Juniper Networks 710008-001 User Manual
FW/IPSec VPN Buyer’s Guide
Copyright © 2004, Juniper Networks, Inc. 15
4. Ease of Use
Multiple ways to interact with
the system:
the system:
o CLI
o Web UI
o Central Management
o Web UI
o Central Management
Platform
Yes
Yes
Yes
Yes
Yes
Remote management options:
o SSH
o Telnet
o Web (HTTP/HTTPs)
o Centralized
o Telnet
o Web (HTTP/HTTPs)
o Centralized
Management GUI
o Syslog
o SNMP
o Ping for remote
o SNMP
o Ping for remote
monitoring
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Ability to manage the device,
network and security
functionality from a single
console
network and security
functionality from a single
console
Yes, Juniper
Networks NetScreen-
Security Manager
Ability to view all logs in central
location
location
Yes
Ability to assign different
people in the organization
different read/write privileges
people in the organization
different read/write privileges
Yes, role-based
administration
Policy changes can be
distributed quickly to one or
many devices
distributed quickly to one or
many devices
Yes, Juniper
Networks NetScreen-
Security Manager
Firewall policies can be easily
applied to VPN traffic, without
having to define the network
(IP-based) within that policy
applied to VPN traffic, without
having to define the network
(IP-based) within that policy
Yes, using Security
Zones
See Juniper Networks VPN
White Paper “Dynamic VPNs
Achieving Scalable, Secure
Site-to-Site Connectivity”
White Paper “Dynamic VPNs
Achieving Scalable, Secure
Site-to-Site Connectivity”
Policies can be easily applied
to new networks/interfaces
to new networks/interfaces
Yes, using Security
Zones
Offers VLAN support to
integrate subnets easily
integrate subnets easily
Yes
Different network segments
can have different policy sets,
effectively segmenting the
network
can have different policy sets,
effectively segmenting the
network
Yes, using Security
Zones
Administrators can apply
universal rules to multiple
security zones
universal rules to multiple
security zones
Yes, unique to
NetScreen
Different network segments,
departments, offices, etc. can
manage their own security,
completely separate from each
other:
departments, offices, etc. can
manage their own security,
completely separate from each
other:
o Separate management
devices
o Separate “view”
Yes, Virtual Systems
Yes
Yes
Built in troubleshooting
features:
features:
o Contextual information
Yes