The SA2500 has a published MTBF of 75,000 hours whilst the MAG2600 claims a frankly mind-boggling MTBF of 212,000 hours. Given that the MAG is cheaper, has a much higher apparent reliability, AND has a tiny footprint, this is the one I’ll be recommending for this purpose. As the license server is doing no actual processing, you only need either a SA2500 or a MAG2600. The license server won’t authenticate anyone other than “admin” users so the purchase of the tin is essentially written off, but this is a drop in the ocean. If you dedicate an appliance as a license server, with a “ACCESS-LICENSE-SVR” key, with a single large user SKU you can get complete flexibility over the deployment of your licenses and shuffle things around as you see fit. The “sweet spot” for the leased licensing model is if you have a very distributed deployment, and you are planning to integrate with Global Server Load Balancing (GSLB) and/or have four or more appliances. The vast majority of my customers will have a pair of SA/MAG boxes for resilience purposes, and possibly another standalone with a SAxx00-LAB license if they are flush/paranoid about software testing. I’m not going to duplicate Kev Peterson‘s excellent series of posts of the subject as it covers pretty much every aspect you’d want to know, but I do have a couple of notes. Licensing Stuffįor this particular deployment, we used the new “leased” license method. Given that there is no “special” network interface requirements on either platform, that’s a bit puzzling. The other thing that this highlighted was despite the network cards being visually different, they are reported to be sourced from the same manufacturer, Armorlink. Nmap called out the Junos (wrong version, but my version of Nmap isn’t particularly up to date). I’m surprised to see the listeners for the old “email client” client service running, as I *thought* that it was being deprecated. The SM card is pretty much indistinguishable from any other generation Secure Access device. No exact OS matches for host (test conditions non-ideal). MAC Address: 00:18:7D:XX:XX:XX (Armorlink shanghai Co.)ĭevice type: general purpose|WAP|broadband router|storage-misc|proxy server|webcam|PBX 443/tcp open http Juniper SA2000 or SA4000 VPN gateway http config
0 kommentar(er)
