Juniper SRX550
by Juniper
Original price
440,160.00 ฿
-
Original price
440,160.00 ฿
Original price
440,160.00 ฿
440,160.00 ฿
-
440,160.00 ฿
Current price
440,160.00 ฿
Juniper SRX550
Technical Specifications:
Model: | SRX100 | SRX110 | SRX210 | SRX220 | SRX240 | SRX550 | SRX650 |
---|---|---|---|---|---|---|---|
Maximum Layer 3 Performance and Capacity | |||||||
Junos OS version tested | Junos OS 11.2R3 | Junos OS 11.2R3 | Junos OS 11.2R3 | Junos OS 11.2R3 | Junos OS 11.2R3 | Junos OS 12.1 | Junos OS 11.2R3 |
Firewall performance (large packets) | 700 Mbps | 700 Mbps | 850 Mbps | 950 Mbps | 1.8 Gbps | 5.5 Gbps | 7 Gbps |
Firewall performance (IMIX) | 200 Mbps | 200 Mbps | 250 Mbps | 300 Mbps | 600 Mbps | 1.7 Gbps | 2.5 Gbps |
Firewall + routing PPS (64 Byte) | 70 Kpps | 70 Kpps | 95 Kpps | 125 Kpps | 200 Kpps | 700 Kpps | 850 Kpps |
Firewall performance5 (HTTP) | 100 Mbps | 100 Mbps | 290 Mbps | 350 Mbps | 830 Mbps | 1.5 Gbps | 2 Gbps |
IPsec VPN throughput (large packets) | 65 Mbps | 65 Mbps | 85 Mbps | 100 Mbps | 300 Mbps | 1.0 Gbps | 1.5 Gbps |
IPsec VPN Tunnels | 128 | 128 | 256 | 512 | 1,000 | 2,000 | 3,000 |
AppSecure firewall throughput5 | 90 Mbps | 90 Mbps | 250 Mbps | 300 Mbps | 750 Mbps | 1.5 Gbps | 1 Gbps |
IPS (intrusion prevention system) | 60 Mbps | 60 Mbps | 85 Mbps | 100 Mbps | 230 Mbps | 800 Mbps | 1 Gbps |
Antivirus | 25 Mbps (ExpressAV) |
25 Mbps (ExpressAV) |
30 Mbps (ExpressAV) |
35 Mbps (ExpressAV) |
85 Mbps (ExpressAV) |
300 Mbps (Sophos AV) |
350 Mbps (ExpressAV) |
Connections per second | 1,800 | 1,800 | 2,200 | 2,800 | 8,500 | 27,000 | 35,000 |
Maximum concurrent sessions DRAM options |
16 K / 32 K1 512 MB3 / 1 GB DRAM |
32 K1 1 GB DRAM |
16 K / 32 K1 512 MB3 / 1 GB DRAM |
96 K 1 GB DRAM |
64 K / 128 K1 512 MB3 / 1 GB DRAM |
375 K2 2 GB DRAM |
512 K2 2 GB DRAM |
Maximum security policies | 384 | 384 | 512 | 2,048 | 4,096 | 7,256 | 8,192 |
Maximum users supported | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted |
Network Connectivity | |||||||
Fixed I/O | 8 x 10/100 | VDSL/ADSL2+, 8 x 10/100 | 2 x 10/100/ 1000 BASE-T + 6 x 10/100 | 8 x 10/100/ 1000 BASE-T | 16 x 10/100/ 1000 BASE-T | 6 x 10/100/ 1000 BASE-T + 4 SFP | 4 x 10/100/ 1000 BASE-T |
I/O slots | N/A | N/A | 1 x SRX Series Mini-PIM | 2 x SRX Series Mini-PIM | 4 x SRX Series Mini-PIM | 2 x SRX Series Mini-PIM, 8 x GPIM or multiple GPIM and XPIM combinations | 8 x GPIM or multiple GPIM and XPIM combinations |
Services and Routing Engine slots | No | No | No | No | No | No | 29 |
ExpressCard slot (3G WAN) | No | No | Yes | No | No | No | No |
WAN/LAN interface options | N/A | N/A | See ordering information | See ordering information | See ordering information | See ordering information | See ordering information |
Optional maximum number of PoE ports | N/A | N/A | Up to 4 ports of 802.3af with maximum 50 W | Up to 8 ports of 802.3af/at with maximum 120 W | Up to 16 ports of 802.3af/at with maximum 150 W | Up to 40 ports of 802.3af/at with maximum 247 W | Up to 48 ports of 802.3af/at with maximum 247 W |
USB | 1 | 2 | 2 | 2 | 2 | 2 | 2 per SRE |
Flash/Memory | SRX100 | SRX110 | SRX210 | SRX220 | SRX240 | SRX550 | SRX650 |
Memory min and max(DRAM) | 512 MB (Accessible), 1 GB2 | 1 GB | 512 MB, 1 GB | 1 GB | 512 MB, 1 GB | 2 GB | 2 GB |
Memory slots | Fixed memory | Fixed memory | Fixed memory | Fixed memory | Fixed memory | 2 DIMM | 4 DIMM |
Flash memory | 1 GB | 1 GB, externally accessible | 1 GB | 1 GB | 1 GB | 2 GB CF internal | 2 GB CF internal on SRE, External slot empty, up to 2 GB CF supported |
USB port for external storage | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
Dimensions | SRX100 | SRX110 | SRX210 | SRX220 | SRX240 | SRX550 | SRX650 |
Dimensions (W x H x D) | 8.5 x 1.4 x 5.8 in (21.6 x 3.6 x 14.7 cm) |
11.02 x 1.72 x 8.385 in (28 x 4.37 x 21.3 cm) |
11.02 x 1.73 x 7.12 in (28.0 x 4.4 x 18.1 cm) |
14.31 x 1.73 x 7.11 in (36.3 x 4.4 x 18.1 cm) |
17.5 x 1.75 x 15.1 in (44.4 x 4.4 x 38.5 cm) |
17.5 x 3.5 x 18.2 in (44.4 x 8.8 x 46.2 cm) |
17.5 x 3.5 x 18.2 in (44.4 x 8.8 x 46.2 cm) |
Weight (device and power supply) | 2.5 lb (1.1 kg) | 6.7 lb (3.06kg) | 3.3 lb (1.5 kg) non-PoE / 4.4 lb (2 kg) PoE No interface modules | 3.43 lb (1.56 kg) non-PoE No interface modules | 11.2 lb (5.1 kg) non-PoE / 12.3 lb (5.6 kg) PoE No interface modules | 21.96 lb (9.96kg) No interface modules 1 power supply | 24.9 lb (11.3 kg) No interface modules 1 power supply |
Rack mountable | Yes, 1 RU | Yes, 1 RU | Yes, 1 RU | Yes, 1 RU | Yes, 1 RU | Yes, 2 RU | |
Power | SRX100 | SRX110 | SRX210 | SRX220 | SRX240 | SRX550 | SRX650 |
Power supply (AC) | 100-240 VAC, 30 W | 100-240 VAC, 60 W | 100–240 VAC, 60 W Non-PoE/ 150 W PoE | 100–240 VAC, 60 W Non-PoE/ 200 W PoE | 100–240 VAC, 150 W Non- PoE/ 350 W PoE | 100–240 VAC, single 645 W or dual 645 W | 100–240 VAC, single 645 W or dual 645 W |
Maximum PoE power | N/A | N/A | 50 W | 120 W | 150 W | 247 W redundant, or 494 W nonredundant | 247 W redundant, or 494 W nonredundant |
Average power consumption | 10 W | 24 W | 27 W (LM), 28 W (HM), 84 W (PoE) | 28 W (LM) | 61 W (LM), 65 W (HM), 179 W (PoE) | 122 W | 122 W |
Input frequency | 50-60 Hz | 50-60 Hz | 50-60 Hz | 50-60 Hz | 50-60 Hz | 50-60 Hz | 50-60 Hz |
Maximum current consumption | 0.25 A @ 100 VAC | 1.75 A @ 100 VAC | 0.41 A @ 100 VAC (LM), 0.44 A @ 100 VAC (HM), 1.13 A @ 100 VAC (PoE) | 0.44 A @ 100 VAC (HM) | 1.0 A @ 100 VAC (LM), 1.1 A @ 100 VAC (HM), 3.0 A @ 100 VAC (PoE) | 5.3 A @ 100 VAC with single PSU with PoE, 8.3 A @ 100 VAC with dual PSU with PoE | 5.3 A @ 100 VAC with single PSU with PoE, 8.3 A @ 100 VAC with dual PSU with PoE |
Maximum inrush current | 60 A | 70 A | 80 A for LM/HM, 60 A for PoE | 80 A for HM | 40 A for LM/HM, 45 A for PoE | 45 A for ½ cycle | 45 A for ½ cycle |
Average heat dissipation | 35 BTU/hr | 81 BTU/hr | 92 BTU/hr (SRX210B), 95 BTU/hr (SRX210H), 116 BTU/hr (SRX210H-PoE) | 126 BTU/hour (SRX220H) | 208 BTU/Hr (SRX240B), 222 BTU/Hr (SRX240H), 249 BTU/Hr (SRX240H-PoE) | 319 BTU/hr | 319 BTU/Hr |
Maximum heat dissipation | 80 BTU/hr | 99 BTU/hr | 120 BTU/hr (SRX210B), 126 BTU/hr (SRX210H), 157 BTU/hr (SRX210H-PoE) | 126 BTU/hour (SRX220H) | 344 BTU/Hr (SRX240B), 369 BTU/Hr (SRX240H), 413 BTU/Hr (SRX240H-PoE) | 699 BTU/hr | 699 BTU/Hr |
Redundant power supply (hot swappable) | No | No | No | No | No | Yes (up to maximum capacity of single PSU) | Yes (up to maximum capacity of single PSU) |
Acoustic noise level (Per ISO 7779 Standard) |
0 dB (fanless) | 0 dB (fanless) | 29.1 dB | 51.1 dB | 54.1 dB | 51.8 dB | 60.9 dB |
Environment | SRX100 | SRX110 | SRX210 | SRX220 | SRX240 | SRX550 | SRX650 |
Operational temperature | 32° to 104° F (0° to 40° C) |
32° to 104° F (0° to 40° C) |
32° to 104° F (0° to 40° C) |
32° to 104° F (0° to 40° C) |
32° to 104° F (0° to 40° C) |
32° to 104° F (0° to 40° C) |
32° to 104° F (0° to 40° C) |
Nonoperational temperature | 4° to 158° F, (-20° to 70° C) |
4° to 158° F, (-20° to 70° C) |
4° to 158° F, (-20° to 70° C) |
4° to 158° F, (-20° to 70° C) |
4° to 158° F, (-20° to 70° C) |
4° to 158° F, (-20° to 70° C) |
4° to 158° F, (-20° to 70° C) |
Humidity | 5% to 95% noncondensing | 5% to 95% noncondensing | 5% to 95% noncondensing | 5% to 95% noncondensing | 5% to 95% noncondensing | 5% to 95% noncondensing | 5% to 95% noncondensing |
Mean time between failures (Telcordia model) |
24.8 years (SRX100B) 24.8 years (SRX100H) |
24.8 years | 15.2 years (SRX210B) 14.3 years (SRX210H) 10.4 years (SRX210H-PoE) |
14.3 years (SRX220H) 10.4 years (SRX220H-PoE) |
15.2 years (SRX240B) 14.3 years (SRX240H) 10.4 years (SRX240H-PoE) |
9.6 years with redundant power | 9.6 years with redundant power |
Additional Specification Features:
Protocols
- IPv4, IPv6, ISO Connectionless Network Service (CLNS)
Routing and Multicast
- Static routes
- RIPv2 +v1
- OSPF/OSPFv3
- BGP
- BGP Router Reflector2
- IS-IS
- Multicast (Internet Group Management Protocol (IGMPv3), PIM, Session Description Protocol (SDP), Distance Vector Multicast Routing Protocol (DVMRP), source-specific), MSDP4
- MPLS (RSVP, LDP)
IP Address Management
- Static
- Dynamic Host Configuration Protocol (DHCP) (client and server)
- DHCP relay
Address Translation
- Source NAT with Port Address Translation (PAT)
- Static NAT
- Destination NAT with PAT
- Persistent NAT, NAT64
Encapsulations
- Ethernet (MAC and tagged)
- Point-to-Point Protocol (PPP) (synchronous)
- Multilink Point-to-Point Protocol (MLPPP)
- Frame Relay
- Multilink Frame Relay (MLFR) (FRF.15, FRF.16)
- High-Level Data Link Control (HDLC)
- Serial (RS-232, RS-449, X.21, V.35, EIA-530)
- 802.1q VLAN support
- Point-to-Point Protocol over Ethernet (PPPoE)
L2 Switching
- 802.1D, RSTP, MSTP, 802.3ad (LACP)
- 802.1x, LLDP, 802.1ad (Q-in-Q), IGMP Snooping
- Layer 2 switching with high availability
Traffic Management Quality of Service (QoS)
- 802.1p, DSCP, EXP
- Marking, policing, and shaping
- Class-based queuing with prioritization
- Weighted random early detection (WRED)
- Queuing based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multi-field (MF) filters
- Guaranteed bandwidth
- Maximum bandwidth
- Ingress traffic policing
- Priority-bandwidth utilization
- DiffServ marking
- Virtual channels
Security: Firewall
- Firewall, zones, screens, policies
- Stateful firewall, stateless filters
- Network attack detection
- Screens denial of service (DoS) and provides distributed denial of service (DDoS) protection (anomaly-based)
- Prevent replay attack; Anti-Replay
- Unified Access Control
- TCP reassembly for fragmented packet protection
- Brute force attack mitigation
- SYN cookie protection
- Zone-based IP spoofing
- Malformed packet protection
Security: UTM1
- Intrusion Prevention System (IPS)
- Protocol anomaly detection
- Stateful protocol signatures
- Intrusion prevention system (IPS) attack pattern obfuscation
- User role-based policies
- Customer signatures creation
- Daily and emergency updates
- AppSecure
- AppTrack (application visibility and tracking)
- AppFW (policy enforcement by application name)
- Custom signatures
- Dynamic signature updates
- User-based application policy enforcement
- Antivirus
- Express AV (stream-based AV, not available on SRX100 and SRX110)
- File-based antivirus
›› Signature database
›› Protocols scanned: POP3, HTTP, SMTP, IMAP, FTP
›› Antispyware
›› Anti-adware
›› Antikeylogger - Cloud-based antivirus
- Antispam
- Integrated enhanced Web filtering
- Category granularity (90+ categories)
- Real time threat score
- Redirect Web filtering
- Content Security Accelerator in SRX210 high memory, SRX220, SRX240 high memory, SRX550, and SRX6501
- ExpressAV option in SRX210 high memory, SRX220 high memory, SRX240 high memory, SRX550, and SRX6501
- Content filtering
- Based on MIME type, file extension, and protocol commands
VPN
- Tunnels (generic routing encapsulation, IP-IP, IPsec)
- IPsec, Data Encryption Standard (DES) (56-bit), triple Data
Encryption Standard (3DES) (168-bit), Advanced Encryption
Standard (AES) (256-bit+) encryption - Message Digest 5 (MD5) and SHA-1 , SHA-128, SHA-256
authentication - Junos Pulse Dynamic VPN client; browser-based remote access feature requiring a license
- Compressed Real-Time Transport Protocol (CRTP)
- VRRP
- JSRP
- Stateful failover and dual box clustering
- SRX650:
- Redundant power (optional)
- Future GPIM hot swap (online insertion and removal, OIR)
- Future internal failover and SRE hot swap (OIR)
- Backup link via 3G/4G LTE wireless or other WAN
- Active/active—L3 mode2
- Active/passive—L3 mode2
- Configuration synchronization2
- Session synchronization for firewall and VPN2
- Session failover for routing change2
- Device failure detection2
- Link failure detection2
- IP Monitoring with route and interface failover
IPv6
- OSPFv3
- RIPng
- IPv6 Multicast Listener Discovery (MLD)
- BGP
- ISIS
Wireless
- CX111 Cellular Broadband Data Bridge supported on all branch SRX Series devices
- 3G ExpressCards supported on SRX210 with built-in ExpressCard slot
- AX411 Wireless LAN (WLAN) Access Point supported on all6
branch SRX Series devices - WLA Series Wireless LAN Access Points and WLC Series Wireless LAN Controllers are supported on branch SRX Series devices
SLA and Measurement
- Real-time performance monitoring (RPM)
- Sessions, packets, bandwidth usage
- J-Flow flow monitoring and accounting services
Logging and Monitoring
- Syslog
- Traceroute
- Extensive control- and data-plane structured and unstructured syslog
Administration
- Juniper Networks Network and Security Manager support (NSM)
- Juniper Networks Junos Space Security Design support
- Juniper Networks STRM Series Security Threat Response Managers support
- Juniper Networks Advanced Insight Solutions support
- External administrator database (RADIUS, LDAP, SecureID)
- Auto-configuration
- Configuration rollback
- Rescue configuration with button
- Commit confirm for changes
- Auto-record for diagnostics
- Junos OS upgrade with button
- Software upgrades (USB upgrade option)
- Juniper Junos Web, USB, HTTP, FTP, SSH
- Command-line interface
- Smart image download
Certifications3
- Common Criteria (CC) EAL44
- Common Criteria (CC) EAL3
- FIPS-140 Level 2
- Supported hardware versions of the FIPS 140-2 gateways: SRX100B, SRX210B, SRX240B and SRX650-BASE-SRE6-645AP with JNPR-FIPS-TAMPER-LBLS
- Roles, Services, and Authentication: Level 3
- EMI/EMC: Level 3
- Design Assurance: Level 3
- FIPS-approved algorithms: Triple-DES; AES; DSA; SHS;
- RNG; RSA; HMAC
- NEBS Compliance for SRX240, SRX650
- Department of Defense (DoD) Certification for SRX Series Services Gateways, including testing and certification by the Department of Defense Joint Interoperability Test Command (JITC) for interoperability with DoD networks and addition of the SRX Series Services Gateways to the Unified Capabilities Approved Product List (UC APL)
1. When UTM is enabled capacities supported are low memory specifications, on high memory system options.
2. When UTM is enabled concurrent sessions supported is 50% 0f value shown.
3. SRX100B installed with 1 GB DRAM, with 512 MB accessible. Optional upgrade to 1 GB DRAM is available with purchase of memory software license key.
4. SRX650 supports a single Services and Routing Engine (SRE) as of software release 11.2.
5. Throughput numbers based on HTTP traffic with 44 kilobyte transaction size.
6. Low memory/high memory
*There are several models available for the SRX210 including the enhanced version. Please contact your Juniper or partner account representative for more information.
** The additional software feature licenses apply to both the SRX100 and the SRX110. Available
in Q1, 2012 for SRX110.