SRX1600
Увеличить
Краткое описание:
SRX1600 Firewall
Дополнительная информация
he Juniper Networks SRX1600 firewall is a high-performance, next-generation firewall (NGFW) designed to safeguard enterprise campus edge, data center edge, and branch offices. It supports roaming, SD-WAN large branch, and SD-WAN secure hub use cases. Combining industry-leading security efficacy and carrier-grade routing with state-of-the-art switching, this platform delivers robust network security, effective threat protection, and comprehensive automation and mitigation capabilities. It features built-in Zero Trust, Ethernet VPN-Virtual Extensible LAN (EVPN-VXLAN) fabric integration, and AI-predictive threat prevention. The SRX1600 is integral to Juniper's Connected Security Distributed Services Architecture and is powered by Junos operating system.
| MTBF | Over 100,000hours |
| Form Factor | 1U |
| Product Type | Next-Generation Firewall (NGFW) |
| QoS Features | 802.1p, DiffServ code point (DSCP), EXP classification, Classification based on VLAN/DLCI/interface/bundles/multifield filters, Marking, policing, shaping, Classification and scheduling, WRED, Guaranteed and maximum bandwidth, Ingress traffic policing, Hierarchical shaping and policing, Virtual channels |
| VPN Features | Site-to-site, hub and spoke, dynamic endpoint, AutoVPN, ADVPN, Group VPN (IPv4/IPv6/Dual Stack), Juniper Secure Connect (Remote access/SSL VPN), IKE encryption (Prime, 3DES-CBC, AEC-CBC, AES-GCM, Suite B), Authentication (Pre-shared key, PKI X.509), IPsec (AH/ESP protocol), IPsec authentication (hmac-md5, hmac-sha-196, hmac-sha-256), IPsec encryption (Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite B), Perfect forward secrecy, anti-reply, IKEv1, IKEv2, DPD support, VPN monitoring, VPNS GRE, IP-in-IP, MPLS |
| Console Ports | 1 (RJ-45) |
| Redundant PSU | 1+1 |
| Storage (SSD) | 1 x 120GB |
| Ethernet Ports | 16 x 1 GbE 10/100/1000 BASE-T |
| Airflow/Cooling | Front to back |
| Rohs Compliance | RoHS 6 |
| Network Services | DHCP client/server/relay, DNS proxy, dynamic DNS (DDNS), Juniper real-time performance monitoring (RPM), IP monitoring, Juniper flow monitoring (J-Flow) |
| Operating System | Junos OS |
| Firewall Services | Stateful firewall, Zone-based firewall, Screens, DDoS protection, Protocol/traffic anomaly protection, Unified Access Control (UAC), User role-based firewall, SSL inspection, Integration with Juniper Mist Access Assurance |
| IPsec VPN Tunnels | 2,000 |
| Power Supply Type | 2 x 450 W AC PSU redundant, 2 x 650 W DC PSU redundant |
| Routing Protocols | IPv4, IPv6, static routes, RIP v1/v2, OSPF/OSPF v3, BGP with route reflector, IS-IS, MPLS (RSVP, LDP), CCC, TCC, L2/L2 MPLS VPN, pseudo-wires, VPLS, NG-MVPN, MPLS traffic engineering and fast re-route, Policy-based routing, source-based routing, EVPN-VXLAN (Type 5 route), ECMP |
| Fcc Classification | Class A |
| Operating Humidity | 5% to 90%non-condensing |
| Switching Features | ASIC-based Layer 2 forwarding, MAC address learning, VLAN addressing and integrated routing and bridging (IRB) support, Link aggregation and LACP, LLDP and LLDP-MED, STP/RSTP/MSTP, MVRP, 802.1x authentication, MACsec |
| Acoustic Noise Level | 58dB |
| Zero Trust Capability | Built-in TPM 2.0 Module, RFC8572-compliant sZTP for hardware and software attestation |
| Dimensions (W x H x D) | 43.89 x 4.42 x 46.23cm |
| SFP+ Transceiver Ports | 4 x 1 GbE/10 GbE SFP+ |
| USB 3.0 Ports (Type A) | 1 |
| SFP28 Transceiver Ports | 2 x 1 GbE/10 GbE/25 GbE SFP28 |
| Firewall Throughput (IMIX) | 12Gbps |
| High Availability Features | VRRP (IPv4/IPv6), Stateful high availability (Dual box clustering: Active/passive, Active/active, Config sync, Session sync, Device/link detection, ISSU, IP monitoring with route/interface failover, BFD monitoring), Chassis cluster HA, Multinode HA (MNHA) |
| SSL Connections Per Second | 3,500 |
| Firewall Throughput (1518B) | 24Gbps |
| IPsec VPN Throughput (IMIX) | 8Gbps |
| Max Inrush Current (AC PSM) | 50A for 1 cycle of AC |
| Max Inrush Current (DC PSM) | 40A-pk |
| Operating Temperature (Max) | 40°C |
| Operating Temperature (Min) | 0°C |
| Connections Per Second (64B) | 170,000 |
| IPsec VPN Throughput (1400B) | 18Gbps |
| Application Security Services | Application visibility and control, Application QoS, Advanced/application policy-based routing (APBR), Application Quality of Experience (AppQoE), Application-based multipath routing, User-based firewall |
| Route Table Size (RIB/FIB) IPv4 | 2 Million |
| Application Security Performance | 20 Gbps / 7.5 Gbps |
| Secure Web Access Firewall (CPS) | 4Gbps |
| Advanced Threat Performance (CPS) | 2Gbps |
| Weight (Chassis with two AC PSUs) | 7.1kg |
| Weight (Chassis with two DC PSUs) | 7.2kg |
| Out-of-Band (OOB) Management Ports | 1 x 1 GbE G (RJ-45) |
| Next-Generation Firewall Performance | 19 Gbps / 4.5 Gbps |
| Dedicated High Availability (HA) Ports | 2 x 1 GbE SFP |
| Max Current Consumption (-40 V DC PSM) | 4.7A |
| Max Current Consumption (110 V AC PSM) | 2A |
| Max Current Consumption (230 V AC PSM) | 1A |
| Maximum Concurrent Sessions (IPv4/IPv6) | 2 Million / 1 Million |
| Threat Defense and Intelligence Services | Intrusion prevention system, AI-predictive threat prevention, Antivirus, Antispam, Category/reputation-based URL filtering, SSL proxy/inspection, Protection from botnets (command and control), Adaptive enforcement based on GeoIP, Juniper Advanced Threat Prevention, SecIntel threat intelligence, Juniper ATP virtual appliance |
| Weight (Chassis with package for shipping) | 14.9kg |
| Carrier-Grade Network Address Translation (CGNAT) | IPv4 and IPv6 address translation (NAT44, NAPT44, NAT66, NAPT66, NAT64, NAT46), Static and dynamic 1-1 translation, Source NAT with PAT, Destination NAT with PAT, Persistent NAT (EIM/EIF), Port Block Allocation (PBA), Deterministic NAT (DetNAT), Port overload, Twice-NAT44, DS-lite, Port Control Protocol (PCP) |
Если у вас не открывается документ, нажмите, чтобы открыть файл в новой вкладке.
