Online Collaboration to NetScreen-SM 3000
J4300
NetScreen-204 or -208
NetScreen-IDP 100
DMZ
NS 204 -
or
NS 208 -
NetScreen-204
NetScreen-208
NS-RA
and
NS-SM
NetScreen-RA 500
NetScreen-Secure Meeting
Firewall & IPSec VPN NetScreen-5200/5400 NetScreen-ISG 2000 NetScreen-500 NetScreen-500 GPRS NetScreen-204/208 NetScreen-25/50 NetScreen-5GT NetScreen-5GT ADSL NetScreen-5XT NetScreen-HSC SSL VPN NetScreen-SA 5000 NetScreen-SA 5000 FIPS NetScreen-SA 3000 NetScreen-SA 3000 FIPS NetScreen-SA 1000 NetScreen-RA 500 Intrusion Detection & Prevention NetScreen-IDP 1000 NetScreen-IDP 500 NetScreen-IDP 100 NetScreen-IDP 10
SDX-300
M40e
M320
SDX-300
Software-based Service Delivery System that enables rapid creation deployment of new IP services for Juniper Networks router solutions
ERX1410
ERX710 ERX1440
M20
INTERNET
INFRANET CORE
IP/MPLS
LAYER 2/FRAME RELAY/ATM
M7i
or
M10i
or M20
or M40e
or M320
M7i
M10i
T320
T640
ERX310
Broadband Edge
or or ERX1410 ERX1440
or
or ERX710
ERX310
T320
T640
DMZ
NS-ID 500 P
M10i
Juniper J6300, M7i or M10i
J630
M10i
or
M7i
or M10i
Secure Meeting NetScreen-SM 3000
J6300
NS-S 3000M
M7i
NetScreen-IDP 500 Zone 1 Zone 2 Zone 3
NetScreen-Secure Meeting
NS-SA Serie s
NetScreen-Secure Access (SSL VPN)

NS-SA 1000
NS5400
NetScreen-500, ISG 2000-5200, or -5400
NS500
or
NS-IS 2000 G
or
NS 520 0
NS 54 0 0
or NetScreen-5400
or
NS-SA 3000
or
NetScreen-500
NS-SA 5000
NetScreen-ISG 2000
NetScreen-5200
Secure Access Series
Wireless
Central Site
NS-ID 1000 P
Customer Support
Design & Planning Basic Product Training Integration & Migration Premier Support Resident Engineering Network Support Services Advanced Training Network Optimization Technical Certification SSL VPN for protected wireless access NetScreen-Security Manager
NS-Secu rity NS-S Manage ecu r rity Manage r
NetScreen-IDP 1000 Admin Servers
Juniper offers departmental segmentation & policy control - Internal/External threats treated equally

6 Routers

Routers 7
Routers
Juniper Enterprise Routers at a Glance
Juniper offers a broad portfolio of enterprise routers to meet the complex demands of widely distributed, business-critical applications. Juniper Networks enterprise routing platforms include: M7i and M10i high performance enterprise edge routers focused on data centers, large offices and campus borders which demand very secure, dependable, high-speed (45Mbps+) WAN connectivity. J2300, J4300, and J6300 enterprise routers focused on the WAN access routing needs of smaller sites such as remote, branch and regional offices (2Mbps to 45Mbps). M-series and J-series routers are based on JUNOS; an advanced modular operating system proven in the most demanding routed networks, and is designed to ensure high reliability, security and performance.
Key Features & Benefits of JUNOS - SUPOR Advantages
SECURE
Dedicated control plane resources ensure CLI is always accessible even while under attack Filters can be dynamically and instantly added even under DOS/DDOS attack Optional Integrated NAT, stateful firewall, and IPSec to protect user data and network hosts Unicast RPF, rate limiting, and stateful firewall protects the router itself Routers
UPTIME
Modular JUNOS ensures that faults are isolated to individual processes (e.g. SNMP) Next generation hierarchical JUNOS CLI dramatically reduces human error World class implementation of protocols built by leading IETF engineers ensures stable software in stressful conditions Rigorous system test ensures Juniper finds the bugs not customers
JUNOS Router Software

JUNOS software is the first routing operating system designed specifically for the Internet, and is now deployed in the largest and fastest-growing networks worldwide. Its full suite of industrial-strength standards-based routing protocols, flexible policy language, and leading MPLS implementation efficiently scale to large numbers of network interfaces and routes.
PERFORMANCE
Dedicated resources and memory for control plane ensure a busy control plane does not affect forwarding Dedicated resources and memory for the forwarding plane ensure a busy forwarding plane does not affect the control plane CoS features ensure real time and transactional applications are prioritized for high performance
Architecture
The JUNOS architecture is a multi-module design, with each process running in protected memory to guard against system crashes and to ensure runaway applications do not corrupt each other. This modular design makes it significantly easier to restart or upgrade a specific module since a reboot of the entire platform is not required. Introducing new services does not adversely impact the entire operating system, resulting in highly reliable software architecture. The J-series and M-series platform architecture cleanly separates routing from packet forwarding, and from services. This ensures predictable high performance and resiliency even under the most stressful operating conditions.
OPEX REDUCED
One OS across M & J-series reduces qualifications cycles, resources required for upgrades and patches For More Information: http://www.juniper.net/products/junos/

8 Routers

Routers 9
J-Series Routers
The J-series routers deliver the advanced JUNOS modular operating system in a hardware platform ideal for smaller sites, including remote, branch, and regional offices. The JUNOS software runs many functions independently to deliver high levels of security, uptime and performance with reduced operations effort. The J-series provides enterprises, government organizations, and research and education groups a forward-looking platform to build converged IP and IP/MPLS infrastructures. The modular and coherent design of the JUNOS operating system is fundamentally different from legacy routing systems. By running multiple functions in parallel on assigned processing resources, JUNOS delivers high stability with the flexibility to enable advanced routing, QoS, security, and management policies with predictable performance.
Product Specs At-A-Glance

PLATFORM Size Site Connections Fixed LAN Ports WAN Interface Slots Fixed WAN Interfaces J2300 1U 2xE1/Serial 2xFE 1 fixed primary 2xE1 or 2xSerial J4300 2U 2xE1/Serial to 8xE1 2xFE 6 Open Slots N/a 2xE1/2xSerial/2xFE 256 / 512 MB DRAM No Software J6300 2U 2xE1/Serial to DS3 2xFE
Routers
Routers
6 Open Slots N/a 2xE1/2xSerial/ 2xFE/DS3 256 MB / 1 GB DRAM Power (optional) Software
WAN Interface Modules N/a Memory (default/max) Redundancy Services (IPSec, stateful firewall / NAT, J-Flow, Advanced BGP) 256 / 512 MB DRAM No Software
Key Features & Benefits

Comprehensive range of interfaces supporting NxE1, FE and DS3 Wide array of Layer 2 access protocols including Frame Relay, Ethernet, and PPP/HDLC Rich and granular QoS and instrumentation for prioritizing mission critical traffic such as voice Services features including Network Address Translation (NAT), Stateful firewall, IPSec, and J-Flow accounting Single JUNOS image regardless of features activated for reduced operational cost and complexity
Selected Part Numbers and Ordering Information

J-SERIES BASE SYSTEMS J-SERIES OPTIONS
J2300 Fixed chassis includes: JUNOS(Worldwide version) 2xE1, or 2xSerial ports with 1 interface port license 2xFE interfaces & 2xFE licenses 256 MB DRAM in one slot with one open memory slot 128 MB Compact Flash Power supply and country/region-specific power cable Available ModelsE1: J2300-1E2FEL-S-AC-EU Other power versions UK, -IT Serial: J2300-1S2FEL-S-AC-EU, Other power versions UK, -IT
Additional DRAM: 256 MB (J2300-MEM-256M-S) Primary Compact Flash: Replaces default 256 MB (JX-CF-256M-S) 512 MB (JX-CF-512M-S) 1 GB (JX-CF-1G-S) Additional Port Licenses: E1(JX-1E1-LTU), Serial (JX-1Serial-LTU) Additional Software Feature Licenses: IPSEC (J2300-IPSEC-LTU) Stateful Firewall (J2300-SFW-LTU) Advanced BGP (JX-BGP-ADV-LTU) JFlow Accounting (JX-JFlow-LTU)
When to Sell
Customer looking to upgrade legacy routers due to performance, stability, or security issues Internet Gateway with multi-E1 to DS3 capacity where router and network security is critical WAN gateway with multi-E1 to DS3 capacity where QoS performance is critical IPSec VPN deployments to the remote or branch office locations Deploying applications which require predictable QoS even under load such as voice, video, or mission critical transactional applications
Competitive Products
Cisco 1700/1800, Cisco 2600/2800, Cisco 3600/3700, Allied Telesyn 725, 745, Nortel Passport 2430, 4400, 5430

10 Routers

Routers 11
Selected Part Numbers and Ordering Information continued

J-SERIES BASE SYSTEMS J-SERIES OPTIONS
M-Series Routers
The M7i and M10i platforms are ideal enterprise routing solutions for central offices, campus networks and corporate backbones needing 2xDS-3 or higher connectivity along with rich packet processing services. These platforms provide the key building blocks for high performance IP infrastructure that can be used for consolidation of voice, video, and data onto a single network. The modular and coherent design of the JUNOS operating system is fundamentally different from legacy routing systems. By running multiple functions in parallel on assigned processing resources, JUNOS delivers high stability with the flexibility to enable advanced routing, QoS, security, and management policies with predictable performance.
J4300 Modular chassis with 6 slots and no PICs includes: JUNOS(Worldwide version) 2 Fast Ethernet ports with licenses 256 MB DRAM in one slot with one open memory slot 256 MB primary Compact Flash Power supply and country/regionspecific power cable Available ModelsJ4300-2FEL-S-AC-EU Other power versions: -UK, -IT Routers
Additional DRAM: 256 MB (J4300-MEM-256M-S) Interface Modules: 2xE1(JX-2E1-1EL-RJ48-S) 2xSerial (JX-2Serial-1ISL-S) 2xFE (JX-2FE-1FEL-TX-S) Primary Compact Flash: Replaces default 256 MB (JX-CF-256M-S) 512 MB (JX-CF-512M-S) 1 GB (JX-CF-1G-S) Secondary Compact Flash: 128 MB (JX-CF-129M-S) 256 MB (JX-CF-256M-S) 512 MB (JX-CF-512M-S) 1 GB (JX-CF-1G-S) Additional Software Feature Licenses: IPSEC (J4300-IPSEC-LTU) Stateful Firewall (J4300-SFW-LTU) Advanced BGP (JX-BGP-ADV-LTU) JFlow Accounting (JX-JFlow-LTU)
Routers

16 million packets per second of forwarding and packet processing performance Adaptive Services Module (M7i) or Adaptive Services PIC (M7i/M10i) for hardware-based Network Address Translation (NAT), stateful firewall, attack detection, IPSec, and J-Flow accounting Comprehensive range of interfaces supporting NxE1, DS3/E3, OC-3/STM-1, Fast Ethernet and Gigabit Ethernet WAN links Wide array of Layer 2 access protocols including ATM, Frame Relay, Ethernet, PPP, and HDLC Rich and granular QoS and instrumentation for prioritizing real time traffic such as voice and video Single JUNOS image regardless of features activated for reduced operational cost and complexity
J6300 Modular chassis with 6 slots and no PICs includes: JUNOS(Worldwide version) 2 Fast Ethernet ports with license 256 MB DRAM in one slot with one open memory slot 256 MB primary Compact Flash Power supply and country/regionspecific power cable Available ModelsJ6300-2FEL-S-1AC-EU Other power versions: -UK, -IT,
Additional DRAM: 256 MB (J6300-MEM-256M-S) 1 GB (J6300-MEM-1G-S) Interface Modules: Same options as J4300 plus JX-1DS3-S (J6300 only) Primary Compact Flash: Same options as above Secondary Compact Flash: Same options as above Additional Software Feature Licenses: IPSEC (J6300-IPSEC-LTU) Stateful Firewall (J6300-SFW-LTU) Advanced BGP (JX-BGP-ADV-LTU) JFlow Accounting (JX-JFlow-LTU) Redundant Power: J6300-PWR-AC-S
When to Sell
Customer looking to upgrade legacy routers due to performance, stability, or security issues Internet Gateway with 2xDS-3 or above where router and network security is critical WAN Gateway with 2xDS-3 or above where QoS performance is critical Campus core or backbone router with GE connectivity where layer 3 routing performance and reliability are critical Datacenter router with GE connectivity layer 3 performance is important Customer needs to run large filter lists (ACLs) while maintaining line rate performance VPN Migration M-series routers support IPSec VPNs and stateful firewall; stand-alone or in combination with Junipers advanced security appliances. VoIP Adoption M-series platforms support VoIP transport with low jitter and delay, even during periods of heavy traffic load, through the extensive prioritization and QoS mechanisms of JUNOS
Cisco 7204, 73xx, 75xx, 76xx
For More Information http://www.juniper.net/products/jseries/

12 Routers

Routers 13

PLATFORM Size Site Connections Fixed Interfaces M7i 2U 2xDS3 to GE/OC-12/STM4 2xFE or 1 GE (SFP) 4 open PIC slots See ordering information 256 / 768 MB DRAM Optional M10i 5U 2xOC-3 to OC-48/STM16 None 8 open PIC slots See ordering information 256 / 768 MB DRAM 128M flash + PCMCI adapter for secondary boot media Power, cooling, forwarding engine, routing engine Optional AS PIC hardware module
M7i Bundles
One chassis, one Fixed Interface Card (FIC) with either 2 x Fast Ethernet or 1 Gigabit Ethernet (GE includes small form factor pluggable optic module with SX optics), one routing engine with 256M DRAM, one compact forwarding engine board with 256M DRAM, one power supply, one fan tray JUNOS software, documentation CD. AC bundles include country-appropriate power cable. The Adaptive Services Module option can be ordered installed on the compact forwarding engine board by using model numbers in the right column.
Routers
Routers
WAN Interface Slots WAN Interface Modules Memory (default/max) Flash
Redundancy Services (IPSec, stateful firewall/NAT, J-Flow, CRTP)
Power Optional integrated ASM hardware Module
FIXED INTERFACE CARD WITH FAST ETHERNET M7i, AC (UK Cable), 2 FE Ports M7i, AC (IT Cable), 2 FE Ports M7i, AC (EU Cable), 2 FE Ports M7i, DC, 2 FE Ports
STANDARD M7i-AC-2FE-UK-B M7i-AC-2FE-IT-B M7i-AC-2FE-EU-B M7i-DC-2FE-B
WITH ADAPTIVE SERVICES MODULE M7i-AC-2FE-ASM-UK-B M7i-AC-2FE-ASM-IT-B M7i-AC-2FE-ASM-EU-B M7i-DC-2FE-ASM-B
Ordering Information For a complete parts list please see the M-series datasheet located at http://www.juniper.net/products/mseries/100042.html
FIXED INTERFACE CARD WITH GIGABIT ETHERNET AND SFP M7i, AC (UK Cable), 1 GE Port (w/SFP SX) M7i, AC (IT Cable), 1 GE Port (w/SFP SX) M7i, AC (EU Cable), 1 GE Port (w/SFP SX) M7i, DC, 1 GE Port (w/SFP SX) STANDARD M7i-AC-1GE-UK-B M7i-AC-1GE-IT-B M7i-AC-1GE-EU-B M7i-DC-1GE-B WITH ADAPTIVE SERVICES MODULE M7i-AC-1GE-ASM-UK-B M7i-AC-1GE-ASM-IT-B M7i-AC-1GE-ASM-EU-B M7i-DC-1GE-ASM-B

14 Routers

Routers 15
M10i bundles
Each bundle includes chassis, one routing engine with 256M DRAM (2 for redundant), one compact forwarding engine board with 256M DRAM (two for redundant), one high availability chassis manager board (two for redundant), two fan trays, two power supplies (three for AC redundancy, four for DC redundancy), JUNOS software, documentation CD. AC bundles include country-appropriate power cables.
M10i/M7i Physical Interface Cards

ETHERNET 1-port Gigabit Ethernet IQ PIC (Requires SFP) 1-port Gigabit Ethernet PIC (Requires SFP) 12-port 10/100 TX Ethernet PIC. Includes 3-meter RJ21 cable 4-port Fast Ethernet PIC, TX interface, RJ45 connector ATM 1-port OC-12/STM4 ATM2 IQ PIC, Single mode, IR PE-1OC12-ATM2-SMIR PE-2OC3-ATM2-MM PE-2OC3-ATM2-SMIR PE-4DS3-ATM2 PE-2E3-ATM2 PE-1OC12-SON-SMIR PE-2OC3-SON-SMIR PE-2OC3-SON-MM PE-4DS3 PE-2DS3 PE-4E3-QPP PE-2E3 PE-4E1-COAX PE-4E1-RJ48 PE-4T1-RJ48 PE-2EIA530 PE-1CHSTM1-SMIR-QPP PE-4CHDS3-QPP PE-10CHE1-RJ48-QPP PE-AS2 PE-LS-4 PE-TUNNEL 2-port OC-3/STM1 ATM2 IQ PIC, Multi mode 2-port OC-3/STM1 ATM2 IQ PIC, Single mode, IR 4-port DS3 ATM2 IQ PIC (ships with cable) 2-port E3 ATM2 IQ PIC (ships with cable) POS 1-port SONET/SDH OC12/STM4 PIC, Single-Mode, IR 2-ports SONET/SDH OC3/STM1 PIC, Single-Mode, IR PE-1GE-SFP-QPP PE-1GE-SFP PE-12FE-TX PE-4FE-TX
Routers
Routers
M10i M10i, AC (UK Cable) M10i, AC (IT Cable) M10i, AC (EU Cable) M10i, DC
NON-REDUNDANT M10i-AC-UK-B M10i-AC-IT-B M10i-AC-EU-B M10i-DC-B
REDUNDANT M10i-AC-HA-UK-B M10i-AC-HA-IT-B M10i-AC-HA-EU-B M10i-DC-HA-B
M10i/M7i Spares
M10i/M7i Forwarding Engine Spare M7i Forwarding engine Spare with built-in Services Module Routing Engine board spare. Flash media kit sold separately M10i Chassis Spare M7i Chassis Spare, 1 built-in GE port M7i Chassis Spare, 2 built-in FE ports High Availability Chassis Manager Board for M10i M10i/M7i AC Power Supply Spare M10i/M7i DC Power Supply Spare M7i Fan Tray Spare M10i Fan Tray Spare Flash media kit with 256 MB flash drive and PCMCIA adapter Optional RE Memory Upgrade: 256 MB DRAM Module FEB-M10i-M7i-S FEB-M7i-SVCS-S RE-400-256-WW-S CHAS-MP-M10i-S CHAS-MP-M7i-1GE-S CHAS-MP-M7i-2FE-S HCM-M10i-S PWR-M10i-M7i-AC-S PWR-M10i-M7i-DC-S FANTRAY-M7i-S FANTRAY-M10i-S CF-ADAP-256M-S MEM-RE-256-S
2-ports SONET/SDH OC3/STM1 PIC, Multi-mode CLEAR CHANNEL 4-port DS3 PIC (and cables) with PIC ejector 2-port DS3 PIC (and cables) with PIC ejector 4-port E3 IQ PIC 2-port E3 PIC (and cables) with PIC ejector 4-port E1 PIC (75-ohm BNC connectors) (ships with cables) 4-port E1 PIC (120-ohm RJ48 connectors) 4-port T1 PIC, (120-ohm, RJ48 connectors) 2-port EIA-530 PIC (DB-25 Connector) CHANNELIZED 1-port Channelized STM1 to DS0 IQ PIC, SM, IR 4-port Channelized DS3 to DS0 IQ PIC, BNC 10-port Channelized E1 to DS0 IQ PIC, RJ48 SERVICES Adaptive Services II PIC Link Services PIC, 4 ML bundles, 256 LFI links, Tunnel Services Tunnel Services PIC with PIC ejector
For additional physical interface cards please see www.juniper.net/products/modules/

16 Routers

Firewall / IPSec VPN Products 17
Interface Accessories
EIA-530 to V.35 cable (DTE) for M-series EIA-530 to X.21 cable (DTE) for M-series 3-meter VHDCI to RJ21 Ethernet cable spare for PE-12FE-TX. 3-meter VHDCI to RJ21 Ethernet cable spare for PE-12FE-TX 10-ft SMZ to BNC coaxial cable spare, for DS3/E3 PICs SFP 1000Base-LX Gigabit Ethernet Optic Module SFP 1000Base-SX Gigabit Ethernet Optic Module SFP 1000Base-T Gigabit Ethernet Module (for Cat 5 cable) CBL-EIA530-V35-DTE CBL-EIA530-X21-DTE CBL-RJ21-MDI-S CBL-RJ21-MDIX-S CBL-SMZ-BNC-M-S SFP-1GE-LX SFP-1GE-SX SFP-1GE-T
Firewall / IPSec VPN
Routers
Products
The Juniper Networks integrated firewall / IPSec VPN security devices are purpose-built to perform essential security functions. These integrated devices combine a Stateful Inspection firewall with Deep Inspection technology for application-level protection, IPSec virtual private networking (VPN) capabilities, and denial of service (DoS) mitigation functions. Plus they are all manageable by a policy-based central management system, NetScreen-Security Manager. They are available in a range of devices built to meet the throughput requirements of enterprises of all sizes.
CUSTOMER NETWORK Small Office / Remote Office / Retail Outlet / Fixed Telecommuters PRODUCTS TO RECOMMEND ENTERPRISE CLASS FEATURES
Firewall / IPSec VPN Products
Software Licenses for the Adaptive Services Module/PICs

M7i can be ordered with the optional built in Adaptive Services Module (ASM), which comes with the stateful firewall/NAT software license for free (S-NAT-FW-MULTI). Additional licenses must be purchased. The Adaptive Services PIC or the Adaptive Services II PIC can be purchased for use with either M7i or M10i, all licenses for these PICs must be purchased.
J- Flow CRTP L2TP LNS license for M7i NAT/FW Multi-instance NAT/FW Single-instance IPSec S-ACCT S-CRTP S-LNS S-NAT-FW-MULTI S-NAT-FW-SINGLE S-ES
NetScreen-HSC Integrated security devices with Stateful NetScreen-5GT and Deep Inspection firewall, IPSec VPN, NetScreen-5GT ADSL Antivirus and Web Filtering NetScreen-5GT Rapid Deployment to quickly get a new Wireless device up and running NetScreen-5XT Device redundancy and resiliency for high availability
For More Information: http://www.juniper.net/products/mseries/
Regional Office / Branch Office / Medium Enterprise
NetScreen-25 NetScreen-50 NetScreen-204 NetScreen-208
Denial of service attack protection Application-level security with Deep Inspection and Web Filtering Transparent mode to drop device into existing network with minimal changes Dynamic routing support to reduce reliance on manual intervention
Medium & Large Enterprise Central Sites / Carrier Networks / Data Centers
NetScreen-500 Purpose-built high-performance, scalable NetScreen-ISG 2000 and flexible security solutions NetScreen-5200 Interface flexibility for varying network NetScreen-5400 connectivity requirements Customizable security zones to increase interface density Comprehensive high availability solution for sub-second fail-over Virtual System support for partitioning devices into multiple security domains

18 Firewall / IPSec VPN Products

NetScreen ScreenOS Software

A controlling element of the Juniper Networks firewall / IPSec VPN devices is the operating system, ScreenOS, a real-time, security-specific operating system.
Small Office / Remote Office Security Solutions

Enterprises require integrated security products for their small offices, retail outlets, and fixed telecommuters that dont compromise on security, manageability, resiliency or price. Juniper Networks has the most robust portfolio of security solutions for the small office / remote office in the industry, providing solutions with superior security, central management and deployment, resiliency and high availability, all at competitive prices.
Key features and benefits

Security specific real-time operating system that eliminates vulnerabilities found in general purpose operating systems Designed from the ground up to perform computationally intensive security functions without compromising throughput Stateful, protocol-level intelligence to prevent attacks in VoIP and other new technologies Integrated application-level attack protection with Deep Inspection, Antivirus and Web Filtering (not available on all products) Same operating system across the entire firewall / IPSec VPN product line means less training time for security administrators Certified by Common Criteria and ICSA For More Information: http://www.juniper.net/products/integrated/
These solutions include the NetScreen-Hardware Security Client, NetScreen-5GT, NetScreen-5GT ADSL, NetScreen-5GT Wireless and NetScreen-5XT.

Firewall / IPSec VPN Products Integrated Deep Inspection firewall for application-level attack protection Integrated Antivirus at the network edge to stop viruses before they spread (NetScreen-HSC, NetScreen-5GT, NetScreen-5GT ADSL and NetScreen-5GT Wireless only) Integrated Web Filtering available to set policies on corporate web use (NetScreen-HSC and NetScreen-5GT) Rapid Deployment to quickly get a new device up and running for a telecommuter or small office without onsite IT staff and minimal effort Restricted security zones (home / work zones) to separate corporate traffic and resources from non-business activity Integrated ADSL modem eliminates the need for an external ADSL modem reducing upfront hardware and ongoing operational costs (NetScreen-5GT ADSL only) Device Redundancy for high availability and to minimize the potential for a single point of failure (NetScreen-5GT, NetScreen-5GT Wireless and NetScreen-5GT ADSL with Extended license only) Support for dial-backup or backup Ethernet ports for redundant Internet connections when network uptime is business critical Reduction in failover time of a VPN connection with redundant VPN tunnels and VPN monitoring Policy-based management for centralized, end-to-end lifecycle management
Licenses available on Juniper Networks Small Office / Remote Office Security Solutions
NETSCREEN NETSCREEN NETSCREEN NETSCREEN NETSCREEN -HSC -5GT -5GT ADSL -5GT WIRELESS -5XT 10-user Plus or Elite Extended Deep Inspection Signatures Antivirus Web Filtering No No No Yes Included Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No Yes Yes Yes Yes Yes No Yes Yes No Yes No No



FEATURE / CAPACITY NETSCREEN- NETSCREENHSC 5GT 10-USER/ PLUS AND EXTENDED 5 10/100 Ethernet 5 10/100 Ethernet NETSCREEN5GT ADSL 10-USER/ PLUS AND EXTENDED 5 10/100 Ethernet + 1 ADSL NETSCREEN5GT WIRELESS USER/PLUS AND EXTENDED NETSCREEN5XT 10-USER/ ELITE
Juniper Networks NetScreen-Hardware Security Client

The Juniper Networks NetScreen-Hardware Security Client (NetScreen-HSC) is the most cost effective integrated security solution for the fixed telecommuter and small remote office combining Stateful Firewall, Deep Inspection Firewall, Antivirus and Web Filtering. It can easily be deployed and managed in large deployments with Juniper Networks NetScreen-Security Manager and the Rapid Deployment capabilities, eliminating expensive staging steps.
Number of Interfaces
5 10/100 5 10/100 Ethernet + 1 Wireless Ethernet port with up to 4 SSIDs, 1 ADSL port (optional) 10 / Unrestricted Unrestricted on the Extended Version 75M FW 20M 3DES VPN 2,000 4,000 on Extended version 10 25 on Extended version 100 2 (3 with home/ work zones) Trust/Untrust/ DMZ on Extended Version 3 RIPv1/v2, OSPF, BGP Yes No Yes on Extended version Yes 10 / Unrestricted
Maximum Number of IP Addresses in Trusted Interfaces
10 / Unrestricted 10 / Unrestricted Unrestricted on the Unrestricted on the Extended Version Extended Version 75M FW 20M 3DES VPN 2,000 4,000 on Extended version 10 25 on Extended version 100 2 (3 with home/ work zones) Trust/Untrust/ DMZ on Extended Version 3 RIPv1/v2, OSPF, BGP Yes No Yes on Extended version Yes
When to Sell
When integrated best of breed security functionality, reduced network complexity and low-cost are requirements Large scale fixed telecommuter / small remote office deployments where central management and configuration is a requirement Large scale deployments where minimal IT resources are available at the remote locations
Maximum Throughput
50M FW 75M FW 10M 3DES VPN 20M 3DES VPN 2,000 4,000 on Extended version 10 25 on Extended version 100
70M FW 20M 3DES VPN 2,000
Number of Sessions 1,000
Maximum Number of VPN Tunnels Maximum Number of Policies Maximum Number of Security Zones
10
Cisco PIX 501, Check Point VPN-1 Edge, Check Point on Nokia IP40, Fortinet FG50A, SonicWall TZ170, TELE3, WatchGuard V10 and Firebox-X Edge
50
100 2 (3 with home/ work zones)
2 (3 with home/ 2 (3 with home/ work zones) work zones) Trust/Untrust/ DMZ on Extended Version 2 RIPv1/v2 3 RIPv1/v2, OSPF, BGP Yes No Yes on Extended version Yes

PRODUCT Juniper Networks NetScreen-HSC with AV NetScreen-HSC UK linear supply Europe linear supply NS-HSC-003-AV NS-HSC-005-AV PART NUMBER
Maximum Number of Virtual Routers Routing Protocol Support High Availability
2 OSPF, BGP, RIPv1/v2 Yes No
NetScreen-HSC
Dial Backup Support No No
For More Information: http://www.juniper.net/products/integrated/dsheet/110014.pdf
Redundant Yes Connections with Dual Untrust Support Embedded Antivirus Integrated Web Filtering External Web Filtering Yes Yes Yes
Yes
Yes Yes Yes
Yes No Yes
Yes No Yes
No No Yes


Juniper Networks NetScreen-5GT

The Juniper Networks NetScreen-5GT is a feature rich enterprise-class network security solution that integrates multiple security functionsStateful and Deep Inspection firewall, IPSec VPN, Denial of Service protection, Antivirus and Web Filtering. The NetScreen-5GT is fully capable of securing a remote office, retail outlet, or a broadband telecommuter.
Juniper Networks NetScreen-5GT ADSL

The Juniper Networks NetScreen-5GT ADSL is a feature rich network security solution that integrates multiple security functionsStateful and Deep Inspection firewall, IPSec VPN, Denial of Service protection and Antiviruswith an ADSL interface.
When to Sell When to Sell

For a fixed telecommuter / small remote office (NetScreen-5GT 10/Plus) or Large Remote Office / Small Company (NetScreen-5GT Extended) When integrated security functionality - Stateful and Deep Inspection firewall, IPSec VPN, Denial of Service protection, Antivirus and Web Filtering are requirements When superior price/performance is a requirement When dial-back up is a requirement When device redundancy or network segmentation is a requirement (Extended license required) To service provider or MSSP for a managed secure broadband service integrated ADSL modem reduces CAPEX When integrated security functionality (Deep Inspection, Antivirus) are required with an integrated ADSL modem Firewall / IPSec VPN Products
Cisco PIX 501, PIX 506E, Cisco 831, CheckPoint VPN-1 Edge, Check Point on Nokia IP40, Fortinet FG50A, FG60, SonicWall TZ170, SOHO TZW, WatchGuard V10 and Firebox-X Edge
Cisco PIX 501, PIX 506E, Check Point VPN-1 Edge, Check Point on Nokia IP40, Fortinet FG50A, FG60, SonicWall TZ170, SOHO3, WatchGuard V10 and Firebox-X Edge

PRODUCT Juniper Networks NetScreen-5GT ADSL 10 User* Annex A NetScreen-5GT ADSL UK supply Europe supply UK power cord European power cord UK power cord European power cord UK supply Europe supply UK power cord European power cord UK power cord European power cord NS-5GT-013-A NS-5GT-015-A NS-5GT-113-A NS-5GT-115-A NS-5GT-213-A NS-5GT-215-A NS-5GT-013-B NS-5GT-015-B NS-5GT-113-B NS-5GT-115-B NS-5GT-213-B NS-5GT-215-B NetScreen-5GT ADSL PART NUMBER UK linear supply Europe linear supply UK power cord European power cord UK power cord European power cord NS-5GT-003 NS-5GT-005 NS-5GT-103 NS-5GT-105 NS-5GT-203 NS-5GT-205 NS-5GT-RMK NetScreen-5GT ADSL Plus NetScreen-5GT ADSL Plus NetScreen-5GT ADSL Extended NetScreen-5GT ADSL Extended NetScreen-5GT ADSL NetScreen-5GT ADSL NetScreen-5GT ADSL Plus NetScreen-5GT ADSL Plus NetScreen-5GT ADSL Extended NetScreen-5GT ADSL Extended PART NUMBER

PRODUCT Juniper Networks NetScreen-5GT 10 User* NetScreen-5GT NetScreen-5GT NetScreen-5GT Plus NetScreen-5GT Plus NetScreen-5GT Extended NetScreen-5GT Extended Rack mount kit for 2 NetScreen-5GTs
*For antivirus products add -AV to the above NetScreen-5GT SKU (NS-5GT-101-AV).
Juniper Networks NetScreen-5GT ADSL Plus (unrestricted users)* Annex A
Juniper Networks NetScreen-5GT ADSL Extended* Annex A
Juniper Networks NetScreen-5GT Plus (unrestricted users)*
Juniper Networks NetScreen-5GT ADSL 10 User* Annex B
Juniper Networks NetScreen-5GT Extended*
Juniper Networks NetScreen-5GT ADSL Plus (unrestricted users)* Annex B
Juniper Networks NetScreen-5GT ADSL Extended* Annex B
*For antivirus products add -AV to the above NetScreen-5GT sku (NS-5GT-011-A-AV).


Juniper Networks NetScreen-5GT Wireless

The Juniper Networks NetScreen-5GT Wireless brings enterprise level security applications, routing protocols and resiliency features to remote offices, retail outlets or broadband telecommuters that want to deploy 802.11b/g networks in a secure manner. The NetScreen-5GT Wireless offers administrators up to four configurable Wireless Security Zones each with a unique SSID that can be used to provision appropriate levels of security for different types of users. The NetScreen-5GT Wireless also possesses the broadest range of wireless specific security support to help protect wireless communications and network resources. Wireless specific security includes: Security/Privacy: WEP, WPA (AES or TKIP), IPSec VPN Authentication: PSK, EAP-PEAP, EAP-TLS, EAP-TTLS over 802.1x The broad range of supported wireless security also helps ensure policy consistency and interoperability with other wireless solutions that may be deployed throughout the enterprise. The NetScreen-5GT Wireless includes standard Ethernet connectivity with ADSL as a hardware option.

PRODUCT Juniper Networks NetScreen-5GT Wireless 10 User NetScreen-5GT Wireless World - UK Power Cord NetScreen-5GT Wireless World - Europe Power Cord Juniper Networks NetScreen-5GT Wireless Plus NetScreen-5GT Wireless World - UK Power Cord NetScreen-5GT Wireless World - Europe Power Cord Juniper Networks NetScreen-5GT Wireless Extended NetScreen-5GT Wireless World - UK Power Cord NetScreen-5GT Wireless World - Europe Power Cord Juniper Networks NetScreen-5GT Wireless ADSL 10 User NetScreen-5GT Wireless ADSL World - UK Power Cord NetScreen-5GT Wireless ADSL World - Europe Power Cord Juniper Networks NetScreen-5GT Wireless ADSL Plus NetScreen-5GT Wireless ADSL World - UK Power Cord NS-5GT-133-x NS-5GT-135-x NS-5GT-233-x NS-5GT-235-x NetScreen-5GT Wireless ADSL World - Europe Power Cord Juniper Networks NetScreen-5GT Wireless ADSL Extended NetScreen-5GT Wireless ADSL World - UK Power Cord NetScreen-5GT Wireless ADSL World - Europe Power Cord
-x must be replaced with an -A for Annex A units or a -B for annex B units This is only a subset of all part numbers available for this product. For the latest part number and pricing information, please see the Juniper Networks price list.
PART NUMBER NS-5GT-023 NS-5GT-025 NS-5GT-123 NS-5GT-125 NS-5GT-223 NS-5GT-225
NS-5GT-033-x NS-5GT-035-x
When to Sell
For a fixed telecommuter / remote office / retail outlet requiring deployment of secure wireless access When integrated security functionality - Stateful and Deep Inspection firewall, IPSec VPN, Denial of Service protection and Antivirus with wireless access is a requirement Requirement for a broad set of wireless-specific security and authentication mechanisms Need to assign appropriate levels of security to different user groups using Security Zones
Cisco 831 + 1100 access point, Cisco PIX firewall + 1100 access point, Check Point 400W, Fortinet FG60WiFi, SonicWall TZ170 Wireless, WatchGuard Firebox-X Edge
For More Information: http://www.juniper.net/products/integrated/dsheet/


Juniper Networks NetScreen-5XT

The Juniper Networks NetScreen-5XT is a feature rich enterprise-class network security solution integrating Stateful Inspection and Deep Inspection firewall, IPSec VPN, and DoS mitigation technology.
Regional Office / Medium Enterprise Security Solutions

The Juniper Networks integrated security solutions for the regional office, branch office or medium enterprise provide superior price/performance with extremely robust security features.
When to Sell
For a fixed telecommuter / small remote office Government deployments where Common Criteria and/or FIPS certifications are a requirement
These solutions include the NetScreen-25, NetScreen-50, NetScreen-204 and NetScreen-208.

Integrated Deep Inspection firewall for application-level attack protection Integrated Web Filtering available to set policies on corporate web use (NetScreen-25 & NetScreen-50 only) Denial of service protection to protect against more than 30 different attacks, both internal and external Comprehensive high availability solution for sub-second fail-over between interfaces or devices (HA Lite only on NetScreen-25) Dynamic routing support to reduce reliance on manual intervention to establish a new route Reduction in failover time of a VPN connection with redundant VPN tunnels and VPN monitoring Transparent mode where the device functions as a Layer 2 IP security bridge with minimal change to the existing network Virtual Router support to map internal, private or overlapped IP addresses to a new IP address Customizable security zones to increase interface density without additional hardware expenditures Manageable through graphical WebUI, CLI or central management system, NetScreen-Security Manager Policy-based management for centralized, end-to-end lifecycle management
Firewall / IPSec VPN Products Cisco PIX 501, 506E, CheckPoint VPN-1 Edge, Check Point on Nokia IP40, Fortinet FG60, FG50A, SonicWall TZ170, SOHO3, WatchGuard V10 and Firebox-X Edge

PRODUCT Juniper Networks NetScreen-5XT 10 User NetScreen-5XT NetScreen-5XT UK power cord European power cord NS-5XT-003 NS-5XT-005 NS-5XT-ELU NS-5XT-103 NS-5XT-105 NS-5XT-RMK PART NUMBER
Upgrade from NetScreen-5XT 10-user to Elite Juniper Networks NetScreen-5XT Elite (unrestricted users) NetScreen-5XT Elite NetScreen-5XT Elite Rack mount kit for 2 NetScreen-5XTs UK power cord European power cord


Product Specs At-A-Glance Advanced Feature Set

ADVANCED FEATURE/CAPACITY Number of Interfaces Maximum Throughput Maximum Number of Sessions Maximum Number of VPN Tunnels Maximum Number of Policies NETSCREEN-25 NETSCREEN-50 ADVANCED ADVANCED 4 10/100 100M FW 20M 3DES VPN 32,000 125 + 100 dial up 500 8 4 3 OSPF, BGP, RIPv1/v2 4 10/100 170M FW 45M 3DES VPN 64,000 500 + 400 dial up 1,000 8 4 3 OSPF, BGP, RIPv1/v2 Active/Passive NETSCREEN-204 NETSCREEN-208 ADVANCED ADVANCED 4 10/100 8 10/100 400M FW 550M FW 200M 3DES VPN 200M 3DES VPN 128,000 1,000 4,000 128,000 1,000 4,000
Juniper Networks NetScreen-25 / NetScreen-50

The Juniper Networks NetScreen-25 and NetScreen-50 offer complete security solutions for enterprise branch and remote offices as well as small and medium size companies. They provide solutions for perimeter security with multiple DMZs, VPNs for wireless LAN security, or protection of internal networks. NetScreen-25 offers 100 Mbps of firewall and 20 Mbps of 3DES or AES VPN performance, with support for 32,000 concurrent sessions, 125 site-to-site VPN tunnels, and 100 VPN users NetScreen-50 is a high performance security appliance, offering 170 Mbps of firewall and 45 Mbps of 3DES or AES VPN performance, with support for 64,000 concurrent sessions, 500 site-to-site VPN tunnels, and 400 VPN users. Firewall / IPSec VPN Products
Maximum Number of Virtual LANs Maximum Number of Security Zones Maximum Number of Virtual Routers Routing Protocols Supported
32 default, up to 32 default, up to 32 additional 32 additional 4 default, up to 10 additional 3 default, up to 5 additional OSPF, BGP, RIPv1/v2 Active/Passive Active/Active 8 default, up to 10 additional 3 default, up to 5 additional OSPF, BGP, RIPv1/v2 Active/Passive Active/Active Active/Active Full Mesh Yes No / Yes
When to Sell
Need for fully integrated security solution for enterprise branch and remote offices, as well as small and medium size companies Need for application-level protection with integrated Deep Inspection or Web Filtering When high availability and resiliency are requirements Perimeter security solutions for multiple DMZs, VPNs for wireless LAN security, or protection of internal networks
High Availability Modes HA Lite Supported
Cisco PIX 506E, Check Point on Nokia IP130, Fortinet FG100A, FG200A, SonicWall PRO3060, TELE3, PRO230, WatchGuard V60 and Firebox-X
Deep Inspection Integrated / Redirect Web Filtering
Yes Yes / Yes
Yes Yes / Yes
Yes No / Yes

PRODUCT Juniper Networks NetScreen-50 w/AC power supply NetScreen-50 UK power cord UK power cord European power cord European power cord PART NUMBER NS-050-003 NS-050-103 NS-050-005 NS-050-105 NS-050-001-DC NS-025-003 NS-025-005 NS-050B-003 NS-050B-005 NS-050-UPG-A NS-025B-003 NS-025B-005 NS-025-UPG-A
Product Specs At-A-Glance Baseline Feature Set

BASELINE FEATURE/CAPACITY Sessions Site-to-site tunnels NETSCREEN-25 NETSCREEN-50 BASELINE BASELINE 24,000 50 48,000 150 Shared with site-to-site 0 RIPv1/v2 HA Lite1 No Yes / Yes NETSCREEN-204 NETSCREEN-208 BASELINE BASELINE 64,000 500 N/A 02 RIPv1/v2 Active/Passive No No / Yes 64,000 500 N/A 02 RIPv1/v2 Active/Passive No No / Yes
NetScreen-50f* NetScreen-50 NetScreen-50f*
Juniper Networks NetScreen-50 w/DC power supply NetScreen-50 w/DC power supply DC power Juniper Networks NetScreen-25 w/AC power supply NetScreen-25 NetScreen-25 Baseline Products NetScreen-50 Baseline NetScreen-50 Baseline NetScreen-25 Baseline NetScreen-25 Baseline UK power cord European power cord UK power cord European power cord UK power cord European power cord
Remote-access tunnels Shared with site-to-site VLANs Routing Protocols Supported High Availability (HA) Deep Inspection Integrated / Redirect Web Filtering 0 RIPv1/v2 HA Lite1 No Yes / Yes
NetScreen-50 Baseline to Advanced Upgrade
1 HA Lite provides configuration synchronization only (does not provide session or tunnel synchronization). 2 Virtualization key option add 32 VLANs, 5 Virtual Routers and 10 Security Zones
NetScreen-25 Baseline to Advanced Upgrade

*If products do not include VPN functionality (international only)



The Juniper Networks NetScreen-204 and NetScreen-208 are two of the most versatile security appliances available today, easily integrating into many different environments, including medium and large enterprise offices, e-business sites, data centers, and carrier infrastructures. In addition to physical interface density, the NetScreen-200 Series optionally supports virtualization, including VLAN support and additional custom security zones and virtual routers. NetScreen-204 offers four 10/100 Mbps interfaces with firewall functions at wire speed (400 Mbps). Firewall / IPSec VPN Products NetScreen-208 offers eight 10/100 Mbps interfaces with firewall functions at wire speed (550 Mbps).
Central Office / Large Enterprise Security Solutions

Juniper Networks offers a line of purpose built, high-performance integrated security systems designed to deliver flexible and scalable solutions for large enterprise, carrier, and data center networks. These modular chassis-based systems offer virtual systems, robust high availability as well as interface flexibility.
This line of products includes the NetScreen-500, NetScreen-ISG 2000, NetScreen-5200 and NetScreen-5400.

Comprehensive high availability solution for sub-second fail-over between interfaces or devices Full mesh configurations to allow for redundant physical paths in the network thereby providing maximum resiliency and uptime Virtual System support allowing devices to be partitioned into multiple security domains, each with a unique set of administrators, policies, VPNs, and address books Interface flexibility for varying network connectivity requirements and future growth requirements Virtual Router support to map internal, private or overlapped IP addresses to a new IP address Customizable security zones to increase interface density without additional hardware expenditures Transparent mode where the device functions as a Layer 2 IP security bridge with minimal change to the existing network Manageable through graphical WebUI, CLI or central management system, NetScreen-Security Manager Policy-based management for centralized, end-to-end lifecycle management Firewall / IPSec VPN Products
When to Sell
Medium and large enterprise branch offices, e-business sites, data centers, and carrier infrastructures Where network segmentation, high availability and/or dynamic routing are requirements Perimeter security solutions for multiple DMZs, VPNs for wireless LAN security, or protection of internal networks
Cisco PIX 515E-UR/R, Check Point on Nokia IP 350, Fortinet FG300A, FG400A, FG500A, SonicWall PRO5060, PRO4060, PRO230 and WatchGuard V80

PRODUCT Juniper Networks NetScreen-208 w/ AC power supply NetScreen-208 NetScreen-208 NetScreen-208 NetScreen-204 NetScreen-204 NetScreen-204 NetScreen-200 Baseline Products NetScreen-208 Baseline NetScreen-208 Baseline NetScreen-204 Baseline NetScreen-204 Baseline UK power cord European power cord UK power cord European power cord NS-208B-003 NS-208B-005 NS-204B-003 NS-204B-005 UK power cord European power cord DC power UK power cord European power cord DC power Virtualization Key* NS-208-003 NS-208-005 NS-208-001-DC NS-204-003 NS-204-005 NS-204-001-DC NS-200-VIRT PART NUMBER
Juniper Networks NetScreen-208 w/ DC power supply Juniper Networks NetScreen-204 w/ AC power supply
Juniper Networks NetScreen-204 w/ DC power supply Juniper Networks NetScreen-200 Series Virtualization
*Virtualization Key adds 32 VLANs, 5 additional virtual routers, and 10 additional security zones. Only available with NetScreen ScreenOS 4.0.2 and later.


Product Specs At-A-Glance Advanced Feature Set

ADVANCED FEATURE/CAPACITY Number of Interfaces NETSCREEN-500 NETSCREEN-ISG NETSCREEN ADVANCED 2000 ADVANCED -5200 Up to 8 10/100 Up to 8 Mini-GBIC 8 Mini-GBIC or or 8 Mini-GBIC (SX or LX) or up 2 Mini-GBIC + or 4 GBIC to 28 10/100 24 10/100 700M FW 250 3DES VPN 250,000 5,000 20,000 25 100 per physical port 8 default, up to 50 additional 2 default, up to 25 additional 2G FW 1G 3DES VPN 512,000 10,000 30,000 50 500 4G FW 2G 3DES VPN 1,000,000 25,000 40,000 500 4,000 NETSCREEN -5400 24 Mini-GBIC or 6 Mini-GBIC + 72 10/100 12G FW 6G 3DES VPN 1,000,000 25,000 40,000 500
Juniper Networks NetScreen-500

The Juniper Networks NetScreen-500 is a purpose-built, security system designed to provide a flexible, high performance solution. The NetScreen-500 security system integrates firewall, DoS, VPN and traffic management functionality. Combined with a flexible and resilient hardware architecture, the NetScreen 500 exceeds most enterprises typical traffic conditions. It is well suited to match the peak load and strong deterrence requirements of the most demanding environments.
Maximum Throughput Maximum Number of Sessions Maximum Number of VPN Tunnels
When to Sell
For medium and large enterprise central sites and service providers High-performance, scalable and flexible security solution required High availability for resiliency and virtual systems for departmental firewalls required
Maximum Number of Policies Maximum Number of Virtual Systems Maximum Number of Virtual LANs Maximum Number of Security Zones Maximum Number of Virtual Routers
4,000
Cisco PIX 525-UR/R, PIX 535-UR/R, Check Point on Nokia IP710, IP380, Fortinet FG500A, FG800, FG1000, FG3000, SonicWall PRO5060, and WatchGuard V100
26 default, up 16 default, up to 16 default, up to to 100 additional 1000 additional 1000 additional 3 default, up to 50 additional Active/Passive Active/Active Active/Active Full Mesh OSPF, BGP, RIPv1/v2 Yes No / Yes 3 default, up to 500 additional Active/Passive Active/Active Active/Active Full Mesh OSPF, BGP, RIPv1/v2 Yes No / Yes 3 default, up to 500 additional Active/Passive Active/Active Active/Active Full Mesh OSPF, BGP, RIPv1/v2 Yes No / Yes

PRODUCT Juniper Networks NetScreen-500SP Bundles NetScreen-500 System NetScreen-500 System NetScreen-500 System NetScreen-500 System NetScreen-500 System NetScreen-500 System NetScreen-500 System NetScreen-500 System SX GBIC, AC power SX GBIC, DC power SX dual-GBIC, AC power SX dual-GBIC, DC power 2 SX GBIC modules, 2 AC power supplies 2 SX GBIC modules, 2 DC power supplies 2 SX dual-GBIC modules, 2 AC power supplies 2 SX dual-GBIC modules, 2 DC power supplies 3 dual-10/100 modules, 2 AC power supplies 3 dual-10/100 modules, 2 DC power supplies 2 dual-10/100 modules, 1 AC power supply 2 dual-10/100 modules, 1 DC power supply 2 dual-10/100 modules, 1 AC power supply 2 SX GBIC modules, 1 AC power supply NS-500SP-GB1-AC NS-500SP-GB1-DC NS-500SP-GB2-AC NS-500SP-GB2-DC NS-500ES-GB1-AC NS-500ES-GB1-DC NS-500ES-GB2-AC NS-500ES-GB2-DC NS-500ES-FE1-AC NS-500ES-FE1-DC NS-500ES-FE2-AC NS-500ES-FE2-DC NS-500B-FE2 NS-500B-GB1 NS-500-VSYS-5 NS-500-VSYS-10 NS-500-VSYS-25 PART NUMBER
High Availability Modes Active/Passive Supported Active/Active Active/Active Full Mesh Routing Protocols Supported Deep Inspection Integrated / Redirect Web Filtering OSPF, BGP, RIPv1/v2 Yes No / Yes
Juniper Networks NetScreen-500ES Bundles
Product Specs At-A-Glance Baseline Feature Set

BASELINE FEATURE/CAPACITY Sessions Concurrent VPN Tunnels VLANs Routing Protocols Supported High Availability Deep Inspection Integrated / Redirect Web Filtering NETSCREEN-500 BASELINE 128,000 1,000 100 RIPv1/v2 Active/Passive No No / Yes NETSCREEN-ISG 2000 BASELINE 256,000 1,000 100 RIPv1/v2 Active/Passive No No / Yes
NetScreen-500 System NetScreen-500 System NetScreen-500 System NetScreen-500 System NetScreen-500 System NetScreen-500 System
Juniper Networks NetScreen-500 Baseline Systems
Juniper Networks NetScreen-500 Virtual System Upgrades Upgrade to 5 Virtual Systems Upgrade from 5 to 10 Virtual Systems Upgrade from 10 to 25 Virtual Systems
SP Systems include 25 Virtual Systems and 2 power supplies ES Systems include 0 Virtual Systems


Juniper Networks NetScreen-ISG 2000

Juniper Networks Integrated Security Gateway 2000 (NetScreen-ISG 2000), is a purpose-built, high-performance system. Integrating Deep Inspection firewall, VPN and DoS solutions, the NetScreen-ISG 2000 enables secure, reliable connectivity along with network and application-level protection for key, high-traffic network segments. Built on Juniper Networks next generation architecture which includes a fourth generation security ASIC, the GigaScreen3. This enables high-speed microprocessors and add-on security modules to provide the predictable, multi-Gigabit performance needed for the most demanding network segments.

PRODUCT Juniper Networks NetScreen-ISG 2000 Bundles Advanced* NetScreen-ISG 2000 system NetScreen-ISG 2000 system NetScreen-ISG 2000 system NetScreen-ISG 2000 system 1 4 port 10/100 I/O Module 1 8 port 10/100 I/O Module 1 Dual-Port mini-GBIC I/O Module 1 dual port 10/100/1000 Copper I/O Module 1 4 port 10/100 I/O Module 1 8 port 10/100 I/O Module 1 Dual port mini-GBIC I/O Module 1 dual port 10/100/1000 Copper I/O Module NS-ISG-2000-P00A-S00 NS-ISG-2000-P01A-S00 NS-ISG-2000- P02A-S00 NS-ISG-2000- P03A-S00 NS-ISG-2000B-P00A-S00 NS-ISG-2000B-P01A-S00 NS-ISG-2000B-P02A-S00 PART NUMBER
Juniper Networks NetScreen-ISG 2000 Bundles Baseline* NetScreen-ISG 2000 system NetScreen-ISG 2000 system NetScreen-ISG 2000 system NetScreen-ISG 2000 system
When to Sell
Firewall / IPSec VPN Products Requirement for network and application security at the gateway of a large enterprise, carrier or data center network Customer needs linear performance for all packet sizes for VoIP deployment or other advanced application that requires low latency and small packet throughput High-performance, scalable and flexible security solution required Needs a solution that will meet future security requirements and leverage their investment High availability for resiliency and virtual systems for departmental firewalls required
NS-ISG-2000B-P03A-S00 NS-ISG-2000-VSYS-5 NS-ISG-2000-VSYS-25 NS-ISG-2000-VSYS-50 NS-ISG-2000-VSYS-025 NS-ISG-2000-VSYS-050 NS-ISG-2000-SX2 NS-ISG-2000-LX2 NS-ISG-2000-FE4 NS-ISG-2000-FE8 NS-ISG-2000-TX2 NS-SYS-GBIC-MSX NS-SYS-GBIC-MLX NS-ISG-2000-PWR-AC NS-ISG-2000-PWR-DC NS-ISG-2000-FAN NS-ISG-2000-RCK-01 NS-ISG-2000-RCK-02 NS-ISG-2000-IPAN NS-ISG-2000-PPAN
Juniper Networks NetScreen-ISG 2000 Virtual System Upgrades VSYS Upgrade 0 to 5 VSYS Upgrade 5 to 25 VSYS Upgrade 25 to 50 VSYS Upgrade 0 to 25 VSYS Upgrade 0 to 50 Juniper Networks NetScreen-ISG 2000 Components I/O Module - Dual Port Mini GBIC-SX I/O Module - Dual Port Mini GBIC-LX I/O Module - 4 Port 10/100 Fast Ethernet I/O Module - 8 Port 10/100 Fast Ethernet I/O Module - Dual Port 10/100/1000 Gig Ethernet SX transceiver (mini-GBIC) LX transceiver (mini-GBIC) AC power supply DC power supply Fan module Rack Mount Kit (19 in., all mounting hardware) Rack Mount Kit (23 in., all mounting hardware) Blank Interface Panel Blank Power Supply Cover
*All systems include 2 AC power supplies and 0 virtual systems.
Cisco PIX 535-UR/R, Check Point on Nokia IP1220, IP740, IP710, Fortinet FG1000, FG3000, FG3600, SonicWall PRO5060, and WatchGuard V200



The Juniper NetScreen-5000 Series are purpose built, highperformance security systems. Designed to deliver a new level of high-peformance capabilities with integrated firewall, DoS and DDoS protection, VPN, and traffic management functionality. Built around Junipers third generation security ASIC and distributed system architecture, the NetScreen-5000 Series offers excellent scalability and flexibility while providing high levels of security through Juniper Networks custom operating system, NetScreen ScreenOS. Both products employ a switch fabric for data exchange and separate multi-bus channel for control information, delivering scalable performance for the most demanding environments. Firewall / IPSec VPN Products
PRODUCT Juniper Networks NetScreen-5400 bundles NetScreen-5400 NetScreen-5400 NetScreen-5400 NetScreen-5400 NetScreen-5400 NetScreen-5400 NetScreen-5400 NetScreen-5400 NetScreen-5400 NetScreen-5400 NetScreen-5400 NetScreen-5400 1 2G24FE SPM, 0 VSYS, AC 1 2G24FE SPM, 0 VSYS, DC 1 8G SPM, 0 VSYS, AC 1 8G SPM, 0 VSYS, DC 1 8G SPM, 100 VSYS, AC 1 8G SPM, 100 VSYS, DC 1 8G SPM, 500 VSYS, AC 1 8G SPM, 500 VSYS, DC 5400, 2G24FE, AC, no VSYS, MGT2 5400, 2G24FE, DC, no VSYS, MGT2 5400, 8G, AC, no VSYS, MGT 5400, 8G, DC, no VSYS, MGT2 VSYS Upgrade 0 to 5 VSYS Upgrade 5 to 25 VSYS Upgrade 25 to 50 VSYS Upgrade 50 to 100 VSYS Upgrade 100 to 250 VSYS Upgrade 250 to 500 VSYS Upgrade 0 to 500
PART NUMBER NS-5400-P00A-S00 NS-5400-P00D-S00 NS-5400-P01A-S00 NS-5400-P01D-S00 NS-5400-P01A-S01 NS-5400-P01D-S01 NS-5400-P01A-S02 NS-5400-P01D-S02 NS-5400-P10A-S00
Juniper Networks NetScreen-5400 bundles with Management 2
NS-5400-P10D-S00 NS-5400-P11A-S00 NS-5400-P11D-S00 NS-5000-VSYS-5 NS-5000-VSYS-25 NS-5000-VSYS-50 NS-5000-VSYS-100 NS-5000-VSYS-250 NS-5000-VSYS-500 NS-5000-VSYS NS-5000-MGT NS-5000-MGT2 NS-5000-8G NS-5000-2G24FE NS-SYS-GBIC-MSX NS-SYS-GBIC-MLX
NetScreen-5200 is a 2-slot modular chassis. NetScreen-5400 is a 4 slot modular chassis.
When to Sell
For large enterprise, carrier, and data center networks When multi-gigabit performance for both firewall and VPN is required High availability for resiliency and virtual systems for departmental firewalls required
Juniper Networks NetScreen-5000 Virtual System Upgrades NetScreen-5000 NetScreen-5000 NetScreen-5000 NetScreen-5000 NetScreen-5000 NetScreen-5000 NetScreen-5000 Management Module PART NUMBER 1 2G24FE SPM, 0 VSYS, AC 1 2G24FE SPM, 0 VSYS, DC 1 8G SPM, 0 VSYS, AC 1 8G SPM, 0 VSYS, DC 1 8G SPM, 100 VSYS, AC 1 8G SPM, 100 VSYS, DC 1 8G SPM, 500 VSYS, AC 1 8G SPM, 500 VSYS, DC 5200, 2G24FE, AC, no VSYS, MGT2 5200, 2G24FE, DC, no VSYS, MGT2 5200, 8G, AC, no VSYS, MGT2 5200, 8G, DC, no VSYS, MGT2 NS-5200-P00A-S00 NS-5200-P00D-S00 NS-5200-P01A-S00 NS-5200-P01D-S00 NS-5200-P01A-S01 NS-5200-P01D-S01 NS-5200-P01A-S02 NS-5200-P01D-S02 NS-5200-P10A-S00 NS-5200-P10D-S00 NS-5200-P11A-S00 NS-5200-P11A-S00 Management Module 2 8G (8 mini-GBIC) Secure Port Module 2G24FE (2 mini-GBIC24 10/100) Secure Port Module mini-GBIC transceiver - SX mini-GBIC transceiver - LX Juniper Networks NetScreen-5200 Components NetScreen-5200 NetScreen-5200 NetScreen-5200 NetScreen-5200 NetScreen-5400 NetScreen-5400 NetScreen-5400 NetScreen-5400 Chassis AC Power Supply DC Power Supply Fan Assembly Chassis AC Power Supply DC Power Supply Fan Assembly NS-5200-CHA NS-5200-PWR-AC NS-5200-PWR-DC NS-5200-FAN NS-5400-CHA NS-5400-PWR-AC NS-5400-PWR-DC NS-5400-FAN
Cisco PIX 535-UR/R; Check Point on Nokia IP1220, IP1260, IP2250; Fortinet FG3000, FG3600, FG4000; SonicWall PRO5060, and WatchGuard V200
Juniper Networks NetScreen-5000 Components

PRODUCT Juniper Networks NetScreen-5200 bundles NetScreen-5200 NetScreen-5200 NetScreen-5200 NetScreen-5200 NetScreen-5200 NetScreen-5200 NetScreen-5200 NetScreen-5200 NetScreen-5200 NetScreen-5200 NetScreen-5200 NetScreen-5200
Juniper Networks NetScreen-5200 bundles with Management 2
Juniper Networks NetScreen-5400 Components


SSL VPN 39
Juniper Networks NetScreen-Remote VPN & NetScreen-Remote Security Client

Juniper Networks enables enterprises to quickly and securely connect their remote users to the corporate resources they need to be productive. With the number of remote users enterprises potentially have to secure, they cant afford to have a solution that is difficult to deploy and configure. Understanding this, Juniper Networks has created a solution that is very easy to deploy and maintain. Enterprises can use the Juniper Networks NetScreenRemote VPN client for VPN functionality or combine VPN and personal firewall functionality with the Juniper Networks NetScreen-Remote Security Client to ensure the information remains private and the network secure against unauthorized users.
SSL VPN
Juniper Networks SSL VPNs lead the market with a complete range of products, tailored to meet the needs for companies of all sizes. Juniper Networks SSL VPNs are based on the Instant Virtual Extranet (IVE) platform, which uses SSL, the security protocol found in all standard Web browsers. The use of SSL eliminates the need for client software deployment, changes to internal servers, and costly ongoing maintenance and desktop support. Juniper Networks SSL VPN appliances combine the overall benefit of a lower total cost of ownership compared to traditional IPSec client solutions, with unique end-to-end security features.

Firewall / IPSec VPN Products Interoperable with IPSec compliant communication devices Support for the highest levels of encryption and authentication algorithms Integrated with personal firewall for stronger security
Juniper Networks SSL VPN Appliance Line

CUSTOMER NETWORK Small to mid-sized companies PRODUCTS TO RECOMMEND Juniper Networks NetScreen-RA 500 ENTERPRISE CLASS FEATURES Secure access for remote/mobile employees, with no client software Plug-n-play deployment Robust security features Secure LAN, intranet and extranet access for employees, business partners and customers Three access methods allow administrators to provision access by purpose Dynamic access privilege management Simplified administration available via Central Manager Upgrade to Secure Meeting available Scalable platform enables medium to large enterprises to offer secure extranet, intranet and LAN access from one platform. Enterprise performance/high availability Dynamic access privilege management, with 3 access methods FIPS compliant platform available Simplified administration available via Central Manager Upgrade to Secure Meeting available High performance platform for the largest and most complex secure extranet, intranet and LAN access deployments Hardware-based SSL acceleration and HTTP compression Dynamic access privilege management with 3 access methods Simplified administration available via Central Manager Upgrade to Secure Meeting available
When to Sell
Customer requests an IPSec remote access solution

PRODUCT NetScreen-Remote Security Client 10 User License NetScreen-Remote Security Client 100 User License NetScreen-Remote Security Client 1,000 User License NetScreen-Remote VPN Client 10 User License NetScreen-Remote VPN Client 100 User License NetScreen-Remote VPN Client 1,000 User License PART NUMBER NS-R8P-010 NS-R8P-100 NS-R8P-110 NS-R8A-010 NS-R8A-100 NS-R8A-110 Mid-sized to large enterprises Juniper Networks NetScreen-SA 3000 Small to mid-sized enterprises Juniper Networks NetScreen-SA 1000
SSL VPN
Large and multinational enterprises
Juniper Networks NetScreen-SA 5000

40 SSL VPN

SSL VPN 41
Juniper Networks NetScreen-RA 500 Series

The Juniper Networks NetScreen-RA 500 series of SSL VPN appliances provide small to medium enterprises a secure, cost-effective way to deploy employee remote access to corporate networks. Using SSL to provide encrypted transport, the NetScreen-RA 500 enables instant access for users with just a Web browser and eliminates Network Address Translation (NAT) and firewall traversal issues found with traditional remote access products. Built on Junipers market-leading IVE platform, the NetScreen-RA 500 series delivers enterprise-strength AAA (authentication, authorization, auditing), comprehensive endpoint defense, and a core security architecture that has been audited in depth by TruSecure and Cryptography Research and certified by ICSA labs.

PRODUCT NetScreen-RA 510 for 10 simultaneous users NetScreen-RA 525 for 25 simultaneous users NetScreen-RA 550 for 50 simultaneous users Upgrade NetScreen-RA 510 to 525 - 25 simultaneous users Upgrade NetScreen-RA 525 to 550 - 50 simultaneous users PART NUMBER NS-RA-510 NS-RA-525 NS-RA-550 NS-RA-525-UPG NS-RA-550-UPG
For More Information: http://www.juniper.net/products/ssl/ra_500.html

Provides secure access to remote or mobile employees by levering the Network Connect access provisioning method. This creates a secure virtual network layer connection between the remote user and the corporate LAN. Plug-n-play appliance that installs in minutes with minimal IT knowledge required. No client-side software to install, no changes to servers and limited ongoing maintenance resulting in a significantly reduced total cost of ownership versus traditional client-based IPSec solutions. Complete, secure access to LAN resources, ensuring that the endpoint device, data in transit and internal resources are secure. Seamless integration with broad range of authentication methods and protocols. Improved productivity for remote employees No network interoperability issues
SSL VPN
SSL VPN
When to Sell
Small to medium enterprise with between 10 and 50 concurrent users No need for business partner or customer access Customer looking for a plug-n-play appliance without client software or changes to infrastructure Enterprise has limited IT department, budget and rack space Need to eliminate NAT or firewall traversal issues No need for Secure Meeting or Central Manager functionality
AEP AG-60, Cisco VPN Concentrator 3005, Net6 HV 2000, Nokia IP 130, Safenet iGate

42 SSL VPN

SSL VPN 43
Juniper Networks NetScreen-SA 1000 Series

The Juniper Networks NetScreen-SA 1000 Series of SSL VPNs enables small-to-medium-sized companies to deploy cost effective remote access, extranet and intranet security. Users can access the corporate network and applications from any standard Web browser. The NetScreen-SA 1000 Series uses SSL, the security protocol found in all standard Web browsers, as a secure access transport mechanism. The use of SSL eliminates the need for client software deployment, changes to internal servers, and costly ongoing maintenance.

PRODUCT NetScreen-SA 1000 Baseline Products NetScreen-SA-1005-Baseline for 25 Simultaneous Users NetScreen-SA-1010-Baseline for 50 Simultaneous Users NetScreen-SA-1020-Baseline for 100 Simultaneous Users NetScreen-SA 1000 Baseline Cluster Pairs NetScreen-SA-1005-Baseline Cluster Pair for 25 Simultaneous Users NetScreen-SA-1010-Baseline Cluster Pair for 50 Simultaneous Users NetScreen-SA-1020-Baseline Cluster Pair for 100 Simultaneous Users NetScreen-SA 1000 Advanced Products NetScreen-SA-1005-Advanced for 25 Simultaneous Users NetScreen-SA-1010-Advanced for 50 Simultaneous Users NetScreen-SA-1020-Advanced for 100 Simultaneous Users NetScreen-SA 1000 Advanced Cluster Pairs NetScreen-SA-1005-Advanced Cluster Pair for 25 Simultaneous Users NetScreen-SA-1010-Advanced Cluster Pair for 50 Simultaneous Users NetScreen-SA-1020-Advanced Cluster Pair for 100 Simultaneous Users NetScreen-SA 1000 Secure Meeting Series Upgrades Secure Meeting Upgrade Option for 10 Simultaneous Users/ 5 Simultaneous Meetings Secure Meeting Upgrade Option for 25 Simultaneous Users/ 10 Simultaneous Meetings NS-SA-UPG-M10 NS-SA-UPG-M25 NS-SA-1005A-CP NS-SA-1010A-CP NS-SA-1020A-CP NS-SA-1005A NS-SA-1010A NS-SA-1020A NS-SA-1005B-CP NS-SA-1010B-CP NS-SA-1020B-CP NS-SA-1005B NS-SA-1010B NS-SA-1020B PART NUMBER

End-to-end security with Granular authorization and auditing down to the URL, file, application and server level Junipers Endpoint Defense Initiative provides best-of-breed endpoint security Identity-driven access can be specified by user group or role, as well as network, device and session attributes No client software deployments or changes to servers, and virtually no ongoing maintenance Secure extranet access with no DMZ build out, server hardening, resource duplication, or incremental deployments to add applications or users Secure remote access, intranets and extranets from one platform Streamlined manageability for unified administration Cluster pair deployment option, for high availability across the LAN and the WAN Secure Meeting upgrade for secure, cross-enterprise online meetings SSL VPN
When to Sell
For small to medium enterprises with between 25 and 100 concurrent users Seeking secure remote access for employees as well as business partners and/or customers Need for granular access controls at the file, URL and application levels Require cluster pair deployment for high availability Need Secure Meeting and/or Central Manager functionality
SSL VPN
This is only a subset of all part numbers available for this product. For the latest part number and pricing information, please see the Juniper Networks price list.
For More Information: http://www.juniper.net/products/ssl/sa_1000.html
Aventail EX-1500, Check Point Connectra, Cisco VPN 3000, F5 FirePass, Netilla Secure Gateway Appliance, Nokia Secure Access System, NetScaler Secure Remote Access

44 SSL VPN

SSL VPN 45

The Juniper Networks NetScreen-SA 3000 Series of SSL VPNs enable mid-to-large-sized organizations to provide cost effective remote access, partner extranet, and intranet security. Users can securely access corporate applications and resources from any standard Web browser. Based on the award-winning IVE platform, the NetScreen-SA 3000 Series appliances feature rich access privilege management functionality that can be used to create secure customer or partner extranets with no infrastructure changes, no DMZ deployments, and no software agents.

PRODUCT NetScreen-SA 3000 Baseline Products NetScreen-SA-3010-Baseline for 50 Simultaneous Users NetScreen-SA-3020-Baseline for 100 Simultaneous Users NetScreen-SA-3030-Baseline for 250 Simultaneous Users NetScreen-SA-3040-Baseline for 500 Simultaneous Users NetScreen-SA-3050-Baseline for 1000 Simultaneous Users NetScreen-SA 3000 Baseline Cluster Pairs NetScreen-SA-3010-Baseline Cluster Pair for 50 Simultaneous Users NS-SA-3010B-CP NS-SA-3020B-CP NS-SA-3030B-CP NS-SA-3040B-CP NS-SA-3050B-CP NS-SA-3010A NS-SA-3020A NS-SA-3030A NS-SA-3040A NS-SA-3050A NS-SA-3010A-CP NS-SA-3020A-CP NS-SA-3030A-CP NS-SA-3040A-CP NS-SA-3050A-CP NetScreen-SA-3020-Baseline Cluster Pair for 100 Simultaneous Users NetScreen-SA-3030-Baseline Cluster Pair for 250 Simultaneous Users NetScreen-SA-3040-Baseline Cluster Pair for 500 Simultaneous Users NetScreen-SA-3050-Baseline Cluster Pair for 1000 Simultaneous Users NetScreen-SA 3000 Advanced Products NetScreen-SA-3010-Advanced for 50 Simultaneous Users NetScreen-SA-3020-Advanced for 100 Simultaneous Users NetScreen-SA-3030-Advanced for 250 Simultaneous Users NetScreen-SA-3040-Advanced for 500 Simultaneous Users NetScreen-SA-3050-Advanced for 1000 Simultaneous Users NetScreen-SA 3000 Advanced Cluster Pairs NetScreen-SA-3010-Advanced Cluster Pair for 50 Simultaneous Users NetScreen-SA-3020-Advanced Cluster Pair for 100 Simultaneous Users NetScreen-SA-3030-Advanced Cluster Pair for 250 Simultaneous Users NetScreen-SA-3040-Advanced Cluster Pair for 500 Simultaneous Users NetScreen-SA-3050-Advanced Cluster Pair for 1000 Simultaneous Users NetScreen-SA 3000 Secure Meeting Series Upgrades Secure Meeting Upgrade Option for 25 Simultaneous Users/ 10 Simultaneous Meetings Secure Meeting Upgrade Option for 50 Simultaneous Users/ 10 Simultaneous Meetings NS-SA-UPG-M25 NS-SA-UPG-M50 NS-SA-3010B NS-SA-3020B NS-SA-3030B NS-SA-3040B NS-SA-3050B PART NUMBER

Enhanced security with access privilege management for powerful, flexible authentication and authorization policies with no software deployments Identity driven access can be specified by user group & role, as well as network, device, and session attributes Endpoint client, device, data and server security controls Three different access methods allow enterprises to provision by purpose No client software deployments or changes to servers, and virtually no ongoing maintenance High-performance, scalable and manageable with cluster pair deployment option, for high availability across the LAN and the WAN Secure Meeting upgrade for secure, cross-enterprise online meetings Fine grained auditing and logging FIPS-cryptographic key handling in a certified module SSL VPN
When to Sell
For medium to large enterprises with between 50 and 1000 concurrent users Seeking secure remote access for employees as well as business partners and/or customers Need for granular access controls at the file, URL and application levels Require cluster pair deployment for high availability Need Secure Meeting and/or Central Manager functionality Where FIPS certification is a requirement
SSL VPN

46 SSL VPN

SSL VPN 47

The Juniper Networks NetScreen-SA 5000 Series of SSL VPNs is designed for large and multinational enterprises. Featuring best-in-class performance, scalability, and redundancy for organizations with high volume secure access and authorization requirements. Built on the IVE platform, they use SSL available in all Web browsers as a means of secure transport. This enables the enterprise to provide remote access to mobile employees and contractors without deploying client software, as well as secure extranet or intranet access with no DMZ build out, server hardening, Web agent deployments, or ongoing maintenance. It can be centrally managed with NetScreeen-SA Central Manager and deployed in multi-unit and multi-site clusters for a solution that is both manageable and scaleable.

PRODUCT NetScreen-SA 5000 Baseline Products NetScreen-SA-5020-Baseline for 100 Simultaneous Users NetScreen-SA-5030-Baseline for 250 Simultaneous Users NetScreen-SA-5040-Baseline for 500 Simultaneous Users NetScreen-SA-5050-Baseline for 1000 Simultaneous Users NetScreen-SA-5060-Baseline for 2500 Simultaneous Users NetScreen-SA 5000 Baseline Cluster Pairs NetScreen-SA-5020-Baseline Cluster Pair for 100 Simultaneous Users NetScreen-SA-5030-Baseline Cluster Pair for 250 Simultaneous Users NetScreen-SA-5040-Baseline Cluster Pair for 500 Simultaneous Users NetScreen-SA-5050-Baseline Cluster Pair for 1000 Simultaneous Users NetScreen-SA-5060-Baseline Cluster Pair for 2500 Simultaneous Users NetScreen-SA 5000 Baseline Three Unit Single-Site Clusters NetScreen-SA-5000-Baseline 3-Unit Cluster for 1000 Simultaneous Users NetScreen-SA-5000-Baseline 3-Unit Cluster for 2500 Simultaneous Users NetScreen-SA 5000 Baseline Four Unit Single-Site Clusters NetScreen-SA-5000-Baseline 4-Unit Cluster for 1000 Simultaneous Users NetScreen-SA-5000-Baseline 4-Unit Cluster for 2500 Simultaneous Users NetScreen-SA-5000-Baseline 4-Unit Cluster for 5000 Simultaneous Users NetScreen-SA 5000 Advanced Products NetScreen-SA-5020-Advanced for 100 Simultaneous Users NetScreen-SA-5030-Advanced for 250 Simultaneous Users NetScreen-SA-5040-Advanced for 500 Simultaneous Users NetScreen-SA-5050-Advanced for 1000 Simultaneous Users NetScreen-SA-5060-Advanced for 2500 Simultaneous Users NetScreen-SA 5000 Advanced Cluster Pairs NetScreen-SA-5020-Advanced Cluster Pair for 100 Simultaneous Users NetScreen-SA-5030-Advanced Cluster Pair for 250 Simultaneous Users NetScreen-SA-5040-Advanced Cluster Pair for 500 Simultaneous Users NetScreen-SA-5050-Advanced Cluster Pair for 1000 Simultaneous Users NetScreen-SA-5060-Advanced Cluster Pair for 2500 Simultaneous Users NetScreen-SA 5000 Advanced Three Unit Single-Site Clusters NetScreen-SA-5000-Advanced 3-Unit Cluster for 1000 Simultaneous Users NetScreen-SA-5000-Advanced 3-Unit Cluster for 2500 Simultaneous Users NetScreen-SA 5000 Advanced Four Unit Single-Site Clusters NetScreen-SA-5000-Advanced 4-Unit Cluster for 1000 Simultaneous Users NetScreen-SA-5000-Advanced 4-Unit Cluster for 2500 Simultaneous Users NetScreen-SA-5000-Advanced 4-Unit Cluster for 5000 Simultaneous Users NetScreen-SA 5000 Secure Meeting Series Upgrades Secure Meeting Upgrade Option for 25 Simultaneous Users/ 10 Simultaneous Meetings Secure Meeting Upgrade Option for 50 Simultaneous Users/ 10 Simultaneous Meetings Secure Meeting Upgrade Option for 100 Simultaneous Users/ 20 Simultaneous Meetings PART NUMBER NS-SA-5020B NS-SA-5030B NS-SA-5040B NS-SA-5050B NS-SA-5060B NS-SA-5020B-CP NS-SA-5030B-CP NS-SA-5040B-CP NS-SA-5050B-CP NS-SA-5060B-CP NS-SA-5000B-C3-1000 NS-SA-5000B-C3-2500 NS-SA-5000B-C4-1000 NS-SA-5000B-C4-2500 NS-SA-5000B-C4-5000 NS-SA-5020A NS-SA-5030A NS-SA-5040A NS-SA-5050A NS-SA-5060A NS-SA-5020A-CP NS-SA-5030A-CP NS-SA-5040A-CP NS-SA-5050A-CP NS-SA-5060A-CP NS-SA-5000A-C3-1000 NS-SA-5000A-C3-2500 NS-SA-5000A-C4-1000 NS-SA-5000A-C4-2500 NS-SA-5000A-C4-5000

Performance, scalability & robust high availability ideal for large number of users and complex application needs Hardware-based performance enhancing features, including SSL acceleration and HTTP compression, to provide optimal scalability End-to-end security with access privilege management for powerful authentication and authorization policies with no additional software deployments Identity-driven access can be specified by user group or role, as well as network, device, and session attributes Fine-grained auditing and logging High availability multi-unit clustering options across the LAN and WAN Central management option for unified administration and user self service features enhance productivity while lowering administrative overhead Secure remote access with no client software deployments or changes to servers, and virtually no ongoing maintenance Secure Meeting upgrade for secure, cross-enterprise online meetings FIPS-cryptographic key handling in a certified module
SSL VPN
SSL VPN
When to Sell
For large and multinational enterprises with between 100 and 2,500 concurrent users in a single appliance and thousands of users across the enterprise serviced with clustering capabilities Seeking secure remote access for employees as well as business partners and/or customers Need for remote access controls at the file, URL and application levels Where multi-unit clustering is a requirement for scalability of secure LAN, intranet and extranet access Need Secure Meeting and/or Central Manager functionality Where FIPS certification is a requirement
NS-SA-UPG-M25 NS-SA-UPG-M50 NS-SA-UPG-M100

48 Intrusion Detection and Prevention (IDP)

Intrusion Detection and Prevention (IDP) 49
Intrusion Detection and Prevention (IDP)

The Juniper Networks Intrusion Detection and Prevention products (Juniper Networks IDP) integrate application and network visibility with incident investigation and remediation to help customers quickly and confidently deploy inline attack prevention. When deployed inline, Juniper Networks IDP effectively identifies and stops network and application level attacks before they inflict any damages, minimizing the time and costs associated with intrusions. The Juniper Networks IDP product line includes the NetScreen-IDP 10, NetScreen-IDP 100, NetScreen-IDP 500 and the NetScreen-IDP 1000. All of the products contain the full IDP features and are managed using the same management interface.

NETSCREEN-IDP NETSCREEN-IDP NETSCREEN-IDP 10 100 500 Maximum Throughput Maximum Number of Sessions Operational Modes Detection Mechanisms Signature Updates Number of Interfaces 20 MB 10,000 200 MB 70,000 500 MB 220,000 NETSCREEN-IDP 1000 1 GB 500,000
Passive sniffer, inline bridge, inline Proxy-ARP, and inline router 8 including Stateful Signatures and backdoor detection Weekly and emergency 2 Copper Gigabit 2 Copper Gigabit 2 Copper Gigabit 2 Copper Gigabit and 1 10/100 and 2 10/100 and 2 GBIC and 2 GBIC Standard Standard Standard Standard Fail-Open Only (Requires Bypass Unit) Standard failover, load sharing, clustering and 3rd party failover
High Availability Support

Multi-method detection system that includes compound signatures, stateful signatures, protocol anomaly and backdoor detection Extensive signature customization to improve the ability to detect unique attacks and tailor the signature specific to the customers requirements Closed loop investigation process to quickly see the big picture and then drill down to the appropriate level of detail to make informed security decisions Enterprise Security Profiler to gain insight into network and attack activity that accelerates inline deployment and facilitates attack investigation Policy Editor to create and deploy granular security policies based on what traffic to look at, what attacks to look for in that traffic, and how to respond when an attack has been detected Log Viewer to investigate specific security incidents with the ability to customize the way information is processed within the system Centralized rule-based management approach to simplify deployment, configuration and maintenance Fully customizable reporting to generate up to the minute status on network activity IDP clustering to enable stateful, standalone high availability minimizing the risk of a single point of failure and maximizing network protection

PRODUCT Juniper Networks NetScreen-IDP 10 Juniper Networks NetScreen-IDP 100 Juniper Networks NetScreen-IDP 500 Juniper Networks NetScreen-IDP 1000 PART NUMBER NS-IDP-10-003 NS-IDP-100-002 NS-IDP-500-002 NS-IDP-1000 NS-IDP-BYP NS-IDP-GB NS-IDP-GB2 NS-IDP-QUAD-NIC NS-IDP-HD-002 NS-IDP- PWR-AC-002 NS-IDP-RCK-01 NS-IDP-RCK-02
Accessories
NetScreen-IDP Bypass Fail-Open Device (IDP-10 / -100 only) NetScreen-IDP Fiber Gigabit NICs (set of 2 Cards, IDP-100 only) NetScreen IDP Dual Fiber Gigabit NIC (IDP-500/-1000 only) NetScreen-IDP Quad 10/100/1000 NIC (IDP-100/-500/-1000 only) NetScreen-IDP Redundant Hard Drive (IDP-100 only) NetScreen-IDP AC Power Supply (IDP-100 only) NetScreen-IDP Rapid Rail Kit NetScreen-IDP Chatsworth Rail Kit
Intrusion Detection and Prevention (IDP)
When to Sell
NetScreen-IDP 10: For small network segments or low speed links NetScreen-IDP 100: For medium central site and large branch offices NetScreen-IDP 500: For medium to large central sites or high traffic areas NetScreen-IDP 1000: For large central site or high traffic areas When preventing and not just detecting attacks is a requirement for the customer When a customer is looking for a more accurate and manageable intrusion detection solution For More Information: http://www.juniper.net/products/intrusion/
Enterasys Dragon, Intruvert, ISS Proventia, NFR, Sourcefire, Tipping Point UnityOne

50 Security Management

Security Management 51
Security Management
Juniper Networks NetScreen-Security Manager
Juniper Networks NetScreen-Security Manager takes a new approach to security management by providing IT departments with an easy-to-use solution that controls all aspects of the Juniper Networks firewall / IPSec VPN devices including device configuration, network settings, and security policy. Unlike some solutions that require the use of multiple management tools to control a single device, NetScreen-Security Manager enables IT departments to control the entire device lifecycle with a single, centralized solution. The NetScreen-Statistical Report Server is the statistical archival and reporting tool for NetScreen-Security Manager. The Statistical Report Server is used to store statistical information from the managed firewall / IPSec VPN devices in the network, and then generate reports from this data enabling further viewing and analysis of the information about a security deployment.
Check Point SmartCenter and Provider-1, Cisco VPN and Security Management Solution (VMS), Fortinet FortiManager, SonicWALL Global Management System (GMS), WatchGuard System Manager (Firebox III and Firebox X products), WatchGuard Central Policy Manager (vClass products)

USER INTERFACE Operating System Support Minimum CPU Minimum RAM Minimum Available Disk Space Minimum Connectivity to Server Operating System Support Minimum CPU Minimum RAM Minimum Hard Disk Minimum NIC Maximum devices managed per server Device Support Microsoft Windows 2000, Windows NT, Windows XP, and Red Hat Linux 8.0, Red Hat Linux 9.0, Red Hat Enterprise 3.0 400 mHz Pentium II or equivalent 256 MB RAM, 512 MB recommended 100 MB 384 kbps (DSL) or LAN Solaris 8, Solaris 9, Red Hat Linux 8.0, Red Hat Linux 9.0, Red Hat Enterprise 3.0 1 GHz 1 GB 10K rpm disk with at least 18 GB disk space (logs are estimated to be an average of 100 bytes each) 100 Mbs 2000* NetScreen-Hardware Security Client, NetScreen-5XP, NetScreen-5XT, NetScreen-5GT, NetScreen-5GT ADSL, NetScreen-25, NetScreen-50, NetScreen-204, NetScreen-208, NetScreen-500, NetScreen-ISG 2000, NetScreen-5200, NetScreen-5400 ScreenOS 5.1.0*, ScreenOS 5.0.0, ScreenOS 5.0-GPRS, ScreenOS 4.0.3, ScreenOS 4.0.1, ScreenOS 4.0.1-SBR, ScreenOS 4.0.1-MCAST, ScreenOS 4.0.0, ScreenOS 4.0.0 DIAL2
Management Server (GUI Server and Device Server combined)

Intuitive GUI simplifies complex tasks such as device configuration, policy creation, and VPN deployment Delegation of administrative roles provides information access to those who need it Object locking allows multiple administrators to safely modify different policies or devices concurrently Full High Availability with automatic synchronization and failover Device templates to minimize configuration errors by managing any or all aspects of a device or group of devices via a template VPN manager to accelerate VPN deployments by creating all the necessary rules after a basic topology has been defined Log viewing allows logs stored within the system to be viewed in real time with filters to allow an administrator to perform rapid analysis of security status and events Statistical Report Server: Up to 40 different reports in 4 categories cover a full range of data points that can be used for historical analysis to make sound business decisions moving forward Statistical Report Server: Report filter can be set up based on specific devices or device groups, or timeframe for a customized viewpoint.
Juniper Networks Firewall / IPSec VPN Device & Software Support
ScreenOS Support
When to Sell
Customer has a large-scale security deployment to manage Wants one central interface for configuration, management and reporting of devices Wants to ensure policy enforcement from the corporate headquarters Has different administrators that manage different aspects of the companys network security Needs to provide reports to different levels within the organization Needs to reduce provisioning, configuration and troubleshooting time as well as the associated costs
*Using NetScreen-Security Manager Feature Pack 3
Security Management

52 Security Management

Security Management 53

PRODUCT NetScreen-Security Manager, 10 devices NetScreen-Security Manager, 25 devices NetScreen-Security Manager, 50 devices NetScreen-Security Manager, 100 devices NetScreen-Security Manager, 200 devices NetScreen-Security Manager, 500 devices NetScreen-Security Manager, 1000 devices NetScreen-Statistical Report Server PART NUMBER NS-SM-10 NS-SM-25 NS-SM-50 NS-SM-100 NS-SM-200 NS-SM-500 NS-SM-1000 NS-SM-SRS
Juniper Networks NetScreen-SA Central Manager

The Juniper Networks Secure Access family of appliances has consistently led the SSL VPN market, providing secure access to remote/mobile employees, business partners, and customers. As SSL VPN deployments grow both in cluster size and in breadth of geographic reach, so too has the challenge in providing streamlined, efficient management. Juniper Networks has extended its core competence in the SSL VPN marketplace with the introduction of the Juniper Networks NetScreen-SA Central Manager, a robust product with an intuitive web-based UI designed to facilitate the task of configuring, updating and monitoring Secure Access appliances whether within a single cluster or across a global cluster deployment.

System dashboard for an at-a-glance graphical representation of system-wide activities. Local back-up and restore eliminates time-intensive process of saving files, downloading to ftp site, then uploading files when needed Back-up essential for quick disaster recovery configurations can be restored in seconds instead of in minutes Push technology eliminates incomplete security policy enforcement by sending information to other gateways or clusters Consistent security policy enforcement with synchronization to automate propagation of changes within a cluster Comprehensive, actionable auditing with rich log filtering capabilities for quick searches of critical events Custom log filters, so events can be viewed in the most pertinent context for each admin
When to Sell
Customer has a large-scale secure access solution to manage and needs a disaster recovery plan Wants to maintain a consistent security policy across the enterprise Needs a system-wide view of the deployment to see the impact of activity as well as which applications are being utilized
F5, Nokia

PRODUCT NetScreen-SA Central Manager for Secure Access Appliances NetScreen-SA Central Manager for 1 device NetScreen-SA Central Manager for 2 devices in a single cluster NetScreen-SA Central Manager for 3 devices in a single cluster NetScreen-SA Central Manager for 4 devices in a single cluster NetScreen-SA Central Manager for Secure Meeting Appliances NS-SA-CM NS-SA-CM2 NS-SA-CM3 NS-SA-CM4 NS-SM-CM NS-SM-CM2 PART NUMBER
Security Management
NetScreen-SM Central Manager for 1 device NetScreen-SM Central Manager for 2 devices in a single cluster
Security Management
For More Information: http://www.juniper.net/products/ssl/management.html

54 Juniper Networks Frequently asked Questions

Juniper Networks Frequently asked Questions 55
Juniper Networks Frequently asked Questions

Why recommend Juniper Networking solutions?
Juniper Networks brings a new pace of innovation to the industry through purpose-built platforms and sophisticated software. It is recognized as a center of excellence in the development of silicon and software that support high-performance, intelligent networks, and remains at the forefront of industry initiatives that drive the continuing transformation of these networks and the businesses they support.
What if I need more information?

Juniper Networks provides a comprehensive set of literature to spark ideas, provide frameworks and ensure that you have the technical information you need to design, select, implement and sell Juniper Networks. Please see below a list of useful URLs and the J-partner help desk telephone number and e-mail address. Home Page: http://www.juniper.net Product Information: http://www.juniper.net/products/ Solutions Information: http://www.juniper.net/solutions/ Technical Support: http://www.juniper.net/support/ J-Partner Center: http://www.juniper.net/partners/ Certification Requirements: http://www.juniper.net/training/certification/ Find a Partner: http://www.juniper.net/partners/find_partner.html Partner Registration: http://www.juniper.net/partners/partner_channels.html Product End of Life Matrix: http://www.juniper.net/support/eol/ Training: http://www.juniper.net/training/ Sales Offices Contact Info: http://www.juniper.net/company/contactus/sales.html J-partner helpdesk: + 31 20 712 58 57 Email: insidesales-emea@juniper.net.
Does Juniper Networks have a Sales Incentive program?

Yes. The J-Rewards program rewards you for the value you add to selling and supporting Juniper Networks solutions. It is available exclusively to members of the J-Partner Program, whether you are a sales representative or sales engineer. You can earn and accumulate points quickly by selling Juniper Networks which can quickly turn into fantastic rewards. For more information go to http://www.juniper.net/jrewards/
What about Reseller Training?

Juniper Networks Partner Training delivers the training and knowledge requested by our authorized Partners. The comprehensive curriculum includes Sales and Technical Essentials designed to highlight products and solutions. These on-demand training modules have learning maps to help you determine your technology, platforms and solutions training needs. For more information go to http://www.juniper.net/training/
What about Customer and Support Services?

Juniper Networks provides a comprehensive and flexible portfolio of industry leading technical support, professional services, and education programs that help customers gain the maximum value from their network investments. The full range of service elements within our three Customer Services families Transition, Operation, and Optimization allows you to not just respond to market factors, but anticipate them. Juniper Networks portfolio of support services provides the backup support that large networks demand and lets customers select from a variety of options that augment their in-house technical expertise. For more Information see the Partner Center Customer Support pages at: (Partner Center login required) https://www.juniper.net/partners/partner_center/content/reseller/cs/services/

56 Product Warranty Information

General Disclaimer 57
Product Warranty Information

JUNIPER PRODUCT All Juniper E-, M-, T-, and J-Series WARRANTY START DATE* Juniper product date-of-ship HARDWARE** 1 year 20-day return-to-factory (RTF) return/replace 1 year 20-day return-to-factory (RTF) return/replace 1 year 20-day return-to-factory (RTF) return/replace 1 year 20-day return-to-factory (RTF) return/replace Not Applicable SOFTWARE 90 days software media for JUNOS(e) products 1x software update or upgrade JUNIPER TECHNICAL ASSISTANCE (JTAC)*** 1 year online support for RMA processing only 1 year online support for RMA processing only
NetScreen FW/VPN Juniper product and Secure Access date-of-ship Products NetScreen AV Products Juniper product date-of-ship
1 year - ScreenOS 1 year online support AV Signature Service for RMA processing DI Signature only Service 1x software update or upgrade 1x software update or upgrade 1 year online support for RMA processing only Not Applicable
NetScreen IDP
Juniper product date-of-ship Juniper product date-of-ship
NetScreen Remote
*90 days will be added for any product shipped via channel on the back-end systems **The 20 day clock starts once product has been received by Juniper; Ship time is not part of 20 days ***For customers that require troubleshooting, install/config assistance should purchase a support contract
This is intended as a summary only. Please refer to the current published version of the Juniper Networks Warranty policy located at: http://www.juniper.net/support/warranty/
General Disclaimer Although Juniper Networks has attempted to provide accurate information in this Guide, Juniper Networks assumes no responsibility for the accuracy of the information. Juniper Networks may change the programs or products mentioned at any time without prior notice. Mention of non-Juniper Networks products or services is for information purposes only and constitutes neither an endorsement nor a recommendation of such products or services or of any company that develops or sells such products or services. Many of the Juniper Networks products and services identified in this Guide are provided with written software licenses and limited warranties. Those licenses and warranties provide the purchasers of those products with certain rights. Nothing in this Guide shall be deemed to expand, alter, or modify any warranty or license provided by Juniper Networks with any Juniper Networks product, or to create any new or additional warranties or licenses.
About Juniper Networks, Inc. Juniper Networks is the leader in enabling secure and assured communications over a single IP network. The company's purpose-built, high performance IP platforms enable customers to support many different services and applications at scale. Service providers, enterprises, governments and research and education institutions worldwide rely on Juniper Networks to deliver products for building networks that are tailored to the specific needs of their users, services and applications. Juniper Networks' portfolio of proven networking and security solutions supports the complex scale, security and performance requirements of the world's most demanding networks. Additional information can be found at www.juniper.net.
Europe, Middle East, Africa Regional Sales Headquarters Juniper Networks B.V. Beech Avenue 3 1119 RA Schiphol Rijk Amsterdam Phone: 31-20-712-5700 Fax: 31-20-712-5701
Copyright 2005 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, NetScreen, NetScreen Technologies, GigaScreen, NetScreen-Global PRO, NetScreen-Remote, NetScreenOS and the NetScreen logo are trademarks and registered trademarks of Juniper Networks, Inc. in the United States and other countries. The following are trademarks of Juniper Networks, Inc.: ERX, ESP, E-Series, Instant Virtual Extranet, Internet Processor, J2300, J4300, J6300, J-Protect, J-series, J-Web, JUNOS, JUNOScope, JUNOscript, JUNOSe, M5, M7i, M10, M20, M40, M40e, M160, M320, Mseries, MMD, NetScreen-5GT, NetScreen-5XP, NetScreen-25, NetScreen-50, NetScreen-204, NetScreen-208, NetScreen-500, NetScreen-5200, NetScreen-5400, NetScreen-IDP 10, NetScreen-IDP 100, NetScreen-IDP 500, NetScreen-Remote-Security Client, NetScreen-Remote VPN Client, NetScreen 1000 Series, NetScreen-SA 3000 Series, NetScreen-SA 5000 Series, NetScreen-SA Central Manager, NetScreen Secure Access, NetScreen-SM 3000, NetScreen-Security Manager, NMC-RX, SDX, Stateful Signature, T320, T640, and T-series. All other trademarks and registered trademarks are the property of their respective companies. Information in this document is subject to change with out notice. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without receiving written permission from Juniper Networks, Inc. Printed in the UK Stock No: 080570-001 03/05

Juniper Networks Quick Reference Guide

Hochgeladen von

Dokumentinformationen

Originalbeschreibung:

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

Juniper Networks Quick Reference Guide

Hochgeladen von

Copyright:

Verfügbare Formate

Quick Reference Guide