Juniper NS-ISG 1000. Firewall throughput: 2000 Mbit/s. Heat dissipation: 444 BTU/h. Security algorithms: 256-bit AES,SHA-1. Management platform: ScreenOS 6.2. Connectivity technology: Wired, Ethernet LAN data rates: 10,100,1000 Mbit/s

The Juniper Networks ISG 1000 and ISG 2000 are fully integrated firewall/VPN systems that offers multi-gigabit performance, modular architecture and rich virtualization capabilities. They are an ideal security solution for large enterprise, data center and service provider networks. The ISG Series firewall/VPN-based systems deliver security features such as Intrusion Prevention System (IPS), anti-spam, Web filtering, and Internet Content Adaptation Protocol (ICAP) antivirus redirection support. The advanced system is further expandable with optionally integrated IDP or as a General Packet Radio Service (GPRS) firewall/VPN for mobile network service provider environments. The ISG Series firewall/VPN modular architecture enables deployment with a wide variety of copper and fiber interface options. Highly flexible segmentation and isolation of traffic belonging to different trust levels can be achieved using advanced features such as virtual systems, virtual LANs, and security zones. The ISG Series firewall/VPN allows multiple, separate firewall inspection or routing policies to simplify network design. This enables the enforcement of security policies to traffic streams—even in highly complex environments—without significant impact on the network itself. The flexibility and efficiency offered by the ISG Series architecture provides state-of- the-art performance and best-in-class functionality as a firewall/VPN or integrated firewall/VPN/IDP solution with optional security modules. The ISG 1000 supports up to two security modules, while the ISG 2000 can support up to three security modules. The security modules maintain their own dedicated processing and memory, and incorporate technology designed to accelerate IDP packet processing. This reduces the number of separate security devices and management applications, and simplifies deployment effort and network complexity. The result? Higher cost savings. The ISG Series firewall/VPN with IDP utilizes the same award-winning software found on Juniper Networks IDP platforms. The IDP security module supports multi-method detection, combining eight different detection mechanisms—including stateful signatures and protocol anomaly detection. In addition to helping businesses defend against security threats such as worms, trojans, malware, spyware, and hackers, the ISG with IDP can provide information on rogue servers as well as types and versions of the applications and operating systems that may have inadvertently been added to the network. Application signatures go a step further by enabling administrators to maintain compliance and enforce corporate business policies with accurate detection of application traffic. The ISG 1000 and ISG 2000 can be deployed in a number of different configurations to protect both the perimeter and internal network resources. When deployed in a mobile operator network, the ISG 1000 and ISG 2000 GPRS solutions are GPRS Tunneling Protocol (GTP) aware and fully support GTP functionality in virtual systems. The ISG Series firewall/VPN can be deployed at the Gp interface connection between two Public Land Mobile Networks (PLMN), the Gn interface connection between the SGSN and the GGSN support nodes, and the Gi interface connection between the GGSN and the Internet. In addition to countering sophisticated threats, denial of service (DoS) attacks, and malicious users, the ISG Series GPRS firewall/VPN can limit messages, throttle bandwidth- hungry applications that consume uplink/downlink traffic, and perform 3GPP R6 IE removal to help retain interoperability in roaming between 2G and 3G networks.