Download Juniper NetScreen-5GT 10 User

Transcript
5GT Series
Page 5GT 10 user
or plus
Firewall
5GT ADSL
10 user
or plus
5GT Wireless
10 user
or plus
Number of network attacks detected
31
31
31
Network attack detection
Yes
Yes
Yes
DoS and DDoS protections
Yes
Yes
Yes
TCP reassembly for fragmented
packet protection
Yes
Yes
Yes
Malformed packet protections
Yes
Yes
Malicious Web filtering
Yes
Up to 48 URLs
Brute force attack mitigation
Yes
Yes
Yes
Syn cookie protection
Yes
Yes
Yes
Zone-based IP spoofing
Yes
Yes
Yes
Logging/Monitoring
5GT 10 user
or plus
Syslog (multiple servers)
E-mail (2 addresses)
5GT ADSL
10 user
or plus
5GT Wireless
10 user
or plus
External, up to 4 servers
Yes
Yes
Yes
External
External
External
SNMP (v1, v2)
Yes
Yes
Yes
Standard and custom MIB
Yes
Yes
Yes
Traceroute
Yes
Yes
Yes
At session start and end
Yes
Yes
Yes
NetIQ WebTrends
Virtualization
Virtual routers (VRs)
3
3
3
802.1Q VLan Tagging
Yes
Yes
Yes
Routing
VPN
Concurrent VPN tunnels
Up to 10
Tunnel interfaces
Up to 10
OSPF/BGP/RIPv1/v2 dynamic routing
Static routes
DES (56 bit), 3DES (168-bit) and AES
encryption
Yes
Yes
Yes
MD-5 and SHA-1 authentication
Yes
Yes
Yes
Manual Key, IKE, PKI (X.509)
Perfect forward secrecy (DH Groups)
Prevent replay attack
Yes
Yes
Yes
1, 2, 5
1, 2, 5
1, 2, 5
Yes
Yes
Yes
Source Based Routing, Source
Interface Based Routing
Equal cost multi-path routing
IGMP groups
3 instances each
1024
1024
1024
Yes
Yes
Yes
Yes
Yes
Yes
2400
2400
2400
High Availability (HA)
HA Lite
Remote access VPN
Yes
Yes
Yes
Dial Backup(6)
L2TP within IPSec
Yes
Yes
Yes
Dual Untrust
Dead Peer Detection
Yes
Yes
Yes
VoIP
IPSec NAT traversal
Yes
Yes
Yes
Redundant VPN gateways
Yes
Yes
Yes
VPN tunnel monitor
Yes
Yes
Yes
Yes - with Extended License Key
Yes
Yes
Yes
Yes
Yes
Yes
H.323 ALG
Yes
Yes
Yes
SIP ALG
Yes
Yes
Yes
Unified Threat Management / Content Security
SCCP ALG
Yes
Yes
Yes
IPS (Deep Inspection FW)
Yes
Yes
Yes
Yes/Yes
Yes/Yes
Yes/Yes
Yes
Yes
Yes
Yes/Yes/No
Yes/Yes/Yes
Yes/Yes/Yes
(w/ADSL)
Yes
Yes
Yes
MGCP ALG
Protocol anomaly detection
Yes
Yes
Yes
NAT for H.323/SIP
Stateful protocol signatures
Yes
Yes
Yes
IP Address Assignment
Yes
Yes
Antivirus(3)
Yes
Signature database
100,000+
Maximum AV Users(4)
Static
DHCP/PPPoE/PPPOA client
POP3, SMTP, HTTP, IMAP, FTP
Anti-Phishing
Yes
Yes
Yes
Internal DHCP server
Yes
Yes
Yes
Anti-Spyware
Yes
Yes
Yes
DHCP relay
Yes
Yes
Yes
Anti-Adware
Yes
Yes
Yes
PKI Support
Anti-Keylogger
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
PKI certificate requests (PKCS 7 and
PKCS 10)
Yes
Anti-Spam(4)
Integrated URL filtering(5)
Yes
Yes
Yes
Automated certificate enrollment
(SCEP)
Yes
Yes
Yes
Online Certificate Status Protocol
(OCSP)
Yes
Yes
Yes
Yes
Yes
Yes
External URL filtering (6)
Yes
Yes
Yes
up to 100
up to 100
up to 100
Firewall and VPN User Authentication
Built-in (internal) database - user limit
3rd Party user authentication
Self Signed Certificates
RADIUS, RSA, SecurID, 802.1x and LDAP
Certificate Authorities Supported
XAUTH VPN authentication
Yes
Yes
Yes
RADIUS Accounting
Web-based authentication
Yes
Yes
Yes
RADIUS Start/Stop
Verisign, Entrust, Microsoft, RSA Keon, iPlanet
(Netscape), DOD PKI, Baltimore
Yes
Yes
Yes
System Management
IPS
Deep Inspection (DI) firewall
(2)
Yes
Yes
Yes
WebUI (HTTP and HTTPS)
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Protocol anomaly detection
Yes
Yes
Yes
Command Line Interface (console)
Stateful protocol signatures
Yes
Yes
Yes
Command Line Interface (telnet)
Command Line Interface (SSH)
Yes, v1.5 and v2.0 compatible
NetScreen-Security Manager
Yes
Yes
Yes
All management via VPN tunnel on
any interface
Yes
Yes
Yes
Rapid deployment
Yes
Yes
Yes