Juniper Networks NetScreen-5200/NetScreen-5400
- Line of purpose-built, high-performance firewall/VPN security systems designed for large enterprise, carrier, and data center networks
- Switch fabric for data exchange and separate multibus channel for control information
- Virtualization capabilities to allow multiple customers or enterprise departments to be secured by a single security system
Overview
The Juniper Networks NetScreen-5000 series is a line of purpose-built, high-performance firewall/VPN security systems designed to deliver a new level of high-performance capabilities for large enterprise, carrier, and data center networks. The NetScreen-5000 series consists of two products: the 2-slot NetScreen-5200 system and the 4-slot NetScreen-5400 system. NetScreen-5000 security systems integrate firewall, VPN, DoS and DDoS protection, and traffic-management functionality, in a low-profile modular chassis. Built around Juniper's third-generation security ASIC and distributed system architecture, the NetScreen-5000 series offers excellent scalability and flexibility, while providing a higher level security system through Juniper Networks NetScreen ScreenOS custom operating system. Both products employ a switch fabric for data exchange and separate multibus channel for control information, delivering scalable performance for the most demanding environments.
Features and Benefits
Key features and benefits of the NetScreen-5000 security systems include the following:
- Modular, chassis-based security systems that offer flexible and scalable solutions for large enterprises and carriers
- Comprehensive high-availability solution for sub-second failover between interfaces or devices
- Full mesh configurations to allow for redundant physical paths in the network, thereby providing maximum resiliency and uptime
- Virtual System support to allow partitioning into multiple security domains, each with a unique set of administrators, policies, VPNs, and address books
- Interface flexibility for varying network-connectivity requirements and future growth requirements
- Virtual Router support to map internal, private, or overlapped IP addresses to a new IP address, providing an alternate route to the final destination and concealing it from public view
- Customizable security zones to increase interface density without additional hardware expenditures, lower policy-creation costs, contain unauthorized users and attacks, and simplify management of firewall/VPNs
- Transparent mode to allow the device to function as a Layer 2 IP security bridge, providing firewall, VPN, and DoS protections, with minimal change to the existing network
- Management through graphical Web UI, CLI, or Juniper Networks NetScreen-Security Manager™ central management system
- Policy-based management to allow centralized, end-to-end life-cycle management
Specifications
| Features/Functionality | NetScreen-5200 | NetScreen-5400 |
|---|---|---|
| Number of Interfaces | 8 mini-GBIC (SX, LX or TX), or 2 XFP 10 Gig (SR or LR) | 8 mini-GBIC (SX, LX or TX), or 2 XFP 10 Gig (SR or LR) |
| Maximum Number of IP Addresses in Trusted Interfaces | Unrestricted | Unrestricted |
| Maximum Throughput | 10 Gbps FW 6 Gbps 3DES VPN |
30 Gbps FW 15 Gbps 3DES VPN |
| Maximum Number of Sessions | 1,000,000 | 2,000,000* |
| Maximum Number of VPN Tunnels | 25,000 | 25,000 |
| Maximum Number of Policies | 40,000 | 40,000 |
| Maximum Number of Virtual Systems | 0 default, upgradeable to 500 | 0 default, upgradeable to 500 |
| Maximum Number of Virtual LANs | 4094 | 4094 |
| Maximum Number of Security Zones | 16 default, upgradeable to 1,016 | 16 default, upgradeable to 1,016 |
| Maximum Number of Virtual Routers | 3 default, upgradeable to 503 | 3 default, upgradeable to 503 |
| Routing Protocols Supported | OSPF, BGP, RIPv1/v2 | OSPF, BGP, RIPv1/v2 |
| High-Availability Modes Supported | Active/Passive Active/Active Active/Active Full Mesh |
Active/Passive Active/Active Active/Active Full Mesh |
| IPS (Deep Inspection FW) | Yes | Yes |
| Integrated / Redirect Web Filtering | Yes | Yes |
All product specifications can be found in the datasheet: Juniper Networks NetScreen 5000 Series
765 KB
Demos
Managing Your Network Security
Take a tour of the NetScreen-Security Manager system to see how to manage Juniper Networks integrated FW/VPN devices. This demo shows how to use this centralized, rule-based management platform to manage every aspect of the device life cycle, including all device, network, and security functionality, through a single, user-friendly interface. This demo will also show how to accomplish some key activities, such as how to set up a device, create a security policy, configure a VPN, investigate security incidents, and pull reports. See how easy it is to manage network security with the NetScreen-Security Manager system efficiently completing security tasks. See the demo
Literature
Datasheets
At-a-Glance
Brochure
Feature Briefs
- Denial of Service and Attack Protection
788 KB - Firewall with Integrated IPS
180 KB - Firewall / VPN Central Management
34 KB - High Availability
174 KB - Integrated Networking
117 KB - Network Deployment Options
117 KB - Network Segmentation
212 KB - Purpose-Built Architecture
143 KB - Secure Dynamic VPNs
90 KB - Secure VoIP
86 KB - Stateful Inspection Firewall
70 KB - Virtual Systems
96 KB - VPN Resiliency
661 KB - Web Filtering
135 KB
White Papers
- Dynamic VPNs Achieving Scalable, Secure Site-to-Site Connectivity
377 KB - Juniper Networks Deep Inspection Firewall
862 KB - Juniper Networks Layered Security Solution
1.25 MB - Stateful Inspection Firewalls
277 KB - The Evolution of Network Security: From DMZ Designs to Devices
226 KB - The Need for Pervasive Application-Level Attack Protection
287 KB - Virtualization Technologies Overview
554 KB - Voice Over IP 101: Understanding VoIP Networks
692 KB
Solution Briefs
- Different Approaches to Site-to-Site VPNs
354 KB - Enterprise Secure Wireless
230 KB - Integrated and Redirect Web Filtering
67 KB - Stopping Inbound and Outbound Threats with Juniper Networks Content Security
186 KB
Case Study
Buyer's Guide
View all Juniper Networks Literature

