Does NetScreen 5GT support SSL VPN?

[BennyZ_]

I have an old NetScreen 5GT (201) model.

If it does, how do I set it up? could anybody point me to a manual?

if it doesn't, what product do I need to support this functionality?

[muttbarker_]

The NS 5GT is an older firewall. It is a completely different product than the SSL-VPN solution discussed in this forum. If you are looking for links on how to set it up as a firewall then the following will help you:

http://www.juniper.net/techpubs/hardware/apps_sys.html#5series

If you want to know how to set it up as an SSL-VPN box you are out of luck

[BennyZ_]

OK, what product should I be looking at then?

[muttbarker_]

The SSL-VPN product line is also known as the "secure access" or "SA" series. The models range from the SA700 (baby, baby box) up to the SA6500 (gigantor box).

I know that there are a couple of limitations on the SA700 the other boxes all pretty much have the same basic features for application access and differ based on user count and some of their high availability and other sharing features.

If you look at eBay for a solution please be aware of the fact that without a feature license these boxes are basically useless.

[BennyZ_]

I only have 10 concurrent users. would SA700 be sufficient?

[muttbarker_]

From the user count - yes a SA700 is fine. It is the functionality that you should review. The SA700 provides "Network Connect" with the base license. This is SSL-VPN access. If that is all you need - then the box is perfect, especially @ that user count level.

You can add some other more granular access through a license for what is called "core" access which is where you can limit users to browser page access only. A third level of access called "SAM" is not available at all on the SA700.

Hope that helps!

[BennyZ_]

I don't need any special client to be installed on user's laptop to use SSL VPN, do I? My whole purpose is to help travelling users. Very often their hotels would block PPTP ports. SSL VPN would be perfect as nobody blocks Port 443.

[muttbarker_]

No - you do not need a special client. When the user connects to the SA box the client will automatically download if it is not on the PC.