Datasheet

8
SRX100 SRX110 SRX210* SRX220 SRX240 SRX650
IPsec VPN
Concurrent VPN tunnels 128 128 256 512 1,000 3,000
Tunnel interfaces 10 10 64 64 128 512
DES (56-bit), 3DES (168-bit) and
AES (256-bit)
Yes Yes Yes Yes Yes Yes
MD-5 and SHA-1 authentication Yes Yes Yes Yes Yes Yes
Manual key, Internet Key
Exchange (IKE), public key
infrastructure (PKI) (X.509)
Yes Yes Yes Yes Yes Yes
Perfect forward secrecy (DH
Groups)
1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5
Prevent replay attack Yes Yes Yes Yes Yes Yes
Dynamic remote access VPN Yes Yes Yes Yes Yes Yes
IPsec NAT traversal Yes Yes Yes Yes Yes Yes
Redundant VPN gateways Yes Yes Yes Yes Yes Yes
User Authentication and Access Control
Third-party user authentication RADIUS, RSA
SecureID, LDAP
RADIUS, RSA
SecureID, LDAP
RADIUS, RSA
SecureID, LDAP
RADIUS, RSA
SecureID, LDAP
RADIUS, RSA
SecureID, LDAP
RADIUS, RSA
SecureID, LDAP
RADIUS accounting Ye s Ye s Ye s Ye s Ye s Ye s
XAUTH VPN, Web-based, 802.X
authentication
Yes Yes Yes Yes Yes Yes
PKI certificate requests (PKCS 7
and PKCS 10)
Yes Yes Yes Yes Yes Yes
Certificate Authorities supported VeriSign, Entrust,
Microso, RSA
Keon, iPLanet,
(Netscape),
Baltimore,
DoD PKI
VeriSign, Entrust,
Microso, RSA
Keon, iPLanet,
(Netscape),
Baltimore,
DoD PKI
VeriSign, Entrust,
Microso, RSA
Keon, iPLanet,
(Netscape),
Baltimore,
DoD PKI
VeriSign, Entrust,
Microso, RSA
Keon, iPLanet,
(Netscape),
Baltimore,
DoD PKI
VeriSign, Entrust,
Microso, RSA
Keon, iPLanet,
(Netscape),
Baltimore,
DoD PKI
VeriSign, Entrust,
Microso, RSA
Keon, iPLanet,
(Netscape),
Baltimore,
DoD PKI
Virtualization
Maximum number of security
zones
10 10 12 24 32 128
Maximum number of virtual
routers
3 3 10 15 20 60
Maximum number of VLANs 16 16 64 128 512 4,096
Encapsulations
PPP/MLPPP N/A N/A Yes Yes Yes Yes
PPPoE N/A Yes Yes Yes Yes Yes
PPPoA N/A Yes Yes Yes Yes Yes
MLPPP maximum physical
interfaces
N/A N/A 1 2 4 12
Frame Relay N/A N/A Ye s Yes Yes Ye s
MLFR (FRF .15, FRF .16) N/A N/A Yes Yes Yes Yes
MLFR maximum physical
interfaces
N/A N/A 1 2 4 12
HDLC N/A N/A Yes Yes Yes Yes
Wireless
CX111 3G /4G LTE Bridge support Yes Yes Yes Yes Yes Yes
Internal 3G ExpressCard slot
support
No No Yes No No No
USB 3G support Yes Yes Yes No No No
Max WLAN access points
supported with AX411
2 2 4 4 4 4
WLA Series access points and
WLC Series controllers supported
> 4 > 4 > 4 > 4 > 4 > 4
Product Comparison (continued)
*There are several models available for the SRX210 including the enhanced version. Please contact your Juniper or partner account representative for more information.