Juniper SSG140 Product Overview
SSG140 SECURE
SERVICES GATEWAY
DATASHEET
Product Overview
The SSG140 Secure Services
Gateway is a purpose-built security
appliance that delivers a perfect
blend of performance, security,
routing and LAN/WAN connectivity
for medium sized branch offices and
business deployments. Traffic flowing
in and out of the branch office or
business is protected from worms,
spyware, trojans, and malware by
a complete set of Unified Threat
Management security features that
include stateful firewall, IPsec VPN,
intrusion prevention system (IPS),
antivirus (includes antispyware,
antiadware, antiphishing), antispam
and Web filtering.
Product Description
The Juniper Networks® SSG140 Secure Services Gateway is a high-performance security
platform for branch offices and small/medium sized standalone businesses that want to
stop internal and external attacks, prevent unauthorized access, and achieve regulatory
compliance. The SSG140 is a modular platform that delivers more than 350 Mbps of
stateful firewall traffic and 100 Mbps of IPsec VPN traffic.
Security: Protection against worms, viruses, trojans, spam, and emerging malware is
delivered by proven unified threat management (UTM) security features that are backed
by best-in-class partners. To address internal security requirements and facilitate
regulatory compliance, the SSG140 supports an advanced set of network protection
features such as security zones, virtual routers and VLANs that allow administrators to
divide the network into distinct, secure domains, each with its own unique security policy.
Policies protecting each security zone can include access control rules and inspection by
any of the supported UTM security features.
Connectivity and Routing: The SSG140 supports ten on-board interfaces (eight 10/100 plus two
10/100/1000) complemented by four I/O expansion slots that can house additional LAN and
WAN interfaces (T1, E1, G.SHDSL, ISDN BRI S/T, Serial, and 10/100/100), making the SSG140 the
most extensible security platform in its class. This broad array of I/O options coupled with WAN
protocol and encapsulation support in its routing engine make the SSG140 a platform that can
easily be deployed as a traditional branch oce router or as a consolidated security and routing
device to reduce CapEx and OpEx.
Access Control Enforcement: The SSG140 can act as an enforcement point in a Juniper
Networks Unified Access Control (UAC) deployment with the simple addition of the
IC Series Unified Access Control Appliance. The IC Series functions as a central policy
management engine, interacting with the SSG140 to augment or replace the firewall-
based access control with a solution that grants/denies access based on more granular
criteria that include endpoint state and user identity, in order to accommodate the
dramatic shifts in attack landscape and user characteristics.
World Class Support: From simple lab testing to major network implementations,
Juniper Networks Professional Services will collaborate with your team to identify goals,
define the deployment process, create or validate the network design, and manage the
deployment to its successful conclusion.
1
ZONE A
ZONE B
SSG140
WWW
Internet
M7i
HeadquartersBranch Oce
ISG2000
The SSG140 deployed at a branch oce for secure Internet connectivity and site-to-site VPN to corporate headquarters.
Internal branch oce resources are protected with unique security policies for each security zone.
Features and Benefits
Feature Feature Description Benefit
High performance Purpose-built platform is assembled from custom-built
Best-in-class UTM security
features
Integrated antivirus Annually licensed antivirus engine, provided by Juniper, is
Integrated antispam Annually licensed antispam oering, provided by Juniper,
Integrated Web filtering Annually licensed Web filtering solution, provided by
Integrated IPS (Deep
Inspection)
Fixed Interfaces Eight fixed 10/100 interfaces and two 10/100/1000
Network segmentation Bridge groups, security zones, virtual LANs and virtual
Robust routing engine Proven routing engine supports OSPF, BGP and RIP v1/2
High interface density Eight 10/ 100 plus two 10/100/1000 interfaces plus a
Interface modularity Four SSG140 interface expansion slots support optional
Management flexibility Use any one of three mechanisms, CLI, WebUI or
Juniper Networks Unified
Access Control enforcement
point
World-class professional
services
Auto-Connect VPN Automatically sets up and takes down VPN tunnels
hardware, powerful processing and a security-specific
operating system.
UTM security features (antivirus, antispam, Web filtering,
IPS) stop all manner of viruses and malware before they
damage the network.
based on Kaspersky Lab engine.
is based on Sophos technology.
Juniper, is based on Websense SurfControl technology.
Annually licensed IPS engine is available with Juniper
Networks Deep Inspection Firewall Signature Packs.
interfaces, one USB port, one console port, and one
auxiliary port.
routers allow administrators to deploy security policies to
isolate guests, wireless networks and regional servers or
databases.*
along with Frame Relay, Multilink Frame Relay, PPP,
Multilink PPP and HDLC.
console and an Aux interface for management.
T1, E1, ISDN BRI S/T, G.SHDSL and serial physical
interface modules (PIMs), and 10/100/1000 and SFP
universal PIMs (uPIMs).**
Juniper Networks Network and Security Manager (NSM),
to securely deploy, monitor and manage security policies.
Interacts with the centralized policy management engine
(IC Series) to enforce session-specific access control
policies using criteria such as user identity, device security
state, and network location.
From simple lab testing to major network
implementations, Juniper Networks Professional Services
will collaborate with your team to identify goals, define
the deployment process, create or validate the network
design, and manage the deployment.
between spoke sites in a hub-and-spoke topology.
Delivers performance headroom required to protect
against internal and external attacks now and into the
future.
Ensures that the network is protected against all manner
of attacks.
Stops viruses, spyware, adware and other malware.
Blocks unwanted email from known spammers
and phishers.
Controls/blocks access to malicious Web sites.
Prevents application-level attacks from flooding
the network.
Provides high-speed LAN connectivity, future
connectivity, and flexible management.
Powerful capabilities facilitate deploying security for
various internal, external and DMZ sub-groups on the
network, to prevent unauthorized access.
Enables the deployment of consolidated security and
routing device, thereby lowering operational and capital
expenditures.
Provides unmatched interface density when compared to
competitive oerings.
Delivers LAN and WAN connectivity options on top
of unmatched security to reduce costs and extend
investment protection.
Enables management access from any location,
eliminating on-site visits thereby improving response
time and reducing operational costs.
Improves security posture in a cost-eective manner
by leveraging existing customer network infrastructure
components and best-in-class technology.
Transforms the network infrastructure to ensure that it is
secure, flexible, scalable and reliable.
Provides a scalable VPN solution for mesh architectures
with support for latency-sensitive applications such as
VoIP and video conferencing.
* Bridge groups supported only on uPIMs in Juniper Networks ScreenOS® Software 6.0 and higher releases.
**uPIMs are only supported in ScreenOS 6.0 or higher releases.
2
Loading...