Juniper ACCESS-EES-2500U-2YR

Enhanced Endpoint Security subscription for SA4500 FIPS and SA6500 FIPS, 2500 concurrent users, 2 Years Juniper Networks® is the market leader in SSL-based remote access that is easy to deploy and easy to maintain. All Juniper Networks SA Series SSL VPN Appliances have met or exceeded the stringent security standards of independent Internet security auditing agencies. Juniper extends this leadership with a FIPS-certified hardware security module that is Federal Information Processing Standards (FIPS)-compliant. Like all SA Series appliances, the Juniper Networks SA4500 FIPS and SA6500 FIPS SSL VPN Appliances provide a hardened security gateway that uses the standards-based SSL protocol to provide remote access via a Web browser. There are no hardware or software clients to deploy, configure, or install; no changes required for internal servers; no Network Address Translation (NAT) or firewall traversal issues to manage; and virtually no ongoing maintenance. SSL itself is the most widely deployed security protocol in the world, securing billions of dollars in online banking and e-commerce transactions. The combination of these features adds up to a solution with unbeatable security, radically lower total cost of ownership (TCO) when compared to traditional VPNs or custom extranets, and a highly scalable implementation. Please note that the FIPS models will not support Junos Pulse.

FIPS Security
- Stringent security with FIPS-certified Hardware Security Module (HSM) and FIPScertified Layer 3 connectivity using Network Connect client on Windows platforms.

Rich Access Privilege Management Capabilities.
- Dynamic, controlled access at the URL, file, application, and server level based on a variety of session-specific variables including identity, device, security control, and network trust level.

Provision by Purpose
- Three different access methods that allow administrators to balance security and access on a per-user, per-session basis.

FIPS Security
The SA4500 FIPS and SA6500 FIPS appliances incorporate a FIPS-certified HSM. The HSM handles cryptographic processing as well as key and certificate management in a hardened, tamper-proof hardware module. The HSM provides the additional benefit of offloading cryptographic processing from the host CPU, thus optimizing overall system performance while adding a physical layer of security. The SA4500 FIPS and SA6500 FIPS appliances also have a tamper evident label that deters physical security breaches and provides visual indication of appliance integrity.