Juniper NS-5200-CHA

General Information

Manufacturer:

Juniper

Product ID:

NS-5200-CHA

Product Description:

NetScreen-5200 Chassis

Product Type:

Network Security/Firewall Appliance

Marketing Information

The Juniper Networks NetScreen 5200 is a high-performance security system designed to deliver a new level of high-performance capabilities for large enterprise, carrier, and data center networks. The NetScreen 5200 security system integrates firewall, DoS and DDoS protection, VPN, and traffic management functionality in lowprofile modular chassis. Built around NetScreen's third generation security ASIC and distributed system architecture, the NetScreen 5200 offers excellent scalability and exibility while providing high levels of security through NetScreen s custom operating system, NetScreen ScreenOS. The NetScreen 5200 employs a switch fabric for data exchange and separate multi-bus channel for control information, delivering scalable performance for the most demanding environments.

Technical Information

Virtualization:

• 1000000 x Concurrent Session
• 26000 x Concurrent Session
• 40000 x Policies
• 16000 x Site-to-Site VPN Tunnel
• 25000 x Concurrent VPN Tunnel
• 4095 x Tunnel Interface
• 16 x Security Zone

Firewall Protection:

Network Attack Detection

Denial of Service (DoS)

Distributed Denial of Service (DDoS)

TCP Reassembly for Fragmented Packet Protection

Malformed Packet Attack

Deep Inspection Firewall

Protocol Anomaly Detection

Stateful Protocol Signature

Content Inspection

URL Filtering

Web Filtering

Integrated Web Filtering

Brute Force Attack Mitigation

IP Spoofing

Replay Attack Prevention

User Authentication

Features:

PAT

Interfaces/Ports

Total Number of Ports:

24

Network & Communication

Ethernet Technology:

Ethernet

Network Standard:

10/100Base-TX

I/O Expansions

Number of Total Expansion Slots:

2

Power Description

Input Voltage:

110 V AC

220 V AC

Power Source:

Power Supply

Physical Characteristics

Form Factor:

Rack-mountable

Height:

3.4"

Width:

17.5"

Depth:

20"

Weight (Approximate):

37 lb

Miscellaneous

Additional Information:

• MTBF: 7.9 years
• 8 mini GBIC (SXLX)2 mini GBIC + 24 10/100 Base-T
• Rack mountable: 23" optional
• NAT for H.323/SIP
• Protects against Deep inspection attack pattern obfuscation and Zone-based IP spoofing
• Self Signed Certificates
• SYN cookie
• Supports MS-RPC
• RADIUS Accounting: Start/Stop

Mode of Operation:

• Layer 2 mode (transparent mode)
• Layer 3 mode (route and/or NAT mode)
• Policy-based NAT
• Virtual IP 64 per VSYS
• Mapped IP: 10,000
• IPSec pass through in NAT mode

Firewall and VPN User Authentication:

• Built-in (internal) database: User limit up to 25,000
• 3rd Party user authentication: RADIUS, RSA SecurID, and LDAP
• XAUTH VPN authentication
• Web-based authentication

Routing:

• OSPF dynamic routing: Up to 8 instances each
• RIP v1/v2 dynamic routing: up to 512 instances
• Source-based routing
• Static routes: 30,000
• Equal cost multi-path routing
• IGMP group

High Availability (HA):

• Active/Active
• Active/Passive
• Redundant Interfaces
• Configuration synchronization
• Session synchronization for firewall and VPN
• Session failover for routing change
• Device failure detection
• Link failure detection
• Authentication for new HA members
• Encryption of HA traffic
• LDAP & RADIUS server failover

IP Address Assignment:

• Static
• DHCP relay

Certificate Authorities Supported:

• Verisign
• Entrust
• Microsoft
• RSA Keon
• iPlanet (Netscape)
• Baltimore
• DOD PKI

Traffic Management:

• Maximum bandwidth: Per port
• DiffServ stamp: per policy

External Flash:

• CompactFlash: Supports 128512 MB Industrial Grade SanDisk
• Event logs and alarms
• System config script

Certifications & Standards:

Safety Certifications:

• UL
• CUL
• CSA
• CB
• Austel
• NEBS Level 3

EMC Certifications:

• FCC class A
• BSMI
• CE class A
• C-Tick
• VCCI class A

IEEE:

• IEEE 802.3
• IEEE 802.3u