Datasheet

6
UTM
1
(continued)
• AppSecure
- AppTrack (application visibility and tracking)
- AppFW (policy enforcement by application name)
• Antivirus
- Express AV (packet-based AV, not available on SRX100 and
SRX110)
- File-based antivirus
› Signature database
› Protocols scanned: POP3, HTTP, SMTP, IMAP, FTP
› Antispyware
› Anti-adware
› Antikeylogger
• Antispam
• Integrated enhanced Web filtering
- Category granularity (90+ categories)
- Real time threat score
• Redirect Web filtering
• Content Security Accelerator in SRX210 high memory, SRX220,
SRX240 high memory, and SRX650
1
• ExpressAV option in SRX210 high memory, SRX220 high memory,
SRX240 high memory, and SRX650
1
• Content filtering
- Based on MIME type, file extension, and protocol commands
VPN
• Tunnels (GRE, IP-IP, IPsec)
• IPsec, Data Encryption Standard (DES) (56-bit), triple Data
Encryption Standard (3DES) (168-bit), Advanced Encryption
Standard (AES) (128-bit+) encryption
• Message Digest 5 (MD5),SHA-1 , SHA-128, SHA-256
authentication
• Junos Pulse Dynamic VPN client; browser-based remote access
feature requiring a license
Multimedia Transport
• Compressed Real-Time Transport Protocol (CRTP)
• High Availability
• VRRP
• JSRP
• Stateful failover and dual box clustering
• SRX650:
- Redundant power (optional)
- GPIM hot swap on SRX650
- Future internal failover and SRE hot swap (OIR)
• Backup link via 3G/4G LTE wireless or other WAN
• Active/active—L3 mode
2
• Active/passive—L3 mode
2
• Configuration synchronization
2
• Session synchronization for firewall and VPN
2
• Session failover for routing change
2
• Device failure detection
2
• Link failure detection
2
IPv6
• OSPFv3
• RIPng
• IPv6 Multicast Listener Discovery (MLD)
• BGP
• ISIS
Wireless
• CX111 Cellular 3G/4G/LTE Broadband Data Bridge supported on all
branch SRX Series devices
• 3G USB modem support for SRX100, SRX110, and SRX210
• AX411 Wireless LAN (Wi-Fi 802.11 a/b/g/n) Access Point supported
on all branch SRX Series devices
• WLA Series Wireless LAN Access Points and WLC Series Wireless
LAN Controllers are supported on branch SRX Series devices
SLA, Measurement, and Monitoring
• Real-time performance monitoring (RPM)
• Sessions, packets, and bandwidth usage
• Juniper J-Flow monitoring and accounting services
Logging
• Syslog
• Traceroute
• Extensive control- and data-plane structured and unstructured
syslog
Administration
• Juniper Networks Network and Security Manager support (NSM)
• Juniper Networks Junos Space Security Design support
• Juniper Networks STRM Series Security Threat Response
Managers support
• Juniper Networks Advanced Insight Solutions support
• External administrator database (RADIUS, LDAP, SecureID)
• Auto-configuration
• Configuration rollback
• Rescue configuration with button
• Commit confirm for changes
• Auto-record for diagnostics
• Junos OS upgrade with button
• Soware upgrades
• Juniper Junos Web, USB, HTTP, FTP, SSH
• Command-line interface
Certifications
3
• Common Criteria (CC) EAL3
• FIPS-140 Level 2
• Supported hardware versions of the FIPS 140-2
• Gateways: SRX100B, SRX210B, SRX240B and SRX650-BASE-
SRE6-645AP with JNPR-FIPS-TAMPER-LBLS
- Roles, Services, and Authentication: Level 3
- EMI/EMC: Level 3
- Design Assurance: Level 3
- FIPS-approved algorithms: Triple-DES; AES; DSA; SHS;
- RNG; RSA; HMAC
• NEBS Compliance for SRX240, SRX650
• Department of Defense (DoD) Certification for SRX Series Services
Gateways, including testing and certification by the Department
of Defense Joint Interoperability Test Command (JITC) for
interoperability with DoD networks and addition of the SRX Series
Services Gateways to the Unified Capabilities Approved Product
List (UC APL)
Specifications (continued)
1
Unified Threat Management – antivirus, antispam, Web filtering, AppSecure and IPS require individual subscription license and is only supported on high memory versions of the SRX Series. UTM is
not supported on the low memory version. Please see the ordering section for options.
2
SRX100B installed with 1 GB DRAM, with 512 MB accessible. Optional upgrade to 1 GB DRAM is available with purchase of memory software license key.
3
Coming soon for SRX110.