MAG Series devices

[ruc_]

Some clarifications regarding dual personality i.e. Ability to either run Secure Access Service (SSL VPN) OR Access Control Service (UAC):

1. When you power-up any hardware platform from MAG-series family for the first the time you will see the below prompt which allows you to select either of the personality  options.

Please select a factory-reset personality:
[1] Junos Pulse Secure Access Service 7.1 R1
[2] Junos Pulse Access Control Service 4.1 R1

2. You can change the personality at any time and the process can be started either from serial console or can be started from Admin Web GUI. However to complete the process you will need to have access to the serial console.

Below are some useful links related to the MAG Series:

1. Product Info landing page:  http://www.juniper.net/us/en/products-services/security/mag-series/

2. Technical Documentation landing page: http://www.juniper.net/techpubs/en_US/release-independent/mag/information-products/pathway-pages/mag...

3. Product Support landing Page: http://www.juniper.net/customers/support/ (From here Select 'By Product' > 'MAG Series'

[kpeterson_]

There are several presentations that have been recorded:

- MAG presentation for Americas and EMEA (including licensing)

- MAG presentation for APAC (pretty much the same as above)

- New licensing overview, comparing the subscription and perpetual licensing with a focus on the new hardware.

These are all available for replay at the Learning Acedemy website (for partners).

The newer Meeting and ICE licenses are also now available (on the May pricelist).

Regards,

Kevin Peterson

[moinul_]

New MAG series gateways are Juniper's HW refresh to replace all existing SA and IC series platforms. MAG platforms has 100% SSL and UAC feature parity - can be utilized for all existing services. These platforms also support all legacy SSL (NC, Core, SAM) and UAC (OAC) clients. MAG also supports Juniper's next gen Junos Pulse Client that provides multiple services from the same client i.e. L3 VPN, 802.1x, IPSec, App accel etc.

Below is the side by side list:

SSL

-------------------------------------------------------------------------------------------------------------------------------------------

MAG2600 (fixed form factor) is equivalent of SA700 and SA2500

MAG4610 (fixed form factor) is equivalent of SA4500 can support up to 1K concurrent sessions

MAG6610 is a 1U chassis that can host 2xSM160 and/or 2xSM360 application blades.

MAG6611 is a 2U chassis that can host 4xSM160 and/or 4xSM360 application blades.

The difference between SM-160 and SM-360 is the scale.

each SM-160 can support up to 1K concurrent SSL connections

each SM-360 can support up to 10K concurrent SSL connections

From SW feature perspective, a single SM application blade is equivalent to one existing SA series gateway. MAG series platforms did not deprecate any existing SSL features.

UAC

------------------------------------------------------------------------------------------------------------------------------------------

MAG2600 (fixed form factor) is only supporting MAGx600-Guest-Access license. This particular SW package only provides Guest provisioning, guest access control and host Check. The SW license is a flat fee for up to 200 guest users. None other UAC licenses are supported on this platform today.

MAG4610 is equivalent of IC4500 - supports upto 5K concurrent UAC/NAC sessions (fixed form factor)

MAG6610 is a 1U chassis that can host 2xSM160 and/or 2xSM360 application blades.

MAG6611 is a 2U chassis that can host 4xSM160 and/or 4xSM360 application blades.

The difference between SM-160 and SM-360 is the scale.

each SM-160 can support up to 5K concurrent UAC/NAC connections

each SM-360 can support up to 15K concurrent UAC/NAC connections

From SW feature perspective, a single SM application blade is equivalent to one existing IC series gateway. MAG series platforms did not deprecate any existing UAC features.

----------------------------------------------------------------------------------------------------------------------------------------

Please note that MAG platforms do not support HW FIPS. So if you are selling into federal, continue selling existing SA and IC FIPS boxes.

[mnwarren_]

Is there a MAG license for lab use that has full features and functionality for a non-production environment?

I know we could buy lab licenses for the SA boxes, but I haven't seen a lab license for the MAG line.

[keithr_]

---

@moinul wrote:

<...> MAG platforms has 100% SSL and UAC feature parity - can be utilized for all existing services.

---

Can Juniper really claim 100% parity? From what I've read, the MAG does not support IVS at this time, therefore it cannot be utilized for all existing services, considering "all existing services" in many customers' cases includes the use of IVS.

[muttbarker_]

Keith - yeah, that was an interesting comment on his part about the 100% parity. Juniper DOES NOT claim that in the marketing literature that is out there on the product - that was part of my frustration in regards to the product announcement. Really a misstatement on his part.

I just hope that besides IVS (which is a biggie for those users who run it) that nothing else has "gone missing" - looking forward to getting hold of one and testing it.

My sales guy also told me that some of the licensing models are more expensive on the MAG - specifically Secure Meeting.

[Automate_]

I'll get that statement clarified for this thread.

-Keith

[zanyterp_]

There is no 100% feature parity at a software level, you are correct. I think the main items that do not exist on the MAG are IVS, as you are aware, and the email client proxy (which was not available on all previous models).

[moinul_]

---

@zanyterp wrote:
There is no 100% feature parity at a software level, you are correct. I think the main items that do not exist on the MAG are IVS, as you are aware, and the email client proxy (which was not available on all previous models).

---

I need to clarify my previous statement - 100% feature parity is not entirely correct. We did deprecate a few older items and those are: IVS, GZip compression, email proxy, multicast/bcast for cluster communication and WAN clustering. For details, please look at the external collateral.

[Prem-AK_]

By the way, there are some enhancements planned around Secure Meeting. You may want to reach out to your Juniper sales contact to get more details