Datasheet

ManualsBrandsJuniper ManualsSoftwareNS-5000-VSYS-5

DATASHEET

Product Description

The Juniper Networks

NetScreen Series Security Systems are ideally suited for large

enterprise network backbones, including:

• Departmental or campus segmentation

• Enterprise data centers for securing high-density server environments

• Carrier-based managed services or core infrastructure

Offering excellent scalability and flexibility while providing high levels of security, the

NetScreen Series is differentiated by its chassis configuration for fans, power supplies,

and number of slots for modules. Both the Juniper Networks NetScreen-5200 and Juniper

Networks NetScreen-5400 support secure port modules that offer different throughput

and interface options for deployment flexibility. All chassis are designed with hot-

swappable, redundant fans and power supplies. This enables businesses to maximize

device uptime and meet stringent government and industry certifications, such as the

rigorous Network Equipment Building System criteria, the requirement for equipment used

in the central office in the North American Public Switched Network.

Employing a switch fabric for data exchange and separate multi-bus channel for control

information, the NetScreen Series can scale up to 30 Gbps firewall and 15 Gbps 3DES/AES

VPN. It provides low-latency performance for all packet sizes and is ideal for multimedia,

VoIP, and other streaming media applications.

Juniper Networks delivers all the components necessary to build and secure a highly

available infrastructure. Redundant links for full-mesh topologies, sub-second stateful

fail-over, path monitoring, and a secured control protocol all join to provide complete

resilience for the security layer. The NetScreen Series also supports Juniper Networks

virtual systems capability, with capacity up to 500 virtual systems. Virtual systems allow a

single security device to be partitioned logically into multiple security domains, each with

a unique virtual router, policy set, address book, and administrative login. Virtual systems

can be used with physical interfaces, as well as VLAN tagged interfaces bound to any

interface, with multiple security zones supported within each virtual system.

Product Overview

The Juniper Networks NetScreen

Series is a line of purpose-built,

high-performance security systems

designed for large enterprise, carrier,

and data center networks. Architected

with both existing and future network

design in mind, the NetScreen Series

consists of two platforms: the 2-slot

NetScreen-5200 and the 4-slot

NetScreen-5400. Integrating ﬁrewall,

VPN, trac management functionality,

Denial of Service (DoS) and Distributed

Denial of Service (DDoS) protection

in a low proﬁle modular chassis, the

NetScreen Series delivers scalable

performance for the most demanding

network environments.

NETSCREEN SERIES

SECURITY SYSTEMS

Summary of content (8 pages)

PAGE 1
DATASHEET NETSCREEN SERIES SECURITY SYSTEMS Product Overview The Juniper Networks NetScreen Product Description The Juniper Networks® NetScreen Series Security Systems are ideally suited for large enterprise network backbones, including: Series is a line of purpose-built, • Departmental or campus segmentation high-performance security systems • Enterprise data centers for securing high-density server environments designed for large enterprise, carrier, • Carrier-based managed services or core infra
PAGE 2
Whether the requirement is high-capacity session/tunnel Juniper Networks further expands overall system functionality and aggregation, high-performance small-packet throughput, a performance by introducing a new management module and three high degree of system virtualization or a high degree of physical new secure port modules (SPMs) for the NetScreen Series.
PAGE 3
NetSCreen-5400 NetScreen-5200 Specifications NetScreen-5200 Maximum Performance and Capacity NetScreen-5400 1 ScreenOS® version tested ScreenOS 6.2 ScreenOS 6.
PAGE 4
Specifications (continued) NetScreen-5200 NetScreen-5400 VoIP Security H.323 ALG Yes Yes SIP ALG Yes Yes MGCP ALG Yes Yes SCCP ALG Yes Yes NAT for VoIP protocols Yes Yes Concurrent VPN tunnels3 Up to 25,000 Up to 25,000 Tunnel interfaces3 Up to 4,095 Up to 4,095 DES (56-bit), 3DES (168-bit) and AES encryption Yes Yes MD-5 and SHA-1 authentication Yes Yes Manual key, IKE, PKI (X.
PAGE 5
Specifications (continued) NetScreen-5200 NetScreen-5400 Routing (continued) RIP v1/v2 instances Up to 512 Up to 512 RIP v2 routes 30,000 30,000 Dynamic routing Yes Yes Static routes 30,000 30,000 Source-based routing Yes Yes Policy-based routing Yes Yes ECMP Yes Yes Multicast Yes Yes Reverse Path Forwarding (RPF) Yes Yes IGMP (v1, v2) Yes Yes IGMP Proxy Yes Yes PIM SM Yes Yes PIM SSM Yes Yes Multicast inside IPsec tunnel Yes Yes Syn-Cookie and Syn-Proxy DoS Attac
PAGE 6
Specifications (continued) NetScreen-5200 NetScreen-5400 Traffic Management Quality of Service (QoS) Guaranteed bandwidth No No Maximum bandwidth Yes – per physical interface only Yes – per physical interface only Ingress traffic policing No No Priority-bandwidth utilization No No DiffServ marking Yes – per policy Yes – per policy Jumbo frames Yes Yes Link aggregation up to 4 ports 8G2 SPM only 8G2 SPM only Active/Active Yes Yes Active/Passive Yes Yes Redundant interfaces 8G2 S
PAGE 7
Specifications (continued) NetScreen-5200 NetScreen-5400 External Flash Additional log storage Supports 1 GB or 2 GB Industrial-Grade SanDisk Supports 1 GB or 2 GB Industrial-Grade SanDisk Event logs and alarms Yes Yes System configuration script Yes Yes ScreenOS Software Yes Yes Dimensions (W x H x D) 17.5 X 3.4 X 20 in (44.5 X 8.6 X 50.8 cm) 17.5 X 8.6 X 14 in (44.5 X 21.8 X 35.
PAGE 8
Ordering Information Model Number Description Model Number NetScreen-5200 NS-5200 NS-5200-DC NetScreen Series – Virtual System Upgrades NS-5200 system, no SPM or MGT modules, includes fan tray, dual AC power supply, 19” rack mount, 0 VSYS NS-5000-VSYS-5 VSYS upgrade 0 to 5 NS-5000-VSYS-25 VSYS upgrade 5 to 25 NS-5200 system, no SPM or MGT modules, includes fan tray, dual DC power supply, 19” rack mount, 0 VSYS NS-5000-VSYS-50 VSYS upgrade 25 to 50 NS-5000-VSYS-100 VSYS upgrade 50 to 100 NS-50