Juniper Networks MAG6610 Junos Pulse Gateway
Single point of access convergence for the VAP and Network Access Control
MAG6610 Overview:
The MAG6610 gateway enables SSL VPN and network access control capabilities for scalable, large enterprise customers. The MAG 6610 supports service modules which can be mixed and matched in its two available service module slots to deliver either SSL VPN or NAC functionality.
The MAG6610 requires at least one service module to be ordered and installed (MAG-SM160 or MAG-SM360). The MAG6610 gateway also comes with chassis management single sign-on (SSO) functionality which allows the network administrator to configure and manage all application service modules from one central console.
The MAG6610 gateway supports up to 20,000 concurrent SSL VPN users and 30,000 NAC users through its two available service module slots in a 1U high form factor. The service module hard disk drives for MAG6610 are available as field replaceable units to increase network up-time. The MAG6610 includes a 560W AC power supply
The challenge for today’s technology leader is to build an infrastructure that provides easy, secure access to the corporate network for all workers— road warriors, telecommuters, mobile workers, office workers, contractors, guests, partners, etc.—with role-based access while minimizing costs. The Juniper Networks MAG Series Junos Pulse Gateways deliver SSL VPN connectivity and network access control (NAC) capabilities in a single, purpose designed gateway. With Junos Pulse integrated within the MAG Series, this unified client and gateway solution addresses enterprise access needs over a breadth of devices for all enterprise sizes, while granting user permissions at high speed and keeping hardware investment costs low.
The Juniper Networks® MAG Series Junos® Pulse Gateways is a family of modular, purpose designed gateways that meet the secure remote access and LAN access needs of enterprises from small to large. Deployed in combination and working in concert with the award-winning Juniper Networks Junos Pulse client, deployable on mobile devices, laptops, and desktops, the modular MAG Series delivers a single point of convergence for the SSL VPN and NAC needs of any enterprise.
The MAG Series gateways achieve a revolutionary reduction in OpEx and CapEx costs for the enterprise with a secure connectivity infrastructure that increases application density, adds massive scale, and provides easy reprogrammable ”personality” changes between SSL VPN and NAC mode. Additionally, these gateways help enterprises reduce operational, implementation, and provisioning expenses related to device management by replacing multiple disparate clients with a single, integrated, multiservice client—Junos Pulse. This combination of gateway features and functionality with the Junos Pulse client and its built-in support for mobile devices, laptops, and desktops has been specifically designed to change the economics of the enterprise’s secure access infrastructure.
Features & Benefits:
| Features | Benefits |
|---|---|
| Single client, single gateway | The MAG Series Junos Pulse Gateways in conjunction with the Junos Pulse client lower OpEx and CapEx costs dramatically, because they reduce the number of management and software installation updates required on corporate issued and personal devices used by employees. In large environments, the gateways replace multiple hardware devices with a single converged device, further bringing down costs. |
| High density modular design | Modular design of the MAG Series allows the service modules to be mixed and matched to suit changing enterprise requirements in a flexible form factor. |
| Massive scalability | The MAG Series can be used for a 100 concurrent user SSL VPN deployment up to a 40,000 concurrent SSL VPN user deployment, or a 200 concurrent guest user environment up to a 60,000 concurrent user NAC deployment. |
| Junos Pulse | Simplified, integrated, multiservice network client works in concert with the MAG Series to enable optimized anytime, anywhere access to corporate data from mobile and nonmobile devices alike. |
| Host Checker | Verifies and ensures that endpoint devices meet corporate security policy requirements before granting access, whether the user is remote, mobile, local, or a guest user, remediating devices, and quarantining users when necessary. |
| Identity- and role-based access | Control user access based on the user’s identity or role, and grant access only authorized data. |
| Cross-platform support | SSL VPN capabilities allow users to access corporate resources from any type of device (i.e., notebooks, netbooks, smartphones, tablet devices, other mobile devices, etc.) using nearly any type of operating system (Microsoft Windows, Apple Mac OS, Linux, Apple iOS, Google Android, Nokia Symbian, Microsoft Windows Mobile, etc.). |
| Leverages existing security infrastructure | Existing backend data stores and directories such as Microsoft Active Directory or Lightweight Directory Access Protocol (LDAP) in customer networks can be leveraged for authentication and authorization, simplifying network administration and maintenance. |
User License (Common Access License)
With the introduction of the MAG Series Junos Pulse Gateways, common access licenses are now available as user licenses. With common access licensing, licenses can either be used for SSL VPN user sessions or NAC user sessions. Please see the Ordering Information section for more details.
The common access user licenses provide functionality that allows users to access the network. They fully meet the needs of both basic and complex deployments with diverse audiences and use cases, and they require little or no client software or server changes, DMZ buildouts, or software agent deployments. For administrative ease of use when it comes to license counts, each license only enables as many users as specified in the license, and the licenses are additive. For example, if a 100 user license was originally purchased and the concurrent user count grows over the next year to exceed that amount, simply adding another 100 user license to the system will now allow for up to 200 concurrent users.
Junos Pulse Services for the MAG Series
Junos Pulse Secure Access Service
Enterprises and service providers have the difficult challenge of
providing location- and device-independent network connectivity
that is secure and capable of limiting resource access to authorized
users. Breaches and threats continue to spiral out of control, and
employees and users are seeking to use—or are encouraged by
their employers to use—their own personal smartphones, and
mobile and computing devices to access the enterprise network,
applications, and corporate data, making this challenge even more
difficult. Juniper Networks Junos Pulse Secure Access Service is a
simple, intuitive service that provides secure, authenticated access
for remote and mobile users from any web-enabled device to corporate resources—anytime and anywhere. Junos Pulse Secure
Access Service uses SSL, the security protocol found in all standard
Web browsers. The use of SSL eliminates the need for preinstalled
client software, changes to internal servers, and costly ongoing
maintenance and desktop support.
Junos Pulse Secure Access Service includes Juniper Networks Junos Pulse, a dynamic, integrated, multiservice network client for mobile and nonmobile devices. Junos Pulse enables optimized, accelerated anytime, anywhere access to corporate data. It enables secure SSL access from a wide range of mobile and nonmobile devices such as smartphones, tablet devices, netbooks, notebooks, desktops, Wi-Fi, or 3G-enabled devices. Junos Pulse delivers improved productivity and secure, ubiquitous access to corporate data and applications.
Junos Pulse Access Control Service
Junos Pulse Access Control Service enables safe, protected cloud
and network access for mobile devices, whether they are remote
or local. It provides network access control services across the
enterprise, delivering a standards-based, comprehensive, network
and application access control solution. The combination of the
Junos Pulse client and the Junos Pulse Access Control Service
delivers identity-based, location-aware, granular access control,
as well as robust endpoint security and integrity checks.
When deployed in conjunction with MAG Series gateways, Junos Pulse and the Junos Pulse Access Control Service deliver fast, secure, anytime, anywhere network access, and they automatically migrate from one type of access (such as remote access) to another (local network access) based on the user’s location.
Junos Pulse, which is included with the Junos Pulse Access Control Service, delivers global identity-aware networking, complete with security and access control policies that follow users around the globe—regardless of how, from where, or from what device (smartphones, tablet devices, mobile devices) they are attempting network and application access. All user session data is shared in MAG Series gateways via the Trusted Network Connect (TNC) Interface to Metadata Access Point (IF-MAP) standard, enabling a seamless authentication flow.
Technical Specifications:
Front View
Rear View
| Model: | MAG2600 | MAG4610 | MAG6610 | MAG4611 |
|---|---|---|---|---|
 |
 |
 |
 |
|
| Dimensions and Power | ||||
| Dimensions (W x H x D) |
4.31 x 1.65 x 7.73 in (10.95 x 4.2 x 19.64 cm) |
8.63 x 1.75 x 21.50 in (21.92 x 4.45 x 54.61 cm) |
17.31 x 1.75 x 27.25 in (43.97 x 4.45 x 69.22 cm) |
17.31 x 3.5 x 27.25 in (43.97 x 8.89 x 69.22 cm) |
| Weight | 1.98 lb (900 g) | 11.5 lb (5.2 kg) | 21 lb (9.5 kg) | 31 lb (14.1 kg) |
| Rack mountable | Yes, with optional tray | Yes | Yes | Yes |
| A/C power supply | 100-240 VAC, 1A 50-60 Hz, 30 W maximum |
100-240 VAC, 1A 50-60 Hz, 70 W maximum |
100-240 VAC, 8A 50-60 Hz, 560 W maximum |
100-240 VAC, 10A 50-60 Hz, 750 W maximum |
| System battery | CR2032 3 V lithium coin cell | CR2032 3 V lithium coin cell | CR2032 3 V lithium coin cell | CR2032 3 V lithium coin cell |
| Efficiency | 80% or greater at full load | 80% or greater at full load | 80% or greater at full load | 80% or greater at full load |
| Material | Aluminum | Aluminum | Aluminum | Aluminum |
| LEDs | Power, HDD activity, hardware alert |
Power, HDD activity, hardware alert |
Power, HDD activity, hardware alert |
Power, HDD activity, hardware alert |
| Ports | • RJ45 serial (console port) • Two RJ45 Ethernet 10/100/1000 (traffic) • USB |
• RJ45 serial (console port) • Three RJ45 Ethernet 10/100/1000 (traffic) • USB |
• RJ45 serial (console port) • Three RJ45 Ethernet 10/100/1000 (traffic) • USB |
• RJ45 serial (console port) • Three RJ45 Ethernet 10/100/1000 (traffic) • USB |
| Environment | MAG2600 | MAG4610 | MAG6610 | MAG4611 |
| Operating temperature | 41° to 104° F (5° to 40° C) |
41° to 104° F (5° to 40° C) |
41° to 104° F (5° to 40° C) |
41° to 104° F (5° to 40° C) |
| Storage temperature | -40° to 158° F (-40° to 70° C) |
-40° to 158° F (-40° to 70° C) |
-40° to 158° F (-40° to 70° C) |
-40° to 158° F (-40° to 70° C) |
| Relative humidity (operating) | 8% to 90% noncondensing | 8% to 90% noncondensing | 8% to 90% noncondensing | 8% to 90% noncondensing |
| Relative humidity (storage) | 5% to 95% noncondensing | 5% to 95% noncondensing | 5% to 95% noncondensing | 5% to 95% noncondensing |
| Altitude (operating) | 10,000 ft maximum | 10,000 ft maximum | 10,000 ft maximum | 10,000 ft maximum |
| Altitude (storage) | 40,000 ft maximum | 40,000 ft maximum | 40,000 ft maximum | 40,000 ft maximum |
| Certifications | MAG2600 | MAG4610 | MAG6610 | MAG4611 |
| Safety certifications | EN 60950-1: 2006 (2nd Edition) |
EN 60950-1: 2006 (2nd Edition) |
EN 60950-1: 2006 (2nd Edition) |
EN 60950-1: 2006 (2nd Edition) |
| Emissions certifications | EN 55022 (CISPR 22): 2006 +A1:2007; (ACMA) AS/NZS CISPR 22: 2006; FCC Part 15 Subpart B; Industry Canada ICES-003 Issue 4, February 2004; and VCCI V-3/2009.04 and V-4/2009.04 ETSI EN 300 386 V1.4.1 (2008-04) for a Class A Device | |||
| Warranty | 90 days (Can be extended with support contract) |
90 days (Can be extended with support contract) |
90 days (Can be extended with support contract) |
90 days (Can be extended with support contract) |
Documentation:
Download the Juniper Networks MAG Series Junos Pulse Gateways Datasheet (PDF).