Juniper Networks SSG5 Wireless Secure VPN Firewall Gateway with 128 MB RAM --46 For Sale

Overview:The Juniper Networks SSG5 Secure Services Gateways are purpose-built security appliances that deliver a perfect blend of performance, security, routing and LAN/WAN connectivity for small branch offices, fixed telecommuters and small standalone business deployments. Traffic flowing in and out of the branch office or business is protected from worms, spyware, trojans, and malware by a complete set of Unified Threat Management security features that include stateful firewall, IPsec VPN, intrusion prevention system (IPS), antivirus (includes antispyware, anti-adware, antiphishing), antispam and Web filtering.
Connectivity and Routing:The SSG5 has seven on-board 10/100 interfaces with optional fixed WAN ports. The broad array of I/O options coupled with WAN protocol and encapsulation support in the routing engine make the SSG5 a solution that can easily be deployed as a traditional branch office router or as a consolidated security and routing device to reduce CapEx and OpEx. The SSG5 supports 802.11 a/b/g as a factory configured option supported by a wide array of wireless specific security features.
Specifications:Maximum Performance and Capacity:

• ScreenOS version tested: 6.3
• Firewall performance (Large packets): 160 Mbps
• Firewall performance (IMIX): 90 Mbps
• Firewall packets per second (64 byte): 30,000 PPS
• Advanced Encryption Standard (AES) 256+SHA-1 VPN Performance: 40 Mbps
• 3DES encryption +SHA-1 VPN performance: 40 Mbps
• Maximum concurrent sessions: 8,000/16,000
• New sessions/second: 2,800
• Maximum security policies: 200
• Maximum users supported: Unrestricted

Network Connectivity

• Fixed I/O: 7x10/100
• WAN interface options Factory configured: ISDN BRI S/T or V.92

Firewall

• Network attack detection: Yes
• DoS and DDoS protection: Yes
• TCP reassembly for fragmented packet protection: Yes
• Brute force attack mitigation: Yes
• SYN cookie protection: Yes
• Zone-based IP spoofing: Yes
• Malformed packet protection: Yes
• Unified Threat ManagementIPS (Deep Inspection firewall): Yes
• Protocol anomaly detection: Yes
• Stateful protocol signatures: Yes
• IPS/DI attack pattern obfuscation: Yes
• Antivirus: Yes
• Instant message AV: Yes
• Signature database: 200,000+
• Protocols scanned: POP3, HTTP, SMTP, IMAP, FTP, IM
• Antispyware: Yes
• Anti-adware: Yes
• Anti-keylogger: Yes
• Anti-spam: Yes
• Integrated URL filtering: Yes
• External URL filtering: Yes

VoIP Security

• H.323. Application-level gateway (ALG): Yes
• SIP ALG: Yes
• MGCP ALG: Yes
• SCCP ALG: Yes
• Network Address Translation (NAT) for VoIP protocols: Yes

IPsec VPN

• Auto-Connect VPN: Yes
• Concurrent VPN tunnels: 25/40
• Tunnel interfaces: 10
• DES encryption (56-bit), 3DES encryption (168-bit) and Advanced Encryption Standard (AES) (256-bit): Yes
• MD-5 and SHA-1 authentication: Yes
• Manual key, Internet Key Exchange (IKE), IKEv2 with EAP public key infrastructure (PKI) (X.509): Yes
• Perfect forward secrecy (DH Groups): 1,2,5
• Prevent replay attack: Yes
• Remote access VPN: Yes
• Layer2 Tunneling Protocol (L2TP) within IPsec: Yes
• IPsec Network Address Translation (NAT) traversal: Yes
• Redundant VPN gateways: Yes