JUNIPER SRX4100-SYS-JB-AC FIREWALL
$46,667
$66,667
Description
The SRX4000 line of services gateways brings you integrated security and networking features for protecting next-generation services and applications. These gateways are designed for small to medium-sized enterprise campuses and data centers. They can also serve as secure routers and VPN concentrators, as well as offer SD-WAN capabilities.
Properties
| Properties | Juniper SRX4100-SYS-JB-AC |
| Description | SRX4100 Services Gateway includes hardware (8x10GE, two AC PSU, four FAN Trays, cables and RMK) and Junos Software Base (Firewall, NAT, IPSec, Routing, MPLS) |
| Product Family | SRX4100 Series |
| Product Type | Security Firewall |
| Connectivity Specification | |
| Total onboard ports | 8x1GbE/10GbE |
| Onboard small form-factor pluggable plus (SFP+) transceiver ports | 8x1GbE/10GbE |
| Out-of-Band (OOB) management ports | 1x1GbE |
| Dedicated high availability (HA) ports | 2x1GbE/10GbE (SFP/SFP+) |
| Console (RJ-45) | 1 |
| USB 2.0 ports (type A) | 2 |
| Includes | Junos Software Base (Firewall, NAT, IPSec, Routing, MPLS) |
| Form factor | 1 U |
| Dimensions (WxHxD) | 17.48 x 1.7 x 25 in (44.39 x 4.31 x 63.5 cm) |
| Weight (device and PSU) | Chassis with two AC power supplies: 29 lb (13.15 kg) Chassis with package for shipping: 47.5 lb (21.54 kg) |
| Power | |
| Power supply | 2x 650 W redundant AC-DC PSU |
| Redundant PSU | 1+1 |
| Average power consumption | 200 W |
| Average heat dissipation | 685 BTU / hour |
| Maximum current consumption | 4A (for 110 V AC power) 2A (for 220 V AC power) |
| Maximum inrush current | 50 A by 1 AC cycle |
| Airflow/cooling | Front to back |
| Acoustic noise level | 70 dBA |
Specifications
| Specifications | SRX4100-SYS-JB-AC |
| System memory (RAM) | 64 GB |
| Secondary storage (SSD) | 240 GB with 1+1 RAID |
| Firewall throughput | 40 Gbps |
| Firewall throughput—IMIX | 22 Gbps |
| Firewall throughput with application security | 19.9 Gbps |
| IPsec VPN throughput-IMIX | 14.8 Gbps |
| Intrusion prevention | 13.9 Gbps |
| NGFW throughput | 9 Gbps |
| Secure Web Access throughput | 6.7 Gbps |
| Connections per second | 250,000 |
| Maximum session | 5 million |
| Routing/firewall (IMIX packet size) throughput Gbps | 22.5 |
| Routing/firewall (1,518 B packet size) throughput Gbps | 40 |
| IPsec VPN (IMIX packet size) Gbps | 14.8 |
| Application visibility and control in Gbps | 19.9 |
| Recommended IPS in Gbps | 13.9 |
| Next-generation firewall in Gbps | 9 |
| Secure Web Access firewall in Gbps | 6.7 |
| Connections per second (CPS) | 250,000 |
| Maximum security policies | 60,000 |
| Maximum concurrent sessions (IPv4 or IPv6) | 5 million |
| Route table size (RIB/FIB) (IPv4) | 2 million/1.2 million |
| IPsec tunnels | 7500 |
| Number of remote access/SSL VPN (concurrent) users | 7500 |
| Multitenancy (LSYS/TSYS) | 32/200 |
| Software Specifications | |
| Routing Protocols | IPv4, IPv6, static routes, RIP v1/v2 OSPF/OSPF v3 BGP with route reflector IS-IS Multicast: Internet Group Management Protocol (IGMP) v1/v2; Protocol Independent Multicast (PIM) sparse mode (SM)/source-specific multicast (SSM); Session Description Protocol (SDP); Distance Vector Multicast Routing Protocol (DVMRP); Multicast Source Discovery Protocol (MSDP); reverse path forwarding (RPF) Encapsulation: VLAN, Point-to-Point Protocol over Ethernet (PPPoE) Virtual routers Policy-based routing, source-based routing Equal-cost multipath (ECMP) |
| QoS Features | Support for 802.1p, DiffServ code point (DSCP), EXP Classification based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multifield filters Marking, policing, and shaping Classification and scheduling Weighted random early detection (WRED) Guaranteed and maximum bandwidth Ingress traffic policing Virtual channels |
| Firewall Services | Stateful and stateless firewall Zone-based firewall Screens and distributed denial of service (DDoS) protection Protection from protocol and traffic anomalies Unified Access Control (UAC) |
| Network Address Translation (NAT) | Source NAT with Port Address Translation (PAT) Bidirectional 1:1 static NAT Destination NAT with PAT Persistent NAT IPv6 address translation |
| VPN Features | Tunnels: Site-to-site, hub and spoke, dynamic endpoint, AutoVPN, ADVPN, Group VPN (IPv4/ IPv6/Dual Stack) Juniper Secure Connect: Remote access/SSL VPN Configuration payload: Yes IKE Encryption algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite B IKE authentication algorithms: MD5, SHA-1, SHA-128, SHA-256, SHA-384 Authentication: Pre-shared key and public key infrastructure (PKI) (X.509) IPsec (Internet Protocol Security): Authentication Header (AH) / Encapsulating Security Payload (ESP) protocol IPsec Authentication Algorithms: hmac-md5, hmac-sha-196, hmac-sha-256 IPsec Encryption Algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite B Perfect forward secrecy, anti-reply Internet Key Exchange: IKEv1, IKEv2 Monitoring: Standard-based dead peer detection (DPD) support, VPN monitoring VPNs GRE, IP-in-IP, and MPLS |
| Network Services | Dynamic Host Configuration Protocol (DHCP) client/server/relay Domain Name System (DNS) proxy, dynamic DNS (DDNS) Juniper real-time performance monitoring (RPM) and IP monitoring Juniper flow monitoring (J-Flow) |
| High Availability Features | Virtual Router Redundancy Protocol (VRRP) – IPv4 and IPv6 Stateful high availability: -Dual box clustering -Active/passive -Active/active -Configuration synchronization -Firewall session synchronization -Device/link detection -In-Service Software Upgrade (ISSU) IP monitoring with route and interface failover |
| Management, Automation, Logging, and Reporting | SSH, Telnet, SNMP Smart image download Juniper CLI and Web UI Juniper Networks Junos Space Security Director Python Junos events, commit and OP scripts Application and bandwidth usage reporting Debug and troubleshooting tools |
| Advanced Routing Services | Packet Mode MPLS (RSVP, LDP) Circuit cross-connect (CCC), translational cross-connect (TCC) L2/L2 MPLS VPN, pseudo-wires Virtual private LAN service (VPLS), next-generation multicast VPN (NG-MVPN) MPLS traffic engineering and MPLS fast re-route |
| Application Security Services | Application visibility and control Application-based firewall Application QoS Advanced/application policy-based routing (APBR) Application Quality of Experience (AppQoE) Application-based multipath routing User-based firewall |
| Threat Defense and Intelligence Services | Intrusion prevention system Antivirus Antispam Category/reputation-based URL filtering SSL proxy/inspection Protection from botnets (command and control) Adaptive enforcement based on GeoIP Juniper Advanced Threat Prevention, a cloud-based SaaS offering, to detect and block zero-day attacks Adaptive Threat Profiling Encrypted Traffic Insights SecIntel to provide threat intelligence Juniper ATP Appliance, a distributed, on-premises advanced threat prevention solution to detect and block zero-day attacks |
| Operating temperature | 32° to 104° F (0° to 40° C) |
| Operating humidity | 5% to 90% noncondensing |
| Meantime between failures (MTBF) | 221,729 hours (about 25.3 years) |
| FCC classification | Class A |
| RoHS compliance | RoHS 2 |
Accessories
| Transceivers | |
| CTP-SFP-1GE-LX | Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optic Module, CTP1000 |
| CTP-SFP-1GE-SX | Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optic Module, CTP1000 |
| CTP-SFP-1GE-T | Small Form Factor Pluggable 1000Base-T Gigabit Ethernet Module (uses Cat 5 cable) |
| EX-SFP-1GE-LH | Small Form Factor Pluggable 1000Base-LH Gigabit Ethernet Optics |
| EX-SFP-1GE-LX | Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optics |
| EX-SFP-1GE-SX | Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optics |
| EX-SFP-1GE-SX-ET | SFP, 1000Base-SX Gigabit Ethernet, Extended Temperature Range Optics |
| EX-SFP-1GE-T | Small Form Factor Pluggable 10/100/1000 Copper Transceiver Module |
| QFX-SFP-1GE-LX | SFP 1000Base-LX Gigabit Ethernet Optics, 1310nm for 10km transmission on SMF |
| QFX-SFP-1GE-SX | SFP 1000Base-SX Gigabit Ethernet Optics, 850nm for upto 550m transmission on MMF |
| QFX-SFP-1GE-T | SFP 1000Base-T Copper Transceiver Module for up to 100m transmission |
| SFP-1G-LH-C | SFP, 1G, SMF 70km, Industrial Temperature (-40 through 85 DegC), Duplex LC connector |
| SFP-1G-LX-C | SFP, 1G, SMF 10km and MMF 550m, Extended Temperature (-5 through 70 DegC), Duplex LC connector |
| SFP-1G-SX-C | SFP, 1G, FDDI 220m and OM1 275m/OM2 MMF 550m, Extended Temperature (-10 through 85 DegC), Duplex LC connector |
| SFP-1G-T-C | Small Form Factor Pluggable 1000Base-T Gigabit Ethernet Module (uses Cat 5 cable) |
| SRX-SFP-1GE-LH | Small Form Factor Pluggable 1000Base-LH Gigabit Ethernet Optic Module |
| SRX-SFP-1GE-LX | Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optic Module |
| SRX-SFP-1GE-LX-ET | Small Form Factor Pluggable 1000Base-LX Gigabit Ethernet Optic Module - Extended temperature |
| SRX-SFP-1GE-SX | Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optic Module |
| SRX-SFP-1GE-SX-ET | Small Form Factor Pluggable 1000Base-SX Gigabit Ethernet Optic Module - Extended temperature |
| SRX-SFP-1GE-T | Small Form Factor Pluggable 1000Base-T Gigabit Ethernet Module |
| EX-SFP-10GE-DAC-1M | SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 1M |
| EX-SFP-10GE-DAC-3M | SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 3M |
| EX-SFP-10GE-ER | SFP+ 10GBase-ER 10 Gigabit Ethernet Optics Module, 1550nm for 40Km Transmission |
| EX-SFP-10GE-LR | Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) LR Optics |
| EX-SFP-10GE-SR | Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) SR Optics |
| QFX-SFP-10GE-ER | SFP+ 10GBase-ER 10 Gigabit Ethernet Optics, 1550nm for 40km transmission on SMF |
| QFX-SFP-10GE-LR | SFP+ 10GBase-LR 10 Gigabit Ethernet Optics, 1310nm for 10km transmission on SMF |
| QFX-SFP-10GE-SR | SFP+ 10GBase-SR 10 Gigabit Ethernet Optics, 850nm for up to 300m transmission on MMF |
| QFX-SFP-DAC-1M | SFP+ 10 Gigabit Ethernet Direct Attach Copper (twinax copper cable) 1m |
| QFX-SFP-DAC-3M | SFP+ 10 Gigabit Ethernet Direct Attach Copper (twinax copper cable) 3m |
| SFPP-10G-LRT2-C | SFP+, 10G-LR Transceiver type 2 |
| SFPP-10G-SR-C | SFP+, 10G-SR Transceiver |
| SRX-SFP-10GE-DAC-1M | SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 1M |
| SRX-SFP-10GE-DAC-3M | SFP+ 10 Gigabit Ethernet Direct Attach Copper (Twinax Copper Cable), 3M |
| SRX-SFP-10GE-ER | SFP+ 10GBase-ER 10 Gigabit Ethernet Optics Module, 1550nm for 40Km transmission |
| SRX-SFP-10GE-LR | Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) LR Optics |
| SRX-SFP-10GE-SR | Small Form Factor Pluggable 10 Gigabit Ethernet (SFP+) SR Optics |