Juniper SRX4100-SYS-JB-AC Firewall

Network Devices Inc. Verified independent store

→

[shortdesc] SRX4100 Services Gateway Junos Software Base 8 x 10GE 2 x AC power supply 4 x Fan tray Routing NAT MPLS IPSec [/shortdesc] [properties] Properties Juniper SRX4100-SYS-J B-AC Description SRX4100 Services Gateway includes hardware (8x10GE, two AC PSU, four FAN Trays, cables and RMK) and Junos Software Base (Firewall, NAT, IPSec, Routing, MPLS) Product Family SRX4100 Series Product Type Security Firewall Connectivity Specification Total onboard ports 8x1GbE/10GbE Onboard small form-factor pluggable plus (SFP+) transceiver ports 8x1GbE/10GbE Out-of-Band (OOB) management ports 1x1GbE Dedicated high availability (HA) ports 2x1GbE/10GbE (SFP/SFP+) Console (RJ-45) 1 USB 2.0 ports (type A) 2 Includes Junos Software Base (Firewall, NAT, IPSec, Routing, MPLS) Form factor 1 U Dimensions (WxHxD) 17.48 x 1.7 x 25 in(44.39 x 4.31 x 63.5 cm) Weight (device and PSU) Chassis with two AC power supplies: 29 lb (13.15 kg)Chassis with package for shipping: 47.5 lb (21.54 kg) Power Power supply 2x 650 W redundant AC-DC PSU Redundant PSU 1+1 Average power consumption 200 W Average heat dissipation 685 BTU / hour Maximum current consumption 4A (for 110 V AC power)2A (for 220 V AC power) Maximum inrush current 50 A by 1 AC cycle Airflow/cooling Front to back Acoustic noise level 70 dBA [/properties][specifications] Specifications SRX4100-SYS-JB-AC System memory (RAM) 64 GB Secondary storage (SSD) 240 GB with 1+1 RAID Firewall throughput 40 Gbps Firewall throughput—IMIX 22 Gbps Firewall throughput with application security 19.9 Gbps IPsec VPN throughput-IMIX 14.8 Gbps Intrusion prevention 13.9 Gbps NGFW throughput 9 Gbps Secure Web Access throughput 6.7 Gbps Connections per second 250,000 Maximum session 5 million Routing/firewall (IMIX packet size) throughput Gbps 22.5 Routing/firewall (1,518 B packet size) throughput Gbps 40 IPsec VPN (IMIX packet size) Gbps 14.8 Application visibility and control in Gbps 19.9 Recommended IPS in Gbps 13.9 Next-generation firewall in Gbps 9 Secure Web Access firewall in Gbps 6.7 Connections per second (CPS) 250,000 Maximum security policies 60,000 Maximum concurrent sessions (IPv4 or IPv6) 5 million Route table size (RIB/FIB) (IPv4) 2 million/1.2 million IPsec tunnels 7500 Number of remote access/SSL VPN (concurrent) users 7500 Multitenancy (LSYS/TSYS) 32/200 Software Specifications Routing Protocols IPv4, IPv6, static routes, RIP v1/v2OSPF/OSPF v3BGP with route reflectorIS-ISMulticast: Internet Group Management Protocol (IGMP) v1/v2; Protocol Independent Multicast (PIM) sparse mode (SM)/source-specific multicast (SSM); Session Description Protocol (SDP); Distance Vector Multicast Routing Protocol (DVMRP); Multicast Source Discovery Protocol (MSDP); reverse path forwarding (RPF)Encapsulation: VLAN, Point-to-Point Protocol over Ethernet (PPPoE)Virtual routersPolicy-based routing, source-based routingEqual-cost multipath (ECMP) QoS Features Support for 802.1p, DiffServ code point (DSCP), EXPClassification based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multifield filtersMarking, policing, and shapingClassification and schedulingWeighted random early detection (WRED)Guaranteed and maximum bandwidthIngress traffic policingVirtual channels Firewall Services Stateful and stateless firewallZone-based firewallScreens and distributed denial of service (DDoS) protectionProtection from protocol and traffic anomaliesUnified Access Control (UAC) Network Address Translation (NAT) Source NAT with Port Address Translation (PAT)Bidirectional 1:1 static NATDestination NAT with PATPersistent NATIPv6 address translation VPN Features Tunnels: Site-to-site, hub and spoke, dynamic endpoint, AutoVPN, ADVPN, Group VPN (IPv4/ IPv6/Dual Stack)Juniper Secure Connect: Remote access/SSL VPNConfiguration payload: YesIKE Encryption algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite BIKE authentication algorithms: MD5, SHA-1, SHA-128, SHA-256, SHA-384Authentication: Pre-shared key and public key infrastructure (PKI) (X.509)IPsec (Internet Protocol Security): Authentication Header (AH) / Encapsulating Security Payload (ESP) protocolIPsec Authentication Algorithms: hmac-md5, hmac-sha-196, hmac-sha-256IPsec Encryption Algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite BPerfect forward secrecy, anti-replyInternet Key Exchange: IKEv1, IKEv2Monitoring: Standard-based dead peer detection (DPD) support, VPN monitoringVPNs GRE, IP-in-IP, and MPLS Network Services Dynamic Host Configuration Protocol (DHCP) client/server/relayDomain Name System (DNS) proxy, dynamic DNS (DDNS)Juniper real-time performance monitoring (RPM) and IP monitoringJuniper flow monitoring (J-Flow) High Availability Features Virtual Router Redundancy Protocol (VRRP) – IPv4 and IPv6Stateful high availability:-Dual box clustering-Active/passive-Active/active-Configuration synchronization-Firewall session synchronization-Device/link detection-In-Service Software Upgrade (ISSU)IP monitoring with route and interface failover Management, Automation, Logging, and Reporting SSH, Telnet, SNMPSmart image downloadJuniper CLI and Web UIJuniper Networks Junos Space Security DirectorPythonJunos events, commit and OP scriptsApplication and bandwidth usage reportingDebug and troubleshooting tools Advanced Routing Services Packet ModeMPLS (RSVP, LDP)Circuit cross-connect (CCC), translational cross-connect (TCC)L2/L2 MPLS VPN, pseudo-wiresVirtual private LAN service (VPLS), next-generation multicast VPN (NG-MVPN)MPLS traffic engineering and MPLS fast re-route Application Security Services Application visibility and controlApplication-based firewallApplication QoSAdvanced/application policy-based routing (APBR)Application Quality of Experience (AppQoE)Application-based multipath routingUser-based firewall Threat Defense and Intelligence Services Intrusion prevention systemAntivirusAntispamCategory/reputation-based URL filteringSSL proxy/inspectionProtection from botnets (command and control)Adaptive enforcement based on GeoIPJuniper Advanced Threat Prevention, a cloud-based SaaS offering, to detect and block zero-day attacksAdaptive Threat ProfilingEncrypted Traffic InsightsSecIntel to provide threat intelligenceJuniper ATP Appliance, a distributed, on-premises advanced threat prevention solution to detect and block zero-day attacks Operating temperature 32° to 104° F (0° to 40° C) Operating humidity 5% to 90% noncondensing Meantime between failures (MTBF) 221,729 hours (about 25.3 years) FCC classification Class A RoHS compliance RoHS 2 [/specifications][accesories] Transceivers CTP-SFP-1GE-LX Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optic Module, CTP1000 CTP-SFP-1GE-SX Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optic Module, CTP1000 CTP-SFP-1GE-T Small Form Factor Pluggable 1000Base-T Gigabit Ethernet Module (uses Cat 5 cable) EX-SFP-1GE-LH Small Form Factor Pluggable 1000Base-LH Gigabit Ethernet Optics EX-SFP-1GE-LX Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics EX-SFP-1GE-SX Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optics EX-SFP-1GE-SX-ET SFP, 1000Base-SX Gigabit Ethernet, Extended Temperature Range Optics EX-SFP-1GE-T Small Form Factor Pluggable 10/100/1000 Copper Transceiver Module QFX-SFP-1GE-LX SFP 1000Base-LX Gigabit Ethernet Optics, 1310nm for 10km transmission on SMF QFX-SFP-1GE-SX SFP 1000Base-SX Gigabit Ethernet Optics, 850nm for upto 550m transmission on MMF QFX-SFP-1GE-T SFP 1000Base-T Copper Transceiver Module for up to 100m transmission SFP-1G-LH-C SFP, 1G, SMF 70km, Industrial Temperature (-40 through 85 DegC), Duplex LC connector SFP-1G-LX-C SFP, 1G, SMF 10km and MMF 550m, Extended Temperature (-5 through 70 DegC), Duplex LC connector SFP-1G-SX-C SFP, 1G, FDDI 220m and OM1 275m/OM2 MMF 550m, Extended Temperature (-10 through 85 DegC), Duplex LC connector SFP-1G-T-C Small Form Factor Pluggable 1000Base-T Gigabit Ethernet Module (uses Cat 5 cable) SRX-SFP-1GE-LH Small Form Factor Pluggable 1000Base-LH Gigabit Ethernet Optic Module SRX-SFP-1GE-LX Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optic Module SRX-SFP-1GE-LX-ET Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optic Module - Extended temperature SRX-SFP-1GE-SX Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optic Module SRX-SFP-1GE-SX-ET Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optic Module - Extended temperature SRX-SFP-1GE-T Small Form Factor Pluggable 1000Base-T Gigabit Ethernet Module EX-SFP-10GE-DAC-1M SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 1M EX-SFP-10GE-DAC-3M SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 3M EX-SFP-10GE-ER SFP+ 10GBase-ER 10 Gigabit Ethernet Optics Module, 1550nm for 40Km Transmission EX-SFP-10GE-LR Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) LR Optics EX-SFP-10GE-SR Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) SR Optics QFX-SFP-10GE-ER SFP+ 10GBase-ER 10 Gigabit Ethernet Optics, 1550nm for 40km transmission on SMF QFX-SFP-10GE-LR SFP+ 10GBase-LR 10 Gigabit Ethernet Optics, 1310nm for 10km transmission on SMF QFX-SFP-10GE-SR SFP+ 10GBase-SR 10 Gigabit Ethernet Optics, 850nm for up to 300m transmission on MMF QFX-SFP-DAC-1M SFP+ 10 Gigabit Ethernet Direct Attach Copper (twinax copper cable) 1m QFX-SFP-DAC-3M SFP+ 10 Gigabit Ethernet Direct Attach Copper (twinax copper cable) 3m SFPP-10G-LRT2-C SFP+, 10G-LR Transceiver type 2 SFPP-10G-SR-C SFP+, 10G-SR Transceiver SRX-SFP-10GE-DAC-1M SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 1M SRX-SFP-10GE-DAC-3M SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 3M SRX-SFP-10GE-ER SFP+ 10GBase-ER 10 Gigabit Ethernet Optics Module, 1550nm for 40Km transmission SRX-SFP-10GE-LR Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) LR Optics SRX-SFP-10GE-SR Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) SR Optics [/accesories] The SRX4000 line of services gateways brings you integrated security and networking features for protecting next-generation services and applications. These gateways are designed for small to medium-sized enterprise campuses and data centers. They can also serve as secure routers and VPN concentrators, as well as offer SD-WAN capabilities. Show more