Datasheet

6
UTM
1
(continued)
• Customer signatures creation
• Multiple times a week and emergency updates
• AppSecure
- AppTrack (application visibility and tracking)
- AppFirewall (policy enforcement by application name)
- Custom signatures
- AppQoS (network trac prioritization and bandwidth
management)
- Dynamic signature updates
- User-based application policy enforcement
• Antivirus
- Express AV (stream-based AV, not available on SRX100 and
SRX110)
- File-based antivirus
› Signature database
› Protocols scanned: POP3, HTTP, SMTP, IMAP, FTP
› Antispyware
› Anti-adware
› Antikeylogger
- Cloud-based antivirus
• Antispam
• Integrated enhanced Web filtering
- Category granularity (90+ categories)
- Real time threat score
• Redirect Web filtering
• Content Security Accelerator in SRX210 high memory, SRX220,
SRX240, SRX550, and SRX650
1
• ExpressAV option in SRX210 high memory, SRX220 high memory,
SRX240, SRX550, and SRX650
1
• Content filtering
- Based on MIME type, file extension, and protocol commands
VPN
• Auto VPN (Zero Touch Hub)
• Tunnels (GRE, IP-IP, IPsec)
• IPsec, Data Encryption Standard (DES) (56-bit), triple Data
Encryption Standard (3DES) (168-bit), Advanced Encryption
Standard (AES) (128-bit+) encryption
• Message Digest 5 (MD5),SHA-1 , SHA-128, SHA-256
authentication
• Junos Pulse Dynamic VPN client; browser-based remote access
feature requiring a license
• IPv4 and IPv6 VPN
• Multi-Proxy ID for site-to-site VPN
Multimedia Transport
• Compressed Real-Time Transport Protocol (CRTP)
High Availability
• VRRP
• JSRP
• Stateful failover and dual box clustering
• SRX550/SRX650:
- Redundant power (optional)
- GPIM hot swap
- Future internal failover and SRE hot swap (OIR) on SRX650
• Backup link via 3G/4G LTE wireless or other WAN
• Active/active—L3 mode
2
• Active/passive—L3 mode
2
• Configuration synchronization
2
• Session synchronization for firewall and VPN
2
• Session failover for routing change
2
• Device failure detection
2
• Link failure detection
2
• IP Monitoring with route and interface failover
IPv6
• OSPFv3
• RIPng
• IPv6 Multicast Listener Discovery (MLD)
• BGP
• ISIS
Wireless
• CX111 Cellular 3G/4G/LTE Broadband Data Bridge supported on all
branch SRX Series devices
• 3G USB modem support for SRX100, SRX110, and SRX210
SLA, Measurement, and Monitoring
• Real-time performance monitoring (RPM)
• Sessions, packets, and bandwidth usage
• Juniper J-Flow monitoring and accounting services
• IP Monitoring
Logging
• Syslog
• Traceroute
• Extensive control- and data-plane structured and unstructured
syslog
Administration
• Juniper Networks Network and Security Manager support (NSM)
• Juniper Networks Junos Space Security Director support
• Juniper Networks STRM Series Security Threat Response
Managers support
• Juniper Networks Advanced Insight Solutions support
• External administrator database (RADIUS, LDAP, SecureID)
• Auto-configuration
• Configuration rollback
• Rescue configuration with button
• Commit confirm for changes
• Auto-record for diagnostics
• Soware upgrades (USB upgrade option)
• Juniper Networks J-Web
• Command-line interface
• Smart image download
Certifications
• NEBS Compliance for SRX240, SRX650
3
• Department of Defense (DoD) Certification for SRX Series Services
Gateways, including testing and certification by the Department
of Defense Joint Interoperability Test Command (JITC) for
interoperability with DoD networks and addition of the SRX Series
Services Gateways to the Unified Capabilities Approved Product
List (UC APL)
Specifications (continued)
1
Unified Threat Management – antivirus, antispam, Web filtering, AppSecure and IPS require individual subscription license. UTM is not supported on the low memory version. Please see the ordering
section for options.
2
SRX100B installed with 1 GB DRAM, with 512 MB accessible. Optional upgrade to 1 GB DRAM is available with purchase of memory software license key.
3
Coming soon for SRX110 and SRX550.