Juniper SSG320M - Mode of Operation

5
SSG320M SSG350M
PKI Support
PKI Certificate requests (PKCS 7 and PKCS 10) Yes Yes
Automated certificate enrollment (SCEP) Yes Yes
Online Certificate Status Protocol (OCSP) Yes Yes
Certificate Authorities supported VeriSign, Entrust, Microso, RSA Keon, iPlanet
(Netscape) Baltimore, DoD PKI
VeriSign, Entrust, Microso, RSA Keon, iPlanet
(Netscape) Baltimore, DoD PKI
Self-signed certificates Yes Yes
Virtualization
Maximum number of security zones 40 40
Maximum number of virtual routers 8 8
Bridge groups* Yes Yes
Maximum number of VLANs 125 125
Routing
BGP instances 8 8
BGP peers 36 48
BGP routes 10,000 10,000
OSPF instances 3 3
OSPF routes 10,000 10,000
RIP v1/v2 instances 128 128
RIP v2 routes 10,000 10,000
Static routes 10,000 10,000
Source-based routing Ye s Ye s
Policy-based routing Yes Yes
ECMP Yes Yes
Multicast Yes Yes
Reverse Path Forwarding (RPF) Yes Yes
IGMP (v1, v2) Ye s Ye s
IGMP Proxy Yes Yes
PIM SM Yes Yes
PIM SSM Yes Yes
Multicast inside IPsec tunnel Yes Ye s
Encapsulations
PPP Yes Yes
MLPPP Yes Yes
MLPP max physical interfaces 6 10
Frame Relay Ye s Ye s
MLFR (FRF .15, FRF .16) Yes Yes
MLFR max physical interfaces 6 10
HDLC Yes Yes
IPv6
Dual stack IPv4/IPv6 firewall and VPN Yes Yes
IPv4 to/from IPv6 translations and encapsulations Yes Yes
Syn-Cookie and Syn-Proxy DoS Attack Detection Yes Yes
SIP, RTSP, Sun-RPC, and MS-RPC ALG’s Yes Yes
RIPng Yes Yes
BGP Yes Yes
Transparent mode Yes Yes
NSRP Yes Yes
DHCPv6 Relay Yes Ye s
Mode of Operation
Layer 2 (transparent) mode
(5)
Yes Yes
Layer 3 (route and/or NAT) mode Yes Yes
Specifications (continued)
*Bridge groups supported only on uPIMs in ScreenOS 6.0 and higher releases.