NetScreen-ISG 2000 Chassis Starter Kit, Baseline System, fan module, No Power Supplies, No I/O Modules, ScreenOS

The Juniper Networks Integrated Security Gateways (ISG) are purpose-built, security solutions that leverage a fourth generation security ASIC, the GigaScreen3, along with high-speed microprocessors to deliver unmatched firewall and VPN performance. The Juniper Networks ISG 1000 and ISG 2000 are ideally suited for securing enterprise, carrier and data center environments where advanced applications such as VoIP and streaming media dictate consistent, scalable performance. Integrating best-in-class Deep Inspection firewall, VPN and DoS solutions, the ISG 1000 and ISG 2000 enable secure, reliable connectivity along with network and application-level protection for critical, high-traffic network segments.

ISG 1000: The ISG 1000 is a fully integrated FW/VPN/IDP system with gigabit performance, a modular architecture, and rich virtualization capabilities. The base FW/VPN system comes with four fixed 10/100/1000 interfaces and two additional I/O modules for interface expansion.

ISG 2000: The ISG 2000 is a fully integrated FW/VPN/IDP system with multi-gigabit performance, a modular architecture, and rich virtualization capabilities. The base FW/VPN system allows for up to four I/O modules and three security modules for IDP integration.

Specifications

Advanced Feature/Capacity	ISG 1000 Advanced	ISG 2000 Advanced
Number of Interfaces	4 fixed 10/100/1000 plus up to 4 Mini GBIC (SX or LX), or up to 8 10/100/1000, or up to 20 10/100	Up to 8 Mini-GBIC (SX or LX), or up to 28 10/100
Maximum Number of IP Addresses in Trusted Interfaces	Unrestricted	Unrestricted
Maximum Throughput	1G FW 1G 3DES VPN	4G FW 2G 3DES/AES VPN
Maximum Number of Sessions	250,000 / 512,000 with IDP Upgrade	512,000 / 1,000,000 with IDP Upgrade
Maximum Number of VPN Tunnels	2,000	10,000
Maximum Number of Policies	10,000	30,000
Maximum Number of Virtual Systems	0 default, up to 10 additional	0 default, up to 50 additional
Maximum Number of Virtual LANs	1000	2000
Maximum Number of Security Zones	20 default, up to 20 additional	26 default, up to 100 additional
Maximum Number of Virtual Routers	3 default, up to 10 additional	3 default, up to 50 additional
High-Availability Modes Supported	Active/Passive Active/Active Active/Active Full Mesh	Active/Passive Active/Active Active/Active Full Mesh
IPS (Deep Inspection FW)	Yes	Yes
IPS (Integrated IDP)	Yes - optional upgrade	Yes - optional upgrade
Integrated / Redirect Web Filtering	Yes / Yes	Yes / Yes

A Baseline software license is available for both the ISG 1000 and the ISG 2000 as an entry-level solution for customer environments where features such as Deep Inspection, OSPF and BGP dynamic routing, advanced High Availability, and full capacity are not critical requirements.

Baseline Feature/Capacity	ISG 1000 Baseline	ISG 2000 Baseline
Maximum Number of Sessions	125,000	256,000
Maximum Number of VPN Tunnels	1,000	1000
Virtual LANs	50	100
Routing Protocols Supported	RIPv1/v2 only	RIPv1/v2 only
IPS (Deep Inspection FW)	Not Available	Not Available
IPS (Integrated IDP)	Not Available	Not Available
High Availability Modes Supported	Active/Passive	Active/Passive
Integrated / Redirect Web Filtering	Yes / Yes	Yes / Yes

All product specifications can be found in the datasheets: