Juniper SRX4100-SYS-JE-DC Firewall

Network Devices Inc. Verified independent store

→

[shortdesc] SRX4100 Services Gateway Junos Software Enhanced Application security 8 x 10GE 2 x DC power supply 4 x Fan tray Routing NAT MPLS IPSec [/shortdesc] [properties] Propert ies Juniper SRX4100-SYS-JE-DC Description SRX4100 Services Gateway includes hardware (8x10GE, two DC PSU, four fan trays, cables and RMK) and Junos Software Enhanced (Firewall, NAT, IPSec, Routing, MPLS and Application Security) Product Family SRX4100 Series Product Type Security Firewall Connectivity Specification Total onboard ports 8x1GbE/10GbE Onboard small form-factor pluggable plus (SFP+) transceiver ports 8x1GbE/10GbE Out-of-Band (OOB) management ports 1x1GbE Dedicated high availability (HA) ports 2x1GbE/10GbE (SFP/SFP+) Console (RJ-45) 1 USB 2.0 ports (type A) 2 Includes Junos Software Enhanced (Firewall, NAT, IPSec, Routing, MPLS and Application Security) Form factor 1 U Dimensions (WxHxD) 17.48 x 1.7 x 25 in(44.39 x 4.31 x 63.5 cm) Weight (device and PSU) Chassis with two DC power supplies: 28.9 lb (13.06 kg)Chassis with package for shipping: 47.5 lb (21.54 kg) Power Power supply 2x 650 W redundant DC-DC PSU Redundant PSU 1+1 Average power consumption 200 W Average heat dissipation 685 BTU / hour Maximum current consumption 9A (for -48 V DC power) Maximum inrush current 50 A by 1 AC cycle Airflow/cooling Front to back Acoustic noise level 70 dBA [/properties] [specifications] Specifications SRX4100-SYS-JE-DC System memory (RAM) 64 GB Secondary storage (SSD) 240 GB with 1+1 RAID Firewall throughput 40 Gbps Firewall throughput—IMIX 22 Gbps Firewall throughput with application security 19.9 Gbps IPsec VPN throughput-IMIX 14.8 Gbps Intrusion prevention 13.9 Gbps NGFW throughput 9 Gbps Secure Web Access throughput 6.7 Gbps Connections per second 250,000 Maximum session 5 million Routing/firewall (IMIX packet size) throughput Gbps 22.5 Routing/firewall (1,518 B packet size) throughput Gbps 40 IPsec VPN (IMIX packet size) Gbps 14.8 Application visibility and control in Gbps 19.9 Recommended IPS in Gbps 13.9 Next-generation firewall in Gbps 9 Secure Web Access firewall in Gbps 6.7 Connections per second (CPS) 250,000 Maximum security policies 60,000 Maximum concurrent sessions (IPv4 or IPv6) 5 million Route table size (RIB/FIB) (IPv4) 2 million/1.2 million IPsec tunnels 7500 Number of remote access/SSL VPN (concurrent) users 7500 Multitenancy (LSYS/TSYS) 32/200 Software Specifications Routing Protocols IPv4, IPv6, static routes, RIP v1/v2OSPF/OSPF v3BGP with route reflectorIS-ISMulticast: Internet Group Management Protocol (IGMP) v1/v2; Protocol Independent Multicast (PIM) sparse mode (SM)/source-specific multicast (SSM); Session Description Protocol (SDP); Distance Vector Multicast Routing Protocol (DVMRP); Multicast Source Discovery Protocol (MSDP); reverse path forwarding (RPF)Encapsulation: VLAN, Point-to-Point Protocol over Ethernet (PPPoE)Virtual routersPolicy-based routing, source-based routingEqual-cost multipath (ECMP) QoS Features Support for 802.1p, DiffServ code point (DSCP), EXPClassification based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multifield filtersMarking, policing, and shapingClassification and schedulingWeighted random early detection (WRED)Guaranteed and maximum bandwidthIngress traffic policingVirtual channels Firewall Services Stateful and stateless firewallZone-based firewallScreens and distributed denial of service (DDoS) protectionProtection from protocol and traffic anomaliesUnified Access Control (UAC) Network Address Translation (NAT) Source NAT with Port Address Translation (PAT)Bidirectional 1:1 static NATDestination NAT with PATPersistent NATIPv6 address translation VPN Features Tunnels: Site-to-site, hub and spoke, dynamic endpoint, AutoVPN, ADVPN, Group VPN (IPv4/ IPv6/Dual Stack)Juniper Secure Connect: Remote access/SSL VPNConfiguration payload: YesIKE Encryption algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite BIKE authentication algorithms: MD5, SHA-1, SHA-128, SHA-256, SHA-384Authentication: Pre-shared key and public key infrastructure (PKI) (X.509)IPsec (Internet Protocol Security): Authentication Header (AH) / Encapsulating Security Payload (ESP) protocolIPsec Authentication Algorithms: hmac-md5, hmac-sha-196, hmac-sha-256IPsec Encryption Algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite BPerfect forward secrecy, anti-replyInternet Key Exchange: IKEv1, IKEv2Monitoring: Standard-based dead peer detection (DPD) support, VPN monitoringVPNs GRE, IP-in-IP, and MPLS Network Services Dynamic Host Configuration Protocol (DHCP) client/server/relayDomain Name System (DNS) proxy, dynamic DNS (DDNS)Juniper real-time performance monitoring (RPM) and IP monitoringJuniper flow monitoring (J-Flow) High Availability Features Virtual Router Redundancy Protocol (VRRP) – IPv4 and IPv6Stateful high availability:-Dual box clustering-Active/passive-Active/active-Configuration synchronization-Firewall session synchronization-Device/link detection-In-Service Software Upgrade (ISSU)IP monitoring with route and interface failover Management, Automation, Logging, and Reporting SSH, Telnet, SNMPSmart image downloadJuniper CLI and Web UIJuniper Networks Junos Space Security DirectorPythonJunos events, commit and OP scriptsApplication and bandwidth usage reportingDebug and troubleshooting tools Advanced Routing Services Packet ModeMPLS (RSVP, LDP)Circuit cross-connect (CCC), translational cross-connect (TCC)L2/L2 MPLS VPN, pseudo-wiresVirtual private LAN service (VPLS), next-generation multicast VPN (NG-MVPN)MPLS traffic engineering and MPLS fast re-route Application Security Services Application visibility and controlApplication-based firewallApplication QoSAdvanced/application policy-based routing (APBR)Application Quality of Experience (AppQoE)Application-based multipath routingUser-based firewall Threat Defense and Intelligence Services Intrusion prevention systemAntivirusAntispamCategory/reputation-based URL filteringSSL proxy/inspectionProtection from botnets (command and control)Adaptive enforcement based on GeoIPJuniper Advanced Threat Prevention, a cloud-based SaaS offering, to detect and block zero-day attacksAdaptive Threat ProfilingEncrypted Traffic InsightsSecIntel to provide threat intelligenceJuniper ATP Appliance, a distributed, on-premises advanced threat prevention solution to detect and block zero-day attacks Operating temperature 32° to 104° F (0° to 40° C) Operating humidity 5% to 90% noncondensing Meantime between failures (MTBF) 221,729 hours (about 25.3 years) FCC classification Class A RoHS compliance RoHS 2 [/specifications] [accesories] Transceivers CTP-SFP-1GE-LX Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optic Module, CTP1000 CTP-SFP-1GE-SX Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optic Module, CTP1000 CTP-SFP-1GE-T Small Form Factor Pluggable 1000Base-T Gigabit Ethernet Module (uses Cat 5 cable) [/accesories] Juniper SRX4100-SYS-JE-DC Firewall Juniper SRX4100-SYS-JE-DC is a high-performance 1U services gateway built for enterprise and service provider deployments that require advanced security, routing, and application-aware protection in a compact platform. This model includes 8 x 1GbE/10GbE SFP+ interfaces, dual 650 W redundant DC power supplies, four fan trays, and Junos Software Enhanced with firewall, NAT, IPsec, routing, MPLS, and application security features. It is designed to deliver strong throughput, large-scale session capacity, and resilient hardware for demanding branch, edge, and data center environments. High performance: supports up to 40 Gbps firewall throughput, 19.9 Gbps application visibility and control, 14.8 Gbps IPsec VPN throughput, and 250,000 connections per second Resilient design: includes dual redundant DC power supplies, dedicated HA interfaces, separate OOB management, and four fan trays for reliable operation Advanced security: Junos Software Enhanced adds application security, IPS, antivirus, antispam, URL filtering, SSL inspection, and threat intelligence capabilities Show more