Datasheet

5
SSG320M SSG350M
PKI Support
PKI Certificate requests (PKCS 7 and PKCS 10) Yes Yes
Automated certificate enrollment (SCEP) Yes Yes
Online Certificate Status Protocol (OCSP) Yes Yes
Certificate Authorities supported VeriSign, Entrust, Microsoft, RSA Keon, iPlanet
(Netscape) Baltimore, DoD PKI
VeriSign, Entrust, Microsoft, RSA Keon, iPlanet
(Netscape) Baltimore, DoD PKI
Self-signed certificates Yes Yes
Virtualization
Maximum number of security zones 40 40
Maximum number of virtual routers 5 8
Bridge groups* Yes Yes
Maximum number of VLANs 125 125
Routing
BGP instances 8 8
BGP peers 36 48
BGP routes 10,000 10,000
OSPF instances 3 3
OSPF routes 10,000 10,000
RIP v1/v2 instances 128 128
RIP v2 routes 10,000 10,000
Static routes 10,000 10,000
Source-based routing Yes Yes
Policy-based routing Yes Yes
ECMP Yes Yes
Multicast Yes Yes
Reverse Path Forwarding (RPF) Yes Yes
IGMP (v1, v2) Yes Yes
IGMP Proxy Yes Yes
PIM SM Yes Yes
PIM SSM Yes Yes
Multicast inside IPsec tunnel Yes Yes
Encapsulations
PPP Yes Yes
MLPPP Yes Yes
MLPP max physical interfaces 6 10
Frame Relay Yes Yes
MLFR (FRF .15, FRF .16) Yes Yes
MLFR max physical interfaces 6 10
HDLC Yes Yes
IPv6
Dual stack IPv4/IPv6 firewall and VPN Yes Yes
IPv4 to/from IPv6 translations and encapsulations Yes Yes
Syn-Cookie and Syn-Proxy DoS Attack Detection Yes Yes
SIP, RTSP, Sun-RPC, and MS-RPC ALG’s Yes Yes
RIPng Yes Yes
BGP Yes Yes
Transparent mode Yes Yes
NSRP Yes Yes
DHCPv6 Relay Yes Yes
Mode of Operation
Layer 2 (transparent) mode
(5)
Yes Yes
Layer 3 (route and/or NAT) mode Yes Yes
Specifications (continued)
*Bridge groups supported only on uPIMs in ScreenOS 6.0 and greater releases