JUNIPER SRX4100-SYS-JB-AC FIREWALL

$46,667 $66,667

Description

The SRX4000 line of services gateways brings you integrated security and networking features for protecting next-generation services and applications. These gateways are designed for small to medium-sized enterprise campuses and data centers. They can also serve as secure routers and VPN concentrators, as well as offer SD-WAN capabilities.

Properties

Properties Juniper SRX4100-SYS-JB-AC
Description SRX4100 Services Gateway includes hardware (8x10GE, two AC PSU, four FAN Trays, cables and RMK) and Junos Software Base (Firewall, NAT, IPSec, Routing, MPLS)
Product Family SRX4100 Series
Product Type Security Firewall
Connectivity Specification
Total onboard ports 8x1GbE/10GbE
Onboard small form-factor pluggable plus (SFP+) transceiver ports 8x1GbE/10GbE
Out-of-Band (OOB) management ports 1x1GbE
Dedicated high availability (HA) ports 2x1GbE/10GbE (SFP/SFP+)
Console (RJ-45) 1
USB 2.0 ports (type A) 2
Includes Junos Software Base (Firewall, NAT, IPSec, Routing, MPLS)
Form factor 1 U
Dimensions (WxHxD) 17.48 x 1.7 x 25 in
(44.39 x 4.31 x 63.5 cm)
Weight (device and PSU) Chassis with two AC power supplies: 29 lb (13.15 kg)
Chassis with package for shipping: 47.5 lb (21.54 kg)
Power
Power supply 2x 650 W redundant AC-DC PSU
Redundant PSU 1+1
Average power consumption 200 W
Average heat dissipation 685 BTU / hour
Maximum current consumption 4A (for 110 V AC power)
2A (for 220 V AC power)
Maximum inrush current 50 A by 1 AC cycle
Airflow/cooling Front to back
Acoustic noise level 70 dBA

 

Specifications

Specifications SRX4100-SYS-JB-AC
System memory (RAM) 64 GB
Secondary storage (SSD) 240 GB with 1+1 RAID
Firewall throughput 40 Gbps
Firewall throughput—IMIX 22 Gbps
Firewall throughput with application security 19.9 Gbps
IPsec VPN throughput-IMIX 14.8 Gbps
Intrusion prevention 13.9 Gbps
NGFW throughput 9 Gbps
Secure Web Access throughput 6.7 Gbps
Connections per second 250,000
Maximum session 5 million
Routing/firewall (IMIX packet size) throughput Gbps 22.5
Routing/firewall (1,518 B packet size) throughput Gbps 40
IPsec VPN (IMIX packet size) Gbps 14.8
Application visibility and control in Gbps 19.9
Recommended IPS in Gbps 13.9
Next-generation firewall in Gbps 9
Secure Web Access firewall in Gbps 6.7
Connections per second (CPS) 250,000
Maximum security policies 60,000
Maximum concurrent sessions (IPv4 or IPv6) 5 million
Route table size (RIB/FIB) (IPv4) 2 million/1.2 million
IPsec tunnels 7500
Number of remote access/SSL VPN (concurrent) users 7500
Multitenancy (LSYS/TSYS) 32/200
Software Specifications
Routing Protocols IPv4, IPv6, static routes, RIP v1/v2
OSPF/OSPF v3
BGP with route reflector
IS-IS
Multicast: Internet Group Management Protocol (IGMP) v1/v2; Protocol Independent Multicast (PIM) sparse mode (SM)/source-specific multicast (SSM); Session Description Protocol (SDP); Distance Vector Multicast Routing Protocol (DVMRP); Multicast Source Discovery Protocol (MSDP); reverse path forwarding (RPF)
Encapsulation: VLAN, Point-to-Point Protocol over Ethernet (PPPoE)
Virtual routers
Policy-based routing, source-based routing
Equal-cost multipath (ECMP)
QoS Features Support for 802.1p, DiffServ code point (DSCP), EXP
Classification based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multifield filters
Marking, policing, and shaping
Classification and scheduling
Weighted random early detection (WRED)
Guaranteed and maximum bandwidth
Ingress traffic policing
Virtual channels
Firewall Services Stateful and stateless firewall
Zone-based firewall
Screens and distributed denial of service (DDoS) protection
Protection from protocol and traffic anomalies
Unified Access Control (UAC)
Network Address Translation (NAT) Source NAT with Port Address Translation (PAT)
Bidirectional 1:1 static NAT
Destination NAT with PAT
Persistent NAT
IPv6 address translation
VPN Features Tunnels: Site-to-site, hub and spoke, dynamic endpoint, AutoVPN, ADVPN, Group VPN (IPv4/ IPv6/Dual Stack)
Juniper Secure Connect: Remote access/SSL VPN
Configuration payload: Yes
IKE Encryption algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite B
IKE authentication algorithms: MD5, SHA-1, SHA-128, SHA-256, SHA-384
Authentication: Pre-shared key and public key infrastructure (PKI) (X.509)
IPsec (Internet Protocol Security): Authentication Header (AH) / Encapsulating Security Payload (ESP) protocol
IPsec Authentication Algorithms: hmac-md5, hmac-sha-196, hmac-sha-256
IPsec Encryption Algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite B
Perfect forward secrecy, anti-reply
Internet Key Exchange: IKEv1, IKEv2
Monitoring: Standard-based dead peer detection (DPD) support, VPN monitoring
VPNs GRE, IP-in-IP, and MPLS
Network Services Dynamic Host Configuration Protocol (DHCP) client/server/relay
Domain Name System (DNS) proxy, dynamic DNS (DDNS)
Juniper real-time performance monitoring (RPM) and IP monitoring
Juniper flow monitoring (J-Flow)
High Availability Features Virtual Router Redundancy Protocol (VRRP) – IPv4 and IPv6
Stateful high availability:
-Dual box clustering
-Active/passive
-Active/active
-Configuration synchronization
-Firewall session synchronization
-Device/link detection
-In-Service Software Upgrade (ISSU)
IP monitoring with route and interface failover
Management, Automation, Logging, and Reporting SSH, Telnet, SNMP
Smart image download
Juniper CLI and Web UI
Juniper Networks Junos Space Security Director
Python
Junos events, commit and OP scripts
Application and bandwidth usage reporting
Debug and troubleshooting tools
Advanced Routing Services Packet Mode
MPLS (RSVP, LDP)
Circuit cross-connect (CCC), translational cross-connect (TCC)
L2/L2 MPLS VPN, pseudo-wires
Virtual private LAN service (VPLS), next-generation multicast VPN (NG-MVPN)
MPLS traffic engineering and MPLS fast re-route
Application Security Services Application visibility and control
Application-based firewall
Application QoS
Advanced/application policy-based routing (APBR)
Application Quality of Experience (AppQoE)
Application-based multipath routing
User-based firewall
Threat Defense and Intelligence Services Intrusion prevention system
Antivirus
Antispam
Category/reputation-based URL filtering
SSL proxy/inspection
Protection from botnets (command and control)
Adaptive enforcement based on GeoIP
Juniper Advanced Threat Prevention, a cloud-based SaaS offering, to detect and block zero-day attacks
Adaptive Threat Profiling
Encrypted Traffic Insights
SecIntel to provide threat intelligence
Juniper ATP Appliance, a distributed, on-premises advanced threat prevention solution to detect and block zero-day attacks
Operating temperature 32° to 104° F (0° to 40° C)
Operating humidity 5% to 90% noncondensing
Meantime between failures (MTBF) 221,729 hours (about 25.3 years)
FCC classification Class A
RoHS compliance RoHS 2

Accessories

Transceivers
CTP-SFP-1GE-LX Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optic Module, CTP1000
CTP-SFP-1GE-SX Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optic Module, CTP1000
CTP-SFP-1GE-T Small Form Factor Pluggable 1000Base-T Gigabit Ethernet Module (uses Cat 5 cable)
EX-SFP-1GE-LH Small Form Factor Pluggable 1000Base-LH Gigabit Ethernet Optics
EX-SFP-1GE-LX Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics
EX-SFP-1GE-SX Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optics
EX-SFP-1GE-SX-ET SFP, 1000Base-SX Gigabit Ethernet, Extended Temperature Range Optics
EX-SFP-1GE-T Small Form Factor Pluggable 10/100/1000 Copper Transceiver Module
QFX-SFP-1GE-LX SFP 1000Base-LX Gigabit Ethernet Optics, 1310nm for 10km transmission on SMF
QFX-SFP-1GE-SX SFP 1000Base-SX Gigabit Ethernet Optics, 850nm for upto 550m transmission on MMF
QFX-SFP-1GE-T SFP 1000Base-T Copper Transceiver Module for up to 100m transmission
SFP-1G-LH-C SFP, 1G, SMF 70km, Industrial Temperature (-40 through 85 DegC), Duplex LC connector
SFP-1G-LX-C SFP, 1G, SMF 10km and MMF 550m, Extended Temperature (-5 through 70 DegC), Duplex LC connector
SFP-1G-SX-C SFP, 1G, FDDI 220m and OM1 275m/OM2 MMF 550m, Extended Temperature (-10 through 85 DegC), Duplex LC connector
SFP-1G-T-C Small Form Factor Pluggable 1000Base-T Gigabit Ethernet Module (uses Cat 5 cable)
SRX-SFP-1GE-LH Small Form Factor Pluggable 1000Base-LH Gigabit Ethernet Optic Module
SRX-SFP-1GE-LX Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optic Module
SRX-SFP-1GE-LX-ET Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optic Module - Extended temperature
SRX-SFP-1GE-SX Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optic Module
SRX-SFP-1GE-SX-ET Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optic Module - Extended temperature
SRX-SFP-1GE-T Small Form Factor Pluggable 1000Base-T Gigabit Ethernet Module
EX-SFP-10GE-DAC-1M SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 1M
EX-SFP-10GE-DAC-3M SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 3M
EX-SFP-10GE-ER SFP+ 10GBase-ER 10 Gigabit Ethernet Optics Module, 1550nm for 40Km Transmission
EX-SFP-10GE-LR Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) LR Optics
EX-SFP-10GE-SR Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) SR Optics
QFX-SFP-10GE-ER SFP+ 10GBase-ER 10 Gigabit Ethernet Optics, 1550nm for 40km transmission on SMF
QFX-SFP-10GE-LR SFP+ 10GBase-LR 10 Gigabit Ethernet Optics, 1310nm for 10km transmission on SMF
QFX-SFP-10GE-SR SFP+ 10GBase-SR 10 Gigabit Ethernet Optics, 850nm for up to 300m transmission on MMF
QFX-SFP-DAC-1M SFP+ 10 Gigabit Ethernet Direct Attach Copper (twinax copper cable) 1m
QFX-SFP-DAC-3M SFP+ 10 Gigabit Ethernet Direct Attach Copper (twinax copper cable) 3m
SFPP-10G-LRT2-C SFP+, 10G-LR Transceiver type 2
SFPP-10G-SR-C SFP+, 10G-SR Transceiver
SRX-SFP-10GE-DAC-1M SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 1M
SRX-SFP-10GE-DAC-3M SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 3M
SRX-SFP-10GE-ER SFP+ 10GBase-ER 10 Gigabit Ethernet Optics Module, 1550nm for 40Km transmission
SRX-SFP-10GE-LR Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) LR Optics
SRX-SFP-10GE-SR Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) SR Optics

Domestic Shipping

All products from Gaia Consulting Services are shipped Monday through Friday via trusted carriers such as UPS, FedEx, or USPS. We are pleased to offer free delivery on all orders over $100 within the United States. Orders typically take 1-6 business days to arrive, depending on your location. For orders that do not qualify for free delivery, shipping rates are calculated based on factors such as the shipping carrier, method, package weight, and destination. Please note that additional surcharges may apply for shipments to Hawaii, Alaska, Puerto Rico, and APO/FPO addresses. While we strive to ship orders on the same day they are placed, any delays or cancellations will be promptly communicated to you.

International Shipping

Gaia Consulting Services also offers international shipping to customers worldwide. However, please be aware that we adhere to all international trade laws and regulations and do not ship to countries currently under embargo by the United States.

Shipping Carriers and Transit Times

For international shipments, we utilize reliable carriers such as UPS, FedEx, and DHL to ensure your orders arrive safely and on time. Transit times typically range between 7-15 business days, depending on the destination and chosen shipping method. Please note that customs clearance processes may cause delays, which are beyond our control.

Customs, Duties, and Taxes

Customers outside the United States are responsible for any customs duties, taxes, or additional fees imposed by their country's customs authorities. Gaia Consulting Services cannot predict or control these charges and advises customers to familiarize themselves with their country's import regulations before placing an order. Please note that these charges are not included in the item price or shipping costs.

Order Processing

We strive to process and ship orders quickly and efficiently. If any issues arise with your order, we will notify you promptly to keep you informed of its status.

Shipping Addresses

To ensure smooth delivery, please provide an accurate and complete shipping address during checkout. Gaia Consulting Services cannot be held liable for orders shipped to incorrect addresses due to customer error. If you need to modify your shipping address after placing an order, please contact us immediately. Please note that we may be unable to change the shipping address if your order has already been processed.

You may also like