The Juniper Networks Secure Services Gateway 500 Series (SSG) represents a new class of purpose-built security appliance that delivers a perfect mix of performance, security and LAN/WAN connectivity for regional and branch office deployments. Traffic flowing in and out of the branch office is protected from worms, Spyware, Trojans, and malware by a complete set of Unified Threat Management (UTM) security features including Stateful firewall, IPSec VPN, IPS, Antivirus (includes Anti-Spyware, Anti-Adware, Anti-Phishing), Anti-Spam, and Web Filtering.

Complementing the powerful UTM security features is a robust routing engine that allows the SSG 500 Series to be deployed as a traditional branch office router or as a combination firewall and routing device to reduce capital and operational expenses.

• SSG 520/SSG 520M: The SSG 520 and SSG 520M deliver 650+ Mbps of firewall traffic and 300 Mbps of IPSec VPN.

• SSG 550/SSG 550M: The SSG 550 and SSG 550M deliver 1+ Gbps of firewall traffic and 500 Mbps of IPSec VPN. The SSG 550 supports redundant power supplies and is NEBS compliant.

• Purpose-built, high performance platform that delivers WAN connectivity and security, plus the muscle to protect your high-speed LAN against internal network and application-level attacks
• Combination of security and LAN/WAN routing functionality, that provides the ability to consolidate devices and reduce IT expenditures
• Comprehensive set of Unified Threat Management (UTM) security features to protect against network and application level attacks while simultaneously stopping content-based attacks. UTM security features include:
  • Stateful inspection firewall to perform access control and stop network level attacks
  • IPS (Deep Inspection firewall) to stop application level attacks
  • Best-in-class antivirus based on the Kaspersky Lab scanning engine that includes Anti-Phishing, Anti-Spyware, Anti-Adware protection to stop viruses, Trojans and other malware before they damage the network
  • Anti-Spam via a partnership with Symantec to block known spammers and phishers
  • Web filtering using SurfControl to block access to known malicious download sites or other inappropriate web content
  • Site-to-site IPSec VPN to establish secure communications between offices
  • Denial of service (DoS) mitigation capabilities
  • Application Layer Gateways for H.323, SIP, SCCP and MGCP to inspect and protect VoIP traffic
• Wide range of LAN and WAN interfaces supporting Serial, T1/E1, DS3, 10/100/1000, SFP and FE
• Interface and routing flexibility for varying network connectivity requirements and future growth requirements
• Multiple high availability options with sub-second failover between interfaces or devices
• Customizable security zones to increase interface density without additional hardware expenditures, lower policy creation costs, contain unauthorized users and attacks, and simplify management of firewall/VPNs
• Management through graphical Web UI, CLI, or the NetScreen-Security Manager central management system
• Policy-based management to allow centralized, end-to-end life-cycle management
• Upgrade to JUNOS 8.0 or greater can be purchased separately (SSG 520M and SSG 550M only).

Specifications

(2)  Redirect Web filtering sends traffic to a secondary server and therefore entails purchasing a separate Web filtering license from either Websense or SurfControl

All product specifications can be found in the datasheet: Juniper Networks SSG 500 Series176 KB