Juniper SRX3400BASE-AC

Шлюз Juniper SRX3400 поддерживает межсетевые экраны с пропускной способностью до 20 Гбит/с, межсетевые экраны и IPS до 6 Гбит/с или IPsec VPN со скоростью 6 Гбит/с, а также обеспечивает до 175000 новых соединений в секунду. Juniper SRX3400 поддерживает функционал: FW, IPS, NAT, IPSec VPN, DDoS, QoS и роутинг, любой сервис для любого трафика и разделение control and data planes.

Juniper SRX3400 имеет 16 портов 10/100/1000 BASE - T, 16 портов Gigabit Ethernet (SFP) и 2 порта 10 Gigabit Ethernet XFP. Как и другие устройства Juniper, шлюз безопасности SRX3400 работает под управлением операционной системы Junos. Дополнительные интерфейсные модули и трансиверы, лицензии и комплектующие помогают расширить функционал устройств Juniper SRX3400.

Шлюзы Juniper серии SRX3400 - оптимальное решение для защиты и сегментации сетевых инфраструктур центра обработки данных, так как они объединяют различные решения для обеспечения безопасности и применяют уникальные политики безопасности к отдельным зонам на малых и средних фермах серверов и в хостинговых компаниях.

Технические характеристики Juniper SRX3400BASE-AC:

SRX 3400 Chassis, Midplane, Fan, RE, SFB-12GE, AC PEM - no power cord - no SPC - no NPC

Junos Software version tested

Junos 12.1X44

Firewall performance (max)

30 Gbps

IPS performance (NSS 4.2.1)

8 Gbps

AES256+SHA-1 / 3DES+SHA-1 VPN performance

8 Gbps

Maximum concurrent sessions

2.25/ 3 million sessions *

* Additional Extreme License required for 3M sessions

New sessions/second (sustained, TCP, 3-way)150,000

Maximum security policies

40,000

Maximum users supported

Unrestricted

Maximum available slots for IOCs

4 (front slots)

Fixed I/O ports

8 10/100/1000 + 4 SFP

CX111 3G Bridge support

N/A

Internal 3G Express Card Slot support

N/A

Centralized Management

Junos Space Security Design

LAN interface options

16 x 1 10/100/1000 copper

16 x 1 Gigabit Ethernet small form-factor pluggable transceivers (SFP)

2 x 10 Gigabit Ethernet XFP

High-availability support

Active/Passive, Active/Active

Low impact chassis cluster

Interface aggregation groups across chassis cluster

AppSecure Services

Application Identification: yes

Application Denial of Service Protection (AppDoS): yes

AppTrack: yes

AppQoS: yes

AppFW: yes

Dimensions and Power

Dimensions (W x H x D): 17.5 x 5.25 x 25.5 in (44.5 x 13.3 x 64.8 cm)

Weight: Chassis: 32.3 lb (14.7 kg), Fully Configured: 75 lb (34.1 kg)

Power supply (AC): 100 to 240 V AC

Power supply (DC): -40 to -72 V DC

Maximum power draw: 1,100 W (AC power), 1,050 W (DC power)

Power supply redundancy: 1 + 1

Firewall

Network attack detection: Yes

DoS and DDoS protection: Yes

TCP reassembly for fragmented packet protection: Yes

Brute force attack mitigation: Yes

SYN cookie protection: Yes

Zone-based IP spoofing: Yes

Malformed packet protection: Yes

GPRS stateful inspection: Yes

Intrusion Prevention System

- Stateful protocol signatures: Yes

- Attack detection mechanisms: Stateful signatures, protocol anomaly detection (zero-day coverage), application identification

- Attack response mechanisms: Drop connection, close connection, session packet log, session summary, email, custom session

- Attack notification mechanisms: Structured syslog

- Worm protection: Yes

- SSL encrypted traffic inspection: Yes

- Simplified installation through recommended policies: Yes

- Trojan protection: Yes

- Spyware/adware/keylogger protection: Yes

- Other malware protection: Yes

- Protection against attack proliferation from infected systems: Yes

- Reconnaissance protection: Yes

- Request and response side attack protection: Yes

- Compound attacks - combines stateful signatures and protocol anomalies: Yes

- Create custom attack signatures: Yes

- Access contexts for customization: 500+

- Attack editing (port range, other): Yes

- Stream signatures: Yes

- Protocol thresholds: Yes

- Stateful protocol signatures: Yes

- Approximate number of attacks covered: 6,000+

- Detailed threat descriptions and remediation/patch info: Yes

- Create and enforce appropriate application-usage policies: Yes

- Attacker and target audit trail and reporting: Yes

- Deployment modes: InlineTAP