Juniper SRX1400BASE-GE-AC

The SRX1400BASE-GE-AC Gateway is a professional-grade security platform that supports up to 10 Gbps firewalls, 2 Gbps firewalls and intrusion prevention systems (IPS), or 2 Gbps IPSec VPNs, and delivers up to 45,000 new connections per second.

The SRX Series gateways are high-performance, network security solutions for enterprises and service providers. Their easy-to-manage platforms feature high port density, advanced security, and flexible connectivity. The SRX1400BASE-GE-AC gateway is a professional-grade security platform that is ideal for small and medium data centers, as well as enterprise, service provider, and mobile operator 10 GbE networks that require unified functionality, high performance, and service integration. The SRX1400BASE-GE-AC gateway supports up to 10 Gbps firewalls, 2 Gbps IPS/firewalls, or 2 Gbps IPSec VPNs, and provides up to 45,000 new connections per second. The SRX1400BASE-GE-AC gateway integrates multiple security services and networking functions into a single, highly available device in a standard 3RU modular design with front-panel serviceability. This gateway incorporates innovations to improve reliability, increase network availability, and support a specific level of performance for multiple concurrent security services in a given configuration. SRX branch gateways feature high-performance hardware-based Content Security Acceleration, Power over Ethernet (PoE), and Voice over IP (SIP) support.

SRX1400BASE-GE-AC Series Specifications:

Junos OS Proven Version Junos 10.4 Firewall Performance (Maximum) 10 Gbps IPS Performance (NSS 4.2.1) 2 Gbps AES256+SHA-1 / 3DES+SHA-1 VPN Performance 2 Gbps Maximum number of sessions 0.5 million Session creation rate (persistent, TCP, three-way) per second 45000 Junos OS Proven Version Junos 10.4 Firewall Performance (Maximum) 10 Gbps IPS Performance (NSS 4.2.1) 2 Gbps AES256+SHA-1 / 3DES+SHA-1 VPN Performance 2 Gbps Maximum number of sessions 0.5 million Session creation rate (persistent, TCP, three-way) per second 45000 Maximum number of security policies 40000 Maximum number of supported users Unlimited Maximum number of IOC card slots 1 (front) Fixed I/O ports GE Basic System 6 10/100/1000 RJ45 + 4 1000Base-X SFP + 2 1000Base-X SFP, which are used together for data management and clustering XGE Basic System 3 10GBase-X SFP plus + 6 10/100/1000 RJ45 + 1 1000Base-X SFP + 2 1000Base-X SFP, which are used together for data management and clustering Support CX111 3G Bridge Not applicable Internal connector for 3G Express card Not applicable LAN interfaces 16 x 10/100/1000 RJ45 16 x 1000Base-X SFP 2 x 10GBase-X XFP Support for accessibility features Active/passive, active/active Chassis cluster maintenance with minimal service level degradation Interface aggregation groups in a chassis cluster

AppSecure Services Application Identification: Yes Application Denial of Service (AppDoS) Protection: Yes AppTrack: Yes Dimensions and power supply Dimensions (W x H x D): 44.5 x 13.3 x 35.05 cm Weight: Basic chassis: 13.3 kg Chassis fully configured: 19.3 kg Power Module (AC): 100-127VAC, 60Hz, 13.0A Power module (DC): -40 – -72 VDC Maximum power consumption: 1100W (AC), 1050W (DC) Power supply redundancy: 1 + 1 Firewall Network-level attack detection: Yes DoS and DDoS protection: Yes TCP reassembly to protect fragmented packets: Yes Brute Force Attack Resistance: Yes SYN Cookie Protection: Yes IP address substitution in zones: Yes Malformed Packet Protection: Yes GPRS inspection with connection status monitoring: Yes Intrusion protection system Stateful Protocol Signatures: Yes Attack detection mechanisms: stateful signatures, abnormal protocol change detection (deflecting attacks that exploit application vulnerabilities), application identification Attack response mechanisms: connection reset, connection stop, session packet log, session summary report, email message, session setup Attack Notification Mechanisms: Structured Syslog Worm protection: Yes Inspection of SSL encrypted traffic: Yes Simplified installation using recommended policies: Yes Trojan protection: Yes Protection from spyware/adware and keyboard loggers: Yes Protection from other malware: Yes Protection against continuous attacks from infected systems: Yes Probing protection: Yes Cross-Site Request Forgery Protection: Yes Distributed Attacks – Combination of Stateful Signatures and Protocol Anomaly Detection: Yes Create your own attack signatures: Yes Access contexts for configuration: 500+ Changes to attack descriptions (port range, etc.): Yes Stream Signatures: Yes Protocol boundaries: Yes Stateful Protocol Signatures: Yes Approximate number of attacks reflected: 6000+ Detailed description of threats and information about threat removal/updates: Yes Create and implement appropriate application usage policies: Yes Create reports and audit trails about attackers and attack targets: Yes Deployment modes: Embedded or TAP