Juniper SRX5600BASE-AC

The Juniper SRX5600BASE-AC gateway is an optimal solution for protecting large enterprise data centers and carrier network infrastructures, it supports firewalls with a throughput of up to 60 Gbps, IPS with a speed of 15 Gbps, and also provides 350,000 new connections per second and 9 million simultaneous user sessions.

The SRX Series gateways are high-performance, network security solutions for enterprises and service providers. Their easy-to-manage platforms feature high port density, advanced security, and flexible connectivity. The Juniper SRX5600BASE-AC gateway is a new platform that combines the capabilities of a multi-gigabit Internet router with the world's most powerful firewall and attack surface. This device is based on a fundamentally new architecture that delivers the highest performance, scalability, and service integration. The Juniper SRX5600BASE-AC gateway supports firewalls with throughput up to 60 Gbps, IPS with a speed of 15 Gbps, and also provides 350,000 new connections per second and 9 million simultaneous user sessions. The Juniper SRX5600BASE-AC gateway is an optimal solution for protecting large enterprise data centers and carrier network infrastructures, as well as for protecting next-generation services and applications and applying unique security policies to individual zones. SRX gateways for branches feature high-performance hardware processing Content Security Acceleration, support for Power over Ethernet (PoE) technology and VoIP (SIP) technology.

SRX5600BASE-AC Features:

Tested JUNOS version: Junos 10.2 Firewall Performance (Maximum): 60 Gbps IPS Performance (NSS 4.2.1) 15 Gbps AES256+SHA-1 / 3DES+SHA-1 VPN Performance 15 Gbps Maximum number of sessions 9 million Session creation speed (persistent, TCP, 3-way), per second 350,000 Maximum number of security policies 80,000 Maximum number of supported users Unlimited Maximum number of IOC card slots 5 Fixed I/O ports Not applicable Support CX111 3G Bridge Not applicable Internal connector for 3G Express card Not applicable LAN interfaces 40 x 1 Gigabit Ethernet SFP 4 x 10 Gigabit Ethernet (short range (SR) or long range (LR)) 16 x 10/100/1000 Ethernet FlexIOC 4 x 10 Gigabit Ethernet (SR or LR) FlexIOC Support for accessibility features Active/passive, active/active Chassis cluster maintenance with minimal service level degradation Interface aggregation groups in a chassis cluster AppSecure Services Application identification: yes Application protection against denial of service (AppDoS) attacks: yes AppTrack: yes Firewall Network-level attack detection: Yes DoS and DDoS protection: Yes TCP reassembly to protect fragmented packets: Yes Brute Force Attack Resistance: Yes SYN Cookie Protection: Yes IP address substitution in zones: Yes Malformed Packet Protection: Yes GPRS inspection with connection status monitoring: Yes

Intrusion protection system Stateful Protocol Signatures: Yes Attack Detection Mechanisms: Stateful Signatures, Protocol Abnormality Detection (mitigating attacks that exploit application vulnerabilities), Application Identification Attack response mechanisms: Connection reset, connection stop, session packet log, session summary report, email message, session setupAttack notification mechanisms: Structured system log Worm protection: Yes Inspection of SSL encrypted traffic: Yes Simplified installation using recommended policies: Yes Trojan protection: Yes Protection from spyware/adware and keyloggers: YesProtection from other malware: Yes Protection against continuous attacks from infected systems: Yes Probing protection: Yes Cross-Site Request Forgery Protection: Yes Distributed attacks - combination of signatures with connection monitoring and protocol anomaly detection: Yes Create your own attack signatures: Yes Access contexts for configuration: 500+ Changes to attack descriptions (port range, etc.): Yes Stream Signatures: Yes Protocol boundaries: Yes Stateful Protocol Signatures: Yes Approximate number of attacks reflected: 6,000+ Detailed description of threats and information about threat elimination/patches: Yes Create and enforce appropriate application usage policies: Yes Create reports and audit trails about attackers and attack targets: Yes Deployment modes: Embedded or TAP Dimensions and power supply Dimensions (L x W x H): 44.5 x 60.5 x 35.6 cm (17.5 x 23.8 x 14 in) Weight: Chassis: Full configuration: 81.7 kg Power module (AC): 100-240VAC Power module (DC): -40 – -60 VDC Maximum power consumption: 2800 W