Juniper Networks SA6000 SP SSL VPN Appliance

SA6000 SP Overview:

The Juniper Networks SA6000 SP is the industry’s first secure SSL VPN platform with comprehensive virtualization. The SA6000 SP enables service providers (SPs) to deliver network-based SSL VPN services to multiple enterprises of any size from a single appliance/cluster. Combining Juniper Networks extensive SP expertise and its industry-leading SSL VPN feature set, the SA6000 SP gives service providers a sophisticated, end-to-end virtualization framework that is optimized for highly available and highly scalable network-based SSL VPN managed services.

The Juniper Networks SA6000 SP SSL VPN Appliance’s ability to offer network-based managed services to multiple customers from a single appliance is enabled by Juniper Networks unique Instant Virtual System (IVS) software, which provides end customers many of the benefits of their own SSL VPN, without having to manage a device on their premises. IVS enables complete segregation of each customer’s traffic, allowing SPs to securely segregate end user traffic, even if two customers have overlapping IP addresses. IVS features granular role-based VLAN (802.1Q) tagging, enabling service providers to provision specific VLANs for employees and partners of an enterprise customer. Domain Name System (DNS)/Windows Internet Name Service (WINS), Authentication, Authorization and Accounting (AAA), log/accounting servers, and application servers such as Web mail, file shares, and more, can reside either in the respective customers’ intranets or in the SP network. SPs can provision an overall concurrent number of users on a per customer basis with the flexibility to distribute further amongst different user audiences such as remote employees, contractors, partners and others.

Architecture and Key Components

Specific SA6000 SP hardware platform features include redundant hot swappable power supplies and hard disks with real-time data mirroring, as well as hot swappable fans. The platform also includes Gigabit Interface Connector (GBIC)-based multiple Ethernet ports with the flexibility to select SX, LX and copper-based interfaces, enabling the creation of short or long distance fiber connections and redundant or meshed configurations. Platforms can be deployed in pairs or in multi-unit clusters for High Availability (HA). The SA6000 SP also features a state-of-the-art SSL acceleration chipset to speed CPU-intensive encrypt/decrypt processes, as well as built-in compression for all traffic.

With SA6000 SP, service providers can tailor their offerings, and they can control the degree of customer management and configuration that they wish to offer to their end customers. For example, a service provider can choose whether they wish to delegate the ability for end customers to establish their own customized user portal, endpoint security, authentication, authorization and accounting polices, or whether they would prefer to limit the offering to predefined standards.

The SA6000 SP uses Secure Socket Layer (SSL) available in all Web browsers as a means of secure transport. This enables the service provider to offer customers a means of remote access for their mobile employees and contractors without deploying client software, as well as secure extranet or intranet access with no demilitarized zone (DMZ) build out, server hardening, Web agent deployments or ongoing maintenance.

Features & Benefits:

Low Total Cost of Ownership with High Return on Investment

The combination of the SA6000 SP platform with IVS software allows both the service provider and the end customer to realize a wealth of benefits at a very low total cost of ownership.

• No client to install and no firewall/Network Address Translation (NAT) traversal issues result in reduced support overhead
• Differentiated revenue opportunities with services such as extranet access, business continuity, intranet LAN security and mobile device access
• Increased end customer satisfaction
• Maximizes existing SP infrastructure, including MPLS and IPsec network

Complete Management Flexibility with Virtualization Framework

The granular role-based delegation features of the SA6000 SP enable service providers to grant customer administrators a variety of management controls. Granular network, security (endpoint security, authentication, authorization and accounting), and management policies can be tailored to individual customer needs.

• Service providers can choose from a wide range of flexible options, allowing them to:
  • Delegate to end customers the ability to define the specifics of their virtual systems
  • Provide easy-to-deploy standard configurations
• Centralized management provides role-based delegation for streamlined administration

Service Provider Performance, Scalability and High Availability

The SA6000 SP features a number of benefits to meet service provider performance, scalability and HA needs, including:

• Redundant, hot swappable components
• A variety of performance enhancing features including hardware-based SSL acceleration, compression and clustering for optimal scalability and availability
• Multi-unit cluster deployment option, for HA across the LAN and the WAN

Streamlined Service Provider Administration

The SA6000 SP provides streamlined administration to most efficiently provision multiple customers. It also features standards-based management protocols to facilitate integration with third-party management and reporting products.

Best-in-Class SSL VPN Features that End Users Demand

Juniper Networks market-leading SSL VPN appliances provide an unmatched feature set. These features are available to end customers as part of a virtualized system, allowing the service provider to choose to offer them as part of a standard or differentiated service offering. More detailed information on the standard Juniper Networks SA Series SSL VPN features can be found in the SSL VPN family datasheets.

Technical Specifications:

Front View

Rear View

Performance-Enabling Services and Support

Juniper Networks is the leader in performance-enabling services and support, which are designed to accelerate, extend, and optimize your high-performance network. Our services allow you to bring revenue-generating capabilities online faster so you can realize bigger productivity gains, faster rollouts of new business models and ventures, and greater market reach, while generating higher levels of customer satisfaction. At the same time, Juniper Networks ensures operational excellence by optimizing your network to maintain required levels of performance, reliability, and availability.

Documentation:

Download the Juniper Networks SA6000 SP SSL VPN Appliance Datasheet (PDF).