Datasheet

ManualsBrandsJuniper Manualscomputers & electronicsACCESS-EES-1000U-1YR

DATASHEET

Product Description

Juniper Networks

is the market leader in SSL-based remote access that is easy to deploy

and easy to maintain. All Juniper Networks SA Series SSL VPN Appliances have met

or exceeded the stringent security standards of independent Internet security auditing

agencies. Juniper extends this leadership with a FIPS-certified hardware security module

that is Federal Information Processing Standards (FIPS)-compliant. Like all SA Series

appliances, the Juniper Networks SA4500 FIPS and SA6500 FIPS SSL VPN Appliances

provide a hardened security gateway that uses the standards-based SSL protocol to

provide remote access via a Web browser. There are no hardware or software clients

to deploy, configure, or install; no changes required for internal servers; no Network

Address Translation (NAT) or firewall traversal issues to manage; and virtually no

ongoing maintenance. SSL itself is the most widely deployed security protocol in the

world, securing billions of dollars in online banking and e-commerce transactions. The

combination of these features adds up to a solution with unbeatable security, radically

lower total cost of ownership (TCO) when compared to traditional VPNs or custom

extranets, and a highly scalable implementation.

Please note that the FIPS models will not support Junos Pulse.

Architecture and Key Components

FIPS Security

• Stringent security with FIPS-certified Hardware Security Module (HSM) and FIPS-

certified Layer 3 connectivity using Network Connect client on Windows platforms

Rich Access Privilege Management Capabilities

• Dynamic, controlled access at the URL, file, application, and server level based on a

variety of session-specific variables including identity, device, security control, and

network trust level

Provision by Purpose

• Three different access methods that allow administrators to balance security and

access on a per-user, per-session basis

Product Overview

Government agencies and their IT

sta are chartered with reconciling

seemingly opposing goals: provide

reliable and timely information access

to government employees and citizens

while protecting sensitive resources.

Federal agencies are further directed

to procure only those IT technologies

that meet the rigors of government

communication standards and have

been certiﬁed to that eect. While

these strictures are actually required

for some government agencies, they

also provide useful guidelines to private

sector businesses that require stringent

security. Juniper Networks uniquely

delivers on these needs with proven

solutions that provide the most ﬂexible

secure access available among U. S.

government-certiﬁed solutions.

SA4500 FIPS AND

SA6500 FIPS SSL

VPN APPLIANCES

Summary of content (12 pages)

PAGE 1
DATASHEET SA4500 FIPS AND SA6500 FIPS SSL VPN APPLIANCES Product Overview Government agencies and their IT staff are chartered with reconciling seemingly opposing goals: provide reliable and timely information access to government employees and citizens while protecting sensitive resources. Federal agencies are further directed to procure only those IT technologies that meet the rigors of government communication standards and have been certified to that effect.
PAGE 2
End-to-End Layered Security Streamlined Manageability • Numerous security options from the end user device to the • Central management option for unified administration application data and servers, including coordinated threat control with Juniper Networks IDP Series Intrusion Detection and Prevention Appliances • User self service features that enhance productivity while lowering administrative overhead Lower Total Cost of Ownership (TCO) • Native functionality, client- and server-side APIs, and ad
PAGE 3
Access Privilege Management Capabilities The SA4500 FIPS and SA6500 FIPS appliances provide dynamic access privilege management capabilities without infrastructure changes, custom development, or software deployment/maintenance. This facilitates the easy deployment and maintenance of secure remote access, as well as secure extranets and intranets.
PAGE 4
End-to-End Layered Security The SA4500 FIPS and SA6500 FIPS appliances provide complete, end-to-end layered security, including endpoint client, device, data, and server layered security controls. These include: Table 4: SA4500 FIPS and SA6500 FIPS End-to-End Layered Security FEATURE FEATURE DESCRIPTION BENEFIT UAC-SA Federation Seamlessly provision SA Series user sessions into Juniper Networks Unified Access Control (UAC) upon login—or the alternative (provisioning of UAC sessions into the SA Series).
PAGE 5
Performance Scalability with the SA6500 FIPS The SA6500 FIPS is specifically designed to accommodate large numbers of users with complex application needs, and provides application performance optimization via compression algorithms and hardware-based SSL acceleration. These features allow the appliance to process large, simultaneous transaction loads while minimizing perceptible latency to users.
PAGE 6
Table 7: SA4500 FIPS and SA6500 FIPS Streamlined Management and Administration FEATURE FEATURE DESCRIPTION BENEFIT Constrained delegation When a user logs into the SA Series with a credential that cannot be proxied through to the backend server, the SA Series will retrieve a Kerberos ticket on behalf of the user from the Active Directory infrastructure. The ticket will be cached on the SA Series throughout the session.
PAGE 7
Table 8: SA4500 FIPS and SA6500 FIPS Lower TCO (continued) FEATURE FEATURE DESCRIPTION BENEFIT Multiple hostname support Provides the ability to host different virtual extranet websites from a single SA4500 FIPS or SA6500 FIPS SSL VPN Appliance. Saves the cost of incremental servers, eases management overhead, and provides a transparent user experience with differentiated entry URLs. Customizable user Interface Creation of completely customized sign-in pages.
PAGE 8
Specifications SA4500 FIPS SA6500 FIPS Upgrade Options Software Hardware • Secure Meeting Upgrade Option • Secure Meeting Upgrade Option • Instant Virtual Systems (IVS) Upgrade Option • Instant Virtual Systems (IVS) Upgrade Option • In Case of Emergency (ICE) Upgrade Option • In Case of Emergency (ICE) Upgrade Option • Additional Users Upgrade Option • Additional Users Upgrade Option • Clustering Upgrade Option • Clustering Upgrade Option • Enhanced Endpoint Security Option • Enhanced Endpoin
PAGE 9
Specifications (continued) SA4500 FIPS SA6500 FIPS Certifications Common Criteria EAL3+ certification Yes Yes Safety certifications EN60950-1:2001+ A11, UL60950-1:2003, CAN/CSA C22.2 No. 60950-1-03, IEC 60950-1:2001 EN60950-1:2001+ A11, UL60950-1:2003, CAN/CSA C22.2 No.
PAGE 10
Ordering Information (continued) MODEL NUMBER DESCRIPTION Accessories UNIV-PS-400W-AC Field upgradeable secondary 400 W power supply for SA6500 FIPS UNIV-80G-HDD Field replaceable 80 gigabyte hard disk for SA6500 FIPS UNIV-MR2U-FAN Field replaceable fan for SA6500 FIPS UNIV-MR2U-RAILKIT Rack mount kit for SA6500 FIPS UNIV-SFP-FSX Mini-GBIC transceiver - fiber SX for SA6500 FIPS UNIV-SFP-FLX Mini-GBIC transceiver - fiber LX for SA6500 FIPS UNIV-SFP-COP Mini-GBIC transceiver - copper for SA6500
PAGE 11
Notes 11
PAGE 12
Corporate and Sales Headquarters APAC Headquarters EMEA Headquarters To purchase Juniper Networks solutions, Juniper Networks, Inc. Juniper Networks (Hong Kong) Juniper Networks Ireland please contact your Juniper Networks 1194 North Mathilda Avenue 26/F, Cityplaza One Airside Business Park Sunnyvale, CA 94089 USA 1111 King’s Road Swords, County Dublin, Ireland representative at 1-866-298-6428 or Phone: 888.JUNIPER (888.586.4737) Taikoo Shing, Hong Kong Phone: 35.31.8903.600 or 408.745.