Voip Security; User Authentication And Access Control - Juniper Netscreen-5200 Specifications

specifications (continued)

VoiP security

H.323 ALG
SIP ALG
MGCP ALG
SCCP ALG
NAT for VoIP protocols
iPsec VPn
Concurrent VPN tunnels
3
Tunnel interfaces
3
DES (56-bit), 3DES (168-bit) and AES encryption
MD-5 and SHA-1 authentication
Manual key, IKE, PKI (X.509), IKEv2 with EAP
Perfect forward secrecy (DH Groups)
Prevent replay attack
Remote access VPN
L2TP within IPsec
IPsec NAT traversal
Redundant VPN gateways

user authentication and access control

Built-in (internal) database - user limit
Third-party user authentication
RADIUS Accounting
XAUTH VPN authentication
Web-based authentication
802.1X authentication
Unified access control enforcement point
PKi support
PKI Certificate requests (PKCS 7 and PKCS 10)
Automated certificate enrollment (SCEP)
Online Certificate Status Protocol (OCSP)
Certificate Authorities supported
Self-signed certificates
Virtualization
6
Maximum number of virtual systems
Maximum number of security zones
Maximum number of virtual routers
Maximum number of VLANs
Inter-VSYS Communication (shared-DMZ)
routing
BGP instances
BGP peers
BGP routes
OSPF instances
OSPF routes
4
Yes
Yes
Yes
Yes
Yes
Up to 25,000
Up to 4,095
Yes
Yes
Yes
1,2,5
Yes
Yes
Yes
Yes
Yes
3 Up to 50,000
RADIUS, RSA SecurID, and LDAP
Yes – start/stop
Yes
Yes
Yes
Yes
Yes
Yes
Yes
VeriSign, Entrust, Microsoft, RSA Keon, iPlanet
(Netscape) Baltimore, DoD PKI
Yes
0 default, upgradeable to 500
16 default, upgradeable to 1,016
3 default, upgradeable to 503
4,094
Yes
128
256
30,000
Up to 8
30,000
NetScreeN-5200 NetScreeN-5400
Yes
Yes
Yes
Yes
Yes
Up to 25,000
Up to 4,095
Yes
Yes
Yes
1,2,5
Yes
Yes
Yes
Yes
Yes
Up to 50,000
RADIUS, RSA SecurID, and LDAP
Yes – start/stop
Yes
Yes
Yes
Yes
Yes
Yes
Yes
VeriSign, Entrust, Microsoft, RSA Keon, iPlanet
(Netscape) Baltimore, DoD PKI
Yes
0 default, upgradeable to 500
16 default, upgradeable to 1,016
3 default, upgradeable to 503
4,094
Yes
128
256
30,000
Up to 8
30,000