Datasheet

Juniper Networks

SSG 300 Series

The Juniper Networks ™ Secure Services Gateway

300 (SSG 300) Series consists of purpose-built security appliances that deliver the ideal blend of performance, security, routing, and LAN/WAN connectivity for large, regional branch offices and medium-size, standalone businesses. Traffic flowing in and out of a regional office or business is protected from worms, spyware, trojans, and malware by a complete set of Unified Threat

Management (UTM) security features, including stateful firewall, IPsec virtual private network

(VPN), Intrusion Prevention System (IPS), antivirus (includes anti-spyware, anti-adware, anti-phishing), anti-spam, and Web filtering. The

SSG 300 Series comprises the SSG 350M and the SSG 320M platforms.

Product Description

The SSG 300 Series comprises high-performance security platforms that help businesses stop internal and external attacks, prevent unauthorized access, and achieve regulatory compliance. The SSG 350M provides 500 Mbps of stateful firewall performance and 225 Mbps of IPsec VPN performance, while the SSG 320M provides

400 Mbps of stateful firewall performance and 175 Mbps of IPsec VPN performance.

These products focus on three key disciplines:

Security: Protection against worms, viruses, trojans, spam, and emerging malware is delivered by proven UTM security features that are backed by best-in-class partners.

To address internal security requirements and facilitate regulatory compliance, the

SSG 300 Series supports an advanced set of network protection features such as security zones, virtual routers, and VLANs that allow administrators to divide the network into distinct, secure domains, each with their own unique security policy.

Policies protecting each security zone can include access control rules and inspection by any of the supported UTM security features.

Connectivity and Routing: The SSG 300 Series provides four onboard 10/100/1000 interfaces complemented by I/O expansion slots that can house a mix of LAN or WAN interfaces, making the SSG 300 Series an extremely flexible platform. The broad array of I/O options coupled with WAN protocol and encapsulation support makes SSG 300

Series platforms easily deployable as traditional branch office routers or as consolidated security and routing devices, which can help reduce CAPEX and OPEX.

Access Control Enforcement: The SSG 300 Series platforms can act as enforcement points in a Juniper Networks unified access control deployment with the simple addition of the Juniper Networks Infranet Controller. The Infranet Controller functions as a central policy management engine by interacting with the SSG 300 Series to augment or replace the firewall-based access control. It grants/denies access based on more granular criteria, including endpoint state and user identity in order to accommodate the dramatic shifts in attack landscape and user characteristics.

In addition, Juniper Networks Professional Services will collaborate with your team to identify goals, define the deployment process, create or validate the network design, and manage the deployment to its successful conclusion. Whether it involves simple lab testing or a major network implementation, Juniper Networks Professional Services is there to help you ensure success.

The SSG 350M deployed at a branch office for secure

Internet connectivity and site-to-site VPN to corporate headquarters. Internal branch office resources are protected with unique security policies applied to each Security Zone.

Regional

Office

Zone A

Zone C

Zone B

SSG 350

M

WWW

Internet

M7i

HQ

2

Features and Benefits

Feature

High performance

Best-in-class UTM security features

Integrated antivirus

Integrated anti-spam

Integrated Web filtering

Integrated Intrusion Prevention

System (IPS) (Deep Inspection)

Fixed Interfaces

Network segmentation

Interface modularity

Robust routing engine

Juniper Networks unified access control enforcement point

Management flexibility

Auto-Connect VPN

World-class professional services

Feature Description

Purpose-built platform is assembled from custom-built hardware, powerful processing and a security-specific operating system.

UTM security features (antivirus, anti-spam, Web filtering, IPS) stop all manner of viruses and malware before they damage the network.

Annually licensed antivirus engine, provided by Juniper, is based on Kaspersky Lab engine.

Annually licensed anti-spam offering, provided by

Juniper, is based on Symantec technology.

Annually licensed Web filtering solution, provided by

Juniper, is based on SurfControl’s technology.

Annually licensed IPS engine is available with Juniper

Networks Deep Inspection Firewall Signature Packs.

Four fixed 10/100/1000 interfaces, two USB ports, one Console port and one Auxiliary port are standard on all SSG 300 Series models.

Bridge groups, security zones, virtual LANs and virtual routers allow administrators to deploy security policies to isolate guests, wireless networks and regional servers or databases.*

Six interface expansion slots support optional

T1, E1, Serial, ADSL/ADSL2/ADSL2+, G.SHDSL,

10/100/1000, and SFP connectivity.

Proven routing engine supports OSPF, BGP and RIP v1/2 along with Frame Relay, Multilink Frame Relay,

PPP, Multilink PPP and HDLC.

Interacts with the centralized policy management engine (Infranet Controller) to enforce session-specific access control policies using criteria such as user identity, device security state and network location.

Use any one of three mechanisms, CLI, WebUI or

Juniper Networks Network and Security Manager

(NSM), to securely deploy, monitor and manage security policies.

Automatically sets up and takes down VPN tunnels between spoke sites in a hub-and-spoke topology.

Benefit

Delivers performance headroom required to protect against internal and external attacks now and into the future.

Ensures that the network is protected against all manner of attacks.

Stops viruses, spyware, adware and other malware.

Blocks unwanted email from known spammers and phishers.

Controls/blocks access to malicious Web sites.

Prevents application-level attacks from flooding the network.

Provides high-speed LAN connectivity, future connectivity and flexible management.

Powerful capabilities facilitate deploying security for various internal, external and DMZ sub-groups on the network, to prevent unauthorized access.

Delivers combination of LAN and WAN connectivity on top of unmatched security to reduce costs and extend investment protection.

Enables the deployment of consolidated security and routing device, thereby lowering operational and capital expenditures.

Improves security posture in a cost-effective manner by leveraging existing customer network infrastructure components and best-in-class technology.

Enables management access from any location, eliminating on-site visits thereby improving response time and reducing operational costs.

From simple lab testing to major network implementations, Juniper Networks Professional

Services will collaborate with your team to identify goals, define the deployment process, create or validate the network design and manage the deployment.

Provides a scalable VPN solution for mesh architectures with support for latency-sensitive applications such as VoIP and video conferencing.

Transforms the network infrastructure to ensure that it is secure, flexible, scalable and reliable.

Product Options

Option

Network Equipment Building Systems

(NEBS) compliance

DRAM

UTM/Content Security (high memory option required)

I/O options

Option Description

NEBS-compliant versions of the SSG 350M are available.

All SSG 300 Series models are available with 1 GB of DRAM. The SSG 320M and SSG 350M are also available in 256 MB-DRAM versions.

With the addition of licensing keys, the SSG 300

Series can be configured with any combination of the following best-in-class UTM and content security functionality: antivirus (includes anti-spyware, antiphishing), IPS (Deep Inspection firewall), Web filtering and/or anti-spam.

Three (SSG 320M) or five (SSG 350M) expansion slots support optional T1, E1, Serial, ADSL2+, G.SHDSL,

10/100/1000, and SFP.

*Bridge groups supported only on uPIMs in ScreenOS 6.0 and greater releases

Applicable Products

SSG 350M

SSG 350M

SSG 320M

SSG 350M high-memory model only

SSG 320M high-memory model only

SSG 350M

SSG 320M

Specifications

Maximum Performance and Capacity (1)

ScreenOS version tested

Firewall performance (Large packets)

Firewall performance (IMIX) (2)

Firewall Packets Per Second (64 byte)

AES256+SHA-1 VPN performance

3DES+SHA-1 VPN performance

Maximum concurrent sessions

New sessions/second

Maximum security policies

Maximum users supported

Convertible to JUNOS 8.0 or higher

Network Connectivity

Fixed I/O

Physical Interface Module (PIM) Slots

WAN interface options (PIMS)

LAN interface options (uPIMS)

Firewall

Network attack detection

DoS and DDoS protection

TCP reassembly for fragmented packet protection

Brute force attack mitigation

SYN cookie protection

Zone-based IP spoofing

Malformed packet protection

Unified Threat Management (3)

IPS (Deep Inspection firewall)

Protocol anomaly detection

Stateful protocol signatures

IPS/DI attack pattern obfuscation

Antivirus

Signature database

Protocols scanned

Anti-spyware

Anti-adware

Anti-keylogger

Instant message AV

Anti-spam

Integrated URL filtering

External URL filtering (4)

Voice over IP (VoIP) Security

H.323 ALG

SIP ALG

MGCP ALG

SCCP ALG

NAT for VoIP protocols

SSG 320M

ScreenOS 6.2

450+ Mbps

400 Mbps

175,000 PPS

175 Mbps

175 Mbps

64,000

10,000

2,000

Unrestricted

Yes

4x10/100/1000

3

Serial, T1, E1, ADSL/ADSL2/ADSL2+, G.SHDSL

8x10/100/1000, 16x10/100/1000, and 6xSFP

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

200,000+

POP3, HTTP, SMTP, IMAP, FTP, IM

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

SSG 350M

ScreenOS 6.2

550+ Mbps

500 Mbps

225,000 PPS

225 Mbps

225 Mbps

128,000

12,500

2,000

Unrestricted

Yes

4x10/100/1000

5

Serial, T1, E1, ADSL/ADSL2/ADSL2+, G.SHDSL

8x10/100/1000, 16x10/100/1000, and 6xSFP

Yes

Yes

Yes

Yes

Yes

200,000+

POP3, HTTP, SMTP, IMAP, FTP, IM

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

3

4

Specifications (continued)

IPsec VPN

Concurrent VPN tunnels

Tunnel interfaces

DES (56-bit), 3DES (168-bit) and AES (256-bit)

MD-5 and SHA-1 authentication

Manual key, IKE, IKEv2 with EAP, PKI (X.509)

Perfect forward secrecy (DH Groups)

Prevent replay attack

Remote access VPN

L2TP within IPsec

IPsec NAT traversal

Auto-Connect VPN

Redundant VPN gateways

User Authentication and Access Control

Built-in (internal) database - user limit

Third-party user authentication

RADIUS Accounting

XAUTH VPN authentication

Web-based authentication

802.1X authentication

Unified access control enforcement point

PKI Support

PKI Certificate requests (PKCS 7 and PKCS 10)

Automated certificate enrollment (SCEP)

Online Certificate Status Protocol (OCSP)

Certificate Authorities supported

Self-signed certificates

Virtualization

Maximum number of security zones

Maximum number of virtual routers

Bridge groups*

Maximum number of VLANs

Routing

BGP instances

BGP peers

BGP routes

OSPF instances

OSPF routes

RIP v1/v2 instances

RIP v2 routes

Static routes

Source-based routing

Policy-based routing

ECMP

Multicast

Reverse Path Forwarding (RPF)

IGMP (v1, v2)

IGMP Proxy

PIM SM

PIM SSM

Multicast inside IPsec tunnel

SSG 320M

500

100

Yes

Yes

Yes

1,2,5

Yes

Yes

Yes

Yes

Yes

Yes

500

RADIUS, RSA SecureID, LDAP

Yes – start/stop

Yes

Yes

Yes

Yes

Yes

Yes

Yes

VeriSign, Entrust, Microsoft, RSA Keon, iPlanet (Netscape)

Baltimore, DoD PKI

Yes

40

5

Yes

125

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

8

36

10,000

3

10,000

128

10,000

10,000

*Bridge groups supported only on uPIMs in ScreenOS 6.0 and greater releases

SSG 350M

500

300

Yes

Yes

Yes

1,2,5

Yes

Yes

Yes

Yes

Yes

Yes

500

RADIUS, RSA SecureID, LDAP

Yes – start/stop

Yes

Yes

Yes

Yes

Yes

Yes

Yes

VeriSign, Entrust, Microsoft, RSA Keon, iPlanet (Netscape)

Baltimore, DoD PKI

Yes

40

8

Yes

125

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

8

48

10,000

3

10,000

128

10,000

10,000

Specifications (continued)

Encapsulations

PPP

MLPPP

MLPP max physical interfaces

Frame Relay

MLFR (FRF .15, FRF .16)

MLFR max physical interfaces

HDLC

IPv6

Dual stack IPv4/IPv6 firewall and VPN

IPv4 to/from IPv6 translations and encapsulations

Syn-Cookie and Syn-Proxy DoS Attack Detection

SIP, RTSP, Sun-RPC, and MS-RPC ALG’s

RIPng

BGP

Transparent mode

NSRP

DHCPv6 Relay

Mode of Operation

Layer 2 (transparent) mode (5)

Layer 3 (route and/or NAT) mode

Address Translation

Network Address Translation (NAT)

Port Address Translation (PAT)

Policy-based NAT/PAT (L2 and L3 mode)

Mapped IP (L3 mode)

Virtual IP (L3 mode)

MIP/VIP Grouping (L3 mode)

IP Address Assignment

Static

DHCP, PPPoE client

Internal DHCP server

DHCP relay

Traffic Management Quality of Service (QoS)

Guaranteed bandwidth

Maximum bandwidth

Ingress traffic policing

Priority-bandwidth utilization

DiffServ marking

High Availability (HA)

Active/Active - L3 mode

Active/Passive - Transparent & L3 mode

Configuration synchronization

Session synchronization for firewall and VPN

VRRP

Session failover for routing change

Device failure detection

Link failure detection

Authentication for new HA members

Encryption of HA traffic

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

4,000

32

Yes

SSG 320M

Yes

Yes

6

Yes

Yes

6

Yes

Yes - per policy

Yes - per policy

Yes

Yes

Yes - per policy

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

SSG 350M

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

10

Yes

Yes

10

Yes

Yes

Yes

Yes

Yes

Yes - per policy

Yes - per policy

Yes

Yes

Yes - per policy

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

4,000

32

Yes

5

6

Specifications (continued)

System Management

WebUI (HTTP and HTTPS)

Command line interface (console)

Command line interface (telnet)

Command line interface (SSH)

Network and Security Manager (NSM)

All management via VPN tunnel on any interface

Rapid deployment

Administration

Local administrator database size

External administrator database support

Restricted administrative networks

Root Admin, Admin and Read Only user levels

Software upgrades

Configuration rollback

Logging/Monitoring

Syslog (multiple servers)

Email (two addresses)

NetIQ WebTrends

SNMP (v2)

SNMP full custom MIB

Traceroute

VPN tunnel monitor

External Flash

Additional log storage

Event logs and alarms

System configuration script

ScreenOS Software

Dimensions and Power

Dimensions

(W x H x D)

Weight

Rack mountable

Power Supply (AC) 100-240 VAC

Average Power Consumption

Maximum Power Consumption

Input Frequency

Maximum Current Consumption

Maximum Inrush Current

Average Heat Dissipation

Maximum Heat Dissipation

Power Supply (DC)

Noise Level

SSG 320M

Yes

Yes

Yes

Yes v1.5 and v2.0 compatible

Yes

Yes

No

20

RADIUS, RSA SecurID, LDAP

50

Yes

TFTP, WebUI, NSM, SCP, USB

Yes

Yes - up to 4 servers

Yes

Yes

Yes

Yes

Yes

Yes

USB 1.1

Yes

Yes

Yes

17.5 x 1.8 x 15.1 in

(44.5 x 4.5 x 38.3 cm)

15.0 lb (no PIMs)

6.8 kg

Yes, 1 RU

275 W

80 W (No PIMs)

320 W

47-63 Hz

100 – 240 VAC, 3.2 A – 1.3 A

100 – 240 VAC, 42 A – 62 A

273 BTU (No PIMs)

1091 BTU

N/A

40.0 dB

SSG 350M

Yes

Yes

Yes

Yes v1.5 and v2.0 compatible

Yes

Yes

No

20

RADIUS, RSA SecureID, LDAP

50

Yes

TFTP, WebUI, NSM, SCP, USB

Yes

Yes - up to 4 servers

Yes

Yes

Yes

Yes

Yes

Yes

USB 1.1

Yes

Yes

Yes

17.5 x 2.6 x 15.1 in

(44.5 x 6.6 x 38.3 cm)

25.0 lb (no PIMs)

11.34 kg

Yes, 1.5 RU

300 W

80 W (No PIMs)

350 W

47-63 Hz

100 – 240 VAC, 3.5 A – 1.5 A

100 – 240 VAC, 13 A – 75 A

273 BTU (No PIMs)

1195 BTU

-48 to -60 VDC, 300 watts

59.2 dB

Specifications (continued)

Certifications

Safety certifications

EMC certifications

NEBS

MTBF (Bellcore model)

Security Certifications

Common Criteria: EAL4

FIPS 140-2: Level 2

ICSA Firewall and VPN

Operating Environment

Operating temperature

Non-operating temperature

Humidity

SSG 320M

CSA, TUV, CB

FCC class A, CE class A, C-Tick, VCCI class A

No

7.2 years

Future

Future

Yes

32° to 122° F

(0° to 50° C)

-4° to 158° F

(-20° to 70° C)

10% to 90% noncondensing

SSG 350M

CSA, TUV, CB

FCC class A, CE class A, C-Tick, VCCI class A

Level 3

6.8 years

Future

Future

Yes

32° to 122° F

(0° to 50° C)

-4° to 158° F

(-20° to 70° C)

10% to 90% noncondensing

(1) Performance, capacity and features listed are based upon systems running ScreenOS 6.2 and are the measured maximums under ideal testing conditions unless otherwise noted. Actual results may vary based on ScreenOS release and by deployment. For a complete list of supported ScreenOS versions for SSG platforms, please visit the Juniper Customer Support Center (http://www.juniper.net/customers/ support/) and click on ScreenOS Software Downloads.

(2) IMIX stands for Internet mix and is more demanding than a single packet size as it represents a traffic mix that is more typical of a customer’s network. The IMIX traffic used is made up of 58.33% 64 byte packets + 33.33% 570 byte packets + 8.33% 1518 byte packets of UDP traffic.

(3) UTM Security features (IPS/Deep Inspection, antivirus, anti-spam and Web filtering) are delivered by annual subscriptions purchased separately from Juniper Networks. Annual subscriptions provide signature updates and associated support. The high memory option is required for UTM security features.

(4) Redirect Web filtering sends traffic from the firewall to a secondary server. The redirect feature is free. However, it does require the purchase of a separate Web filtering license from either Websense or

SurfControl.

(5) NAT, PAT, policy-based NAT, virtual IP, mapped IP, virtual systems, virtual routers, VLANs, OSPF, BGP, RIPv2, Active/Active HA and IP address assignment are not available in Layer 2 transparent mode.

Performance-Enabling Services and Support

Juniper Networks is the leader in performance-enabling services and support, which are designed to accelerate, extend, and optimize your high-performance network. Our services allow you to bring revenue-generating capabilities online faster so you can realize bigger productivity gains, faster rollouts of new business models and ventures, and greater market reach, while generating higher levels of customer satisfaction. At the same time, Juniper Networks ensures operational excellence by optimizing your network to maintain required levels of performance, reliability, and availability. For more details, please visit www.juniper.net/products_and_services.

7

Ordering Information

Model Number

SSG-320M-SB

SSG-320M-SH

SSG-350M-SB

SSG-350M-SH

SSG-350M-SB-TAA

SSG-350M-SH-TAA

Description

SSG 320M, ScreenOS, base memory (256 MB),

HW security, AC power supply

SSG 320M, ScreenOS, base memory (1 GB),

HW security, AC power supply

SSG 350M, ScreenOS, base memory (256 MB),

HW security, AC power supply

SSG 350M, ScreenOS, base memory (1 GB),

HW security, AC power supply

Secure Services Gateway 350 System, ScreenOS, base memory (256 MB), 5 PIM slots, HW Crypto,

AC power supply, TAA, 19” rack mount

Secure Services Gateway 350 System, ScreenOS, base memory (1 GB), 5 PIM slots, HW Crypto,

AC power supply, TAA, 19” rack mount

SSG-350M-SB-DC-

N-TAA

SSG-350M-SH-DC-

N-TAA

Secure Services Gateway 350 System, ScreenOS, base memory (256 MB), 5 PIM slots, HW Crypto, DC power supply, fan filter, NEBS, TAA, 19” rack mount

Secure Services Gateway 350 System, ScreenOS, base memory (1 GB), 5 PIM slots, HW Crypto, DC power supply, fan filter, NEBS, TAA, 19” rack mount

SSG 300 Series I/O Options

JX-2T1-RJ48-S 2-port T1 PIM with integrated CSU/DSU

JX-2E1-RJ48-S

JX-2Serial-S

JX-1ADSL-A-S

JX-1ADSL-B-S

JX-2SHDSL-S

JX-1BRI-ST-S

JXU-6GE-SFP-S

JXU-8GE-TX-S

JXU-16GE-TX-S

JX-SFP-1GE-LX

JX-SFP-1GE-SX

2-port E1 PIM with integrated CSU/DSU

2-port Synchronous Serial PIM

1-port ADSL 2/2+ Annex A PIM

1-port ADSL 2/2+ Annex B PIM

2-port 2-wire or 1-port 4-wire G.SHDSL PIM

1-port ISDN BRI S/T PIM

6-port SFP Gigabit Ethernet Universal PIM2

8-port Gigabit Ethernet 10/100/1000 Copper

Universal PIM2

16-port Gigabit Ethernet 10/100/1000 Copper

Universal PIM2

Small form factor pluggable 1000BASE-LX Gigabit

Ethernet Optical Transceiver Module

Small form factor pluggable 1000BASE-SX Gigabit

Ethernet Optical Transceiver Module

Model Number Description

Unified Threat Management/Content Security

(High Memory Option Required)

Antivirus (includes anti-spyware, anti-phishing) NS-K-AVS-SSG350

NS-K-AVS-SSG320

NS-DI-SSG350

NS-DI-SSG320

IPS (Deep Inspection)

Web filtering NS-WF-SSG350

NS-WF-SSG320

NS-SPAM-SSG350

NS-SPAM-SSG320

NS-RBO-CS-SSG350

NS-RBO-CS-SSG320

Anti-spam

Remote Office Bundle (includes AV, DI, WF)

NS-SMB-CS-SSG350

NS-SMB-CS-SSG320

SSG 300 Series Memory Upgrades, Spares and Communications Cables

CBL-JX-PWR-AU

CBL-JX-PWR-CH

CBL-JX-PWR-EU

Main Office Bundle (includes AV, DI, WF, AS)

Power cable, Australia

Power cable, China

Power cable, Europe

CBL-JX-PWR-IT

CBL-JX-PWR-JP

CBL-JX-PWR-UK

CBL-JX-PWR-US

SSG-300-MEM-1GB

SSG-350-FLTR

JX-CBL-EIA530-DTE

JX-CBL-RS232-DTE

JX-CBL-RS449-DTE

JX-CBL-V35-DTE

JX-CBL-X21-DT

JX-Blank-FP-S

Power cable, Italy

Power cable, Japan

Power cable, UK

Power cable, USA

1 Gigabyte memory upgrade for the SSG 300 series

Replacement air filter for SSG 300 Series

EIA530 cable (DTE)

RS232 cable (DTE)

RS449 cable (DTE)

V.35 cable (DTE)

X.21 cable (DTE)

Blank I/O plate

About Juniper Networks

Juniper Networks, Inc. is the leader in high-performance networking. Juniper offers a high-performance network infrastructure that creates a responsive and trusted environment for accelerating the deployment of services and applications over a single network. This fuels high-performance businesses. Additional information can be found at www.juniper.net.

CORPORATE AND SALES HEADQUARTERS

Juniper Networks, Inc.

1194 North Mathilda Avenue

Sunnyvale, CA 94089 USA

Phone: 888.JUNIPER (888.586.4737) or 408.745.2000

Fax: 408.745.2100

www.juniper.net

APAC HEADQUARTERS

Juniper Networks (Hong Kong)

26/F, Cityplaza One

1111 King’s Road

Taikoo Shing, Hong Kong

Phone: 852.2332.3636

Fax: 852.2574.7803

Copyright 2008 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper

Networks logo, JUNOS, NetScreen, and ScreenOS are registered trademarks of Juniper

Networks, Inc. in the United States and other countries. JUNOSe is a trademark of Juniper

Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

100203-008 Nov 2008

EMEA HEADQUARTERS

Juniper Networks Ireland

Airside Business Park

Swords, County Dublin, Ireland

Phone: 35.31.8903.600

Fax: 35.31.8903.601

To purchase Juniper Networks solutions, please contact your Juniper Networks sales representative at 1-866-298-6428 or authorized reseller.