The Juniper Networks SSG300 line
consists of purpose-built security
appliances that deliver the ideal
blend of performance, security,
routing, and LAN/WAN connectivity
for large, regional branch offices and
medium-size, standalone businesses.
Traffic flowing in and out of a regional
office or business is protected
from worms, spyware, trojans, and
malware by a complete set of Unified
Threat Management security features,
including stateful firewall, IPsec VPN,
intrusion prevention system (IPS),
antivirus (includes antispyware,
antiadware, antiphishing), antispam,
and Web filtering. The SSG300 line
comprises the SSG350M and the
SSG320M Secure Services Gateways.
Product Description
The Juniper Networks® SSG300 line of secure services gateways comprises highperformance security platforms that help businesses stop internal and external attacks,
prevent unauthorized access, and achieve regulatory compliance. The Juniper Networks
SSG350M Secure Services Gateway provides 500 Mbps of stateful firewall performance
and 225 Mbps of IPsec VPN performance, while the Juniper Networks SSG320M Secure
Services Gateway provides 400 Mbps of stateful firewall performance and 175 Mbps of
IPsec VPN performance.
These products focus on three key disciplines:
Security: Protection against worms, viruses, trojans, spam, and emerging malware
is delivered by proven Unified Threat Management (UTM) security features that are
backed by best-in-class partners. To address internal security requirements and facilitate
regulatory compliance, the SSG300 line supports an advanced set of network protection
features such as security zones, virtual routers, and VLANs that allow administrators to
divide the network into distinct, secure domains, each with their own unique security
policy. Policies protecting each security zone can include access control rules and
inspection by any of the supported UTM security features.
Regional Oce
Zone A
SSG350M
Internet
Headquarters
M7i
NetScreen-5400
Zone C
The SSG350M deployed at a branch oce for secure Internet connectivity and site-to-site
VPN to corporate headquarters. Internal branch oce resources are protected with unique
Zone B
security policies applied to each security zone.
1
Page 2
Connectivity and Routing: The SSG300 line provides four onboard
10/100/1000 interfaces complemented by I/O expansion slots that
can house a mix of LAN or WAN interfaces, making the SSG300
line an extremely flexible platform. The broad array of I/O options
coupled with WAN protocol and encapsulation support makes the
SSG300 line of gateways easily deployable as traditional branch
oce routers or as consolidated security and routing devices, which
can help reduce CapEx and OpEx.
Access Control Enforcement: The SSG300 line of gateways can act
as enforcement points in a Juniper Networks Unified Access Control
deployment with the simple addition of the Juniper Networks IC
management engine by interacting with the SSG300 line to augment
or replace the firewall-based access control. It grants/denies access
based on more granular criteria, including endpoint state and user
identity in order to accommodate the dramatic shis in attack
landscape and user characteristics.
In addition, Juniper Networks Professional Services will collaborate
with your team to identify goals, define the deployment process,
create or validate the network design, and manage the deployment
to its successful conclusion. Whether it involves simple lab testing
or a major network implementation, Juniper Networks Professional
Services is there to help you ensure success.
Series UAC Appliances. The IC Series functions as a central policy
Features and Benefits
FeatureFeature DescriptionBenefit
High performancePurpose-built platform is assembled from custom-built
Best-in-class UTM security features UTM security features (antivirus, antispam, Web
Integrated antivirusAnnually licensed antivirus engine, provided by Juniper,
Integrated antispamAnnually licensed antispam oering, provided by
Integrated Web filteringAnnually licensed Web filtering solution, provided by
Integrated intrusion prevention
system (IPS) (Deep Inspection)
Fixed InterfacesFour fixed 10/100/1000 interfaces, two USB ports, one
Network segmentation Bridge groups, security zones, virtual LANs and virtual
Interface modularitySix interface expansion slots support optional T1, E1,
Juniper Networks Unified Access
Control enforcement point
Management flexibilityUse any one of three mechanisms, CLI, WebUI or Juniper
Auto-Connect VPNAutomatically sets up and takes down VPN tunnels
World-class professional servicesFrom simple lab testing to major network
hardware, powerful processing and a security-specific
operating system.
filtering, IPS) stop all manner of viruses and malware
before they damage the network.
is based on Kaspersky Lab engine.
Juniper, is based on Sophos technology.
Juniper, is based on Websense SurfControl technology.
Annually licensed IPS engine is available with Juniper
Networks Deep Inspection Firewall Signature Packs.
console port and one auxiliary port are standard on all
SSG300 line models.
routers allow administrators to deploy security policies
to isolate guests, wireless networks and regional servers
or databases.*
Serial, ADSL/ADSL2/ADSL2+, G.SHDSL, 10/100/1000,
and SFP connectivity.
along with Frame Relay, Multilink Frame Relay, PPP,
Multilink PPP and HDLC.
Interacts with the centralized policy management
engine (IC Series) to enforce session-specific access
control policies using criteria such as user identity,
device security state and network location.
Networks Network and Security Manager (NSM), to
securely deploy, monitor and manage security policies.
between spoke sites in a hub-and-spoke topology.
implementations, Juniper Networks Professional
Services will collaborate with your team to identify
goals, define the deployment process, create or validate
the network design and manage the deployment.
Delivers performance headroom required to protect
against internal and external attacks now and into
the future.
Ensures that the network is protected against all
manner of attacks.
Stops viruses, spyware, adware and other malware.
Blocks unwanted email from known spammers and
phishers.
Controls/blocks access to malicious Web sites.
Prevents application-level attacks from flooding the
network.
Provides high-speed LAN connectivity, future
connectivity and flexible management.
Powerful capabilities facilitate deploying security for
various internal, external and DMZ sub-groups on the
network, to prevent unauthorized access.
Delivers combination of LAN and WAN connectivity
on top of unmatched security to reduce costs and
extend investment protection.
Enables the deployment of consolidated security
and routing device, thereby lowering operational and
capital expenditures.
Improves security posture in a cost-eective
manner by leveraging existing customer network
infrastructure components and best-in-class
technology.
Enables management access from any location,
eliminating on-site visits thereby improving response
time and reducing operational costs.
Provides a scalable VPN solution for mesh
architectures with support for latency-sensitive
applications such as VoIP and video conferencing.
Transforms the network infrastructure to ensure that
it is secure, flexible, scalable and reliable.
*Bridge groups supported only on uPIMs in Juniper Networks ScreenOS® Software 6.0 and higher releases.
2
Page 3
Product Options
OptionOption DescriptionApplicable Products
Network Equipment Building
Systems (NEBS) compliance
NEBS-compliant versions of the SSG350M are
available.
SSG350M
DRAMAll models in the SSG300 line are available with
I/O optionsThree (SSG320M) or five (SSG350M) expansion slots
1 GB of DRAM. The SSG320M and SSG350M are also
available in 256 MB-DRAM versions.
With the addition of licensing keys, the SSG300
line can be configured with any combination of the
following best-in-class UTM and content security
functionality: antivirus (includes antispyware,
antiphishing), IPS (Deep Inspection firewall), Web
filtering and/or antispam.
support optional T1, E1, Serial, ADSL2+, G.SHDSL,
10/100/1000, and SFP.
SSG320M
SSG350M
SSG320M
SSG350M high-memory model only
SSG320M high-memory model only
Soware upgradesTFTP, WebUI, NSM, SCP, USBTFTP, WebUI, NSM, SCP, USB
Configuration rollbackYesYe s
Logging/Monitoring
Syslog (multiple servers)Yes - up to 4 serversYes - up to 4 servers
Email (two addresses)Ye sYe s
NetIQ WebTrendsYesYe s
SNMP (v3)YesYe s
SNMP full custom MIBYesYes
TracerouteYe sYe s
VPN tunnel monitorYe sYe s
6
Page 7
Specifications (continued)
SSG320MSSG350M
External Flash
Additional log storageUSB 1.1USB 1.1
Event logs and alarmsYesYe s
System configuration scriptYesYes
ScreenOS SowareYe sYes
Dimensions and Power
Dimensions (W x H x D)17.5 x 1.8 x 15.1 in
Weight15.0 lb (no interface modules)
Rack mountable Yes, 1 RUYes, 1.5 RU
Power supply (AC) 100-240 VAC275 W300 W
Average power consumption 80 W (No PIMs)80 W (No PIMs)
Maximum power consumption 320 W350 W
Input frequency 47-63 Hz 47-63 Hz
Maximum current consumption 100 – 240 VAC, 3.2 A – 1.3 A 100 – 240 VAC, 3.5 A – 1.5 A
Maximum Inrush current 100 – 240 VAC, 42 A – 62 A100 – 240 VAC, 13 A – 75 A
Average heat dissipation 273 BTU (No PIMs)273 BTU (No PIMs)
Maximum heat dissipation 1091 BTU1195 BTU
Power supply (DC)N/A -48 to -60 VDC, 300 watts
Noise level 40.0 dB59.2 dB
(44.5 x 4.5 x 38.3 cm)
6.8 kg
Certifications
Safety certifications CSA, TUV, CBCSA, TUV, CB
EMC certifications
NEBS NoLevel 3
MTBF (Bellcore model)7.2 years6.8 years
FCC class A, CE class A, C-Tick, VCCI class BFCC class A, CE class A, C-Tick, VCCI class B
Security Certifications
Common Criteria: EAL4Yes (ScreenOS 6.2)Yes (ScreenOS 6.2)
FIPS 140-2: Level 2YesYes
ICSA Firewall and VPNYesYe s
Operating Environment
Operating temperature32° to 122° F (0° to 50° C)32° to 122° F (0° to 50° C)
Non-operating temperature-4° to 158° F (-20° to 70° C)-4° to 158° F (-20° to 70° C)
Humidity10% to 90% noncondensing10% to 90% noncondensing
(1) Performance, capacity and features listed are based upon systems running ScreenOS 6.3 and are the measured maximums under ideal testing conditions unless otherwise noted. Actual results
may vary based on ScreenOS release and by deployment. For a complete list of supported ScreenOS versions for SSG Series gateways, please visit the Juniper Customer Support Center (www.
juniper.net/customers/support/) and click on ScreenOS Software Downloads.
(2) IMIX stands for Internet mix and is more demanding than a single packet size as it represents a traffic mix that is more typical of a customer’s network. The IMIX traffic used is made up of 58.33%
(3) UTM Security features (IPS/Deep Inspection, antivirus, antispam and Web filtering) are delivered by annual subscriptions purchased separately from Juniper Networks. Annual subscriptions provide
signature updates and associated support. The high memory option is required for UTM security features.
(4) Redirect Web filtering sends traffic from the firewall to a secondary server. The redirect feature is free. However, it does require the purchase of a separate Web filtering license from either Websense
or SurfControl.
(5) NAT, PAT, policy-based NAT, virtual IP, mapped IP, virtual systems, virtual routers, VLANs, OSPF, BGP, RIPv2, Active/Active HA and IP address assignment are not available in Layer 2 transparent mode.
17.5 x 2.6 x 15.1 in
(44.5 x 6.6 x 38.3 cm)
25.0 lb (no interface modules +
one power supply) (11.34 kg)
Juniper Networks Services and Support
Juniper Networks is the leader in performance-enabling services that are designed to accelerate, extend, and optimize your highperformance network. Our services allow you to maximize operational efficiency while reducing costs and minimizing risk, achieving a
faster time to value for your network. Juniper Networks ensures operational excellence by optimizing the network to maintain required
levels of performance, reliability, and availability. For more details, please visit www.juniper.net/us/en/products-services.
7
Page 8
Ordering Information
Model NumberDescription
SSG320M
SSG-320M-SBSSG320M, ScreenOS, base memory (256 MB),
SSG-320M-SHSSG320M, ScreenOS, base memory (1 GB),
SSG350M
SSG-350M-SBSSG350M, ScreenOS, base memory (256 MB),
SSG-350M-SHSSG350M, ScreenOS, base memory (1 GB),
SSG-350M-SB-TAASSG350M gateway, ScreenOS, base memory
SSG-350M-SH-TAASSG350M gateway, ScreenOS, base memory
SSG-350M-SB-DCN-TAA
SSG-350M-SH-DCN-TAA
SSG300 Line I/O Options
JX-2T1-RJ48-S2-port T1 PIM with integrated CSU/DSU
JX-2E1-RJ48-S2-port E1 PIM with integrated CSU/DSU
JX-2Serial-S2-port Synchronous Serial PIM
JX-1ADS L-A-S1-port ADSL 2/2+ Annex A PIM
JX-1ADSL-B-S1-port ADSL 2/2+ Annex B PIM
JX-2SHDSL-S2-port 2-wire or 1-port 4-wire G.SHDSL PIM
SSG300 Line Memory Upgrades, Spares
and Communications Cables
CBL-JX-PWR-AUPower cable, Australia
CBL-JX-PWR-CHPower cable, China
CBL-JX-PWR-EUPower cable, Europe
CBL-JX-PWR-ITPower cable, Italy
CBL-JX-PWR-JPPower cable, Japan
CBL-JX-PWR-UKPower cable, UK
CBL-JX-PWR-USPower cable, USA
SSG-300-MEM-1GB1 Gigabyte memory upgrade for the SSG300 line
SSG-350-FLTRReplacement air filter for SSG300 line
JX-CBL-EIA530-DTEEIA530 cable (DTE)
JX-CBL-RS232-DTERS232 cable (DTE)
JX-CBL-RS449-DTERS449 cable (DTE)
JX-CBL-V35-DTEV.35 cable (DTE)
JX-CBL-X21-DTX.21 cable (DTE)
JX-Blank-FP-SBlank I/O plate
About Juniper Networks
Juniper Networks is in the business of network innovation. From
devices to data centers, from consumers to cloud providers,
Juniper Networks delivers the software, silicon and systems that
transform the experience and economics of networking. The
company serves customers and partners worldwide. Additional
information can be found at www.juniper.net.
Corporate and Sales Headquarters
Juniper Networks, Inc.
1194 North Mathilda Avenue
Sunny vale, CA 94089 USA
Phone: 888.JUNIPER (888.586.4737)
or 408.745.2000
Fax: 408.745.2100
www.juniper.net
Copyri ght 2013 Juniper Net works, Inc. All r ights reser ved. Junipe r Networks , the Juniper Net works logo, Jun os and
QFabric ar e registered tr ademarks of Ju niper Networ ks, Inc. in the Un ited States and othe r countries. Al l other
tradem arks, serv ice marks, re gistered mark s, or register ed service m arks are the pro perty of thei r respectiv e owners.
Junipe r Networks a ssumes no res ponsibilit y for any inaccurac ies in this docum ent. Juniper N etworks res erves the
right to ch ange, modify, tr ansfer, or other wise revise th is publicatio n without notice .
1000203-009-EN Sept 2013
8
Printed o n recycled pap er
APAC and EMEA Head quarters
Juniper Networks International B.V.
Boeing Avenue 240
1119 PZ Schiphol-Rijk
Amsterdam, The Netherlands
Phone: 31.0.207.125.700
Fax: 31.0.207.125.701
To purchase Juniper Networks solutions,
please contact your Juniper Networks
representative at 1-866-298-6428 or
authorized reseller.
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.