Juniper SRX210B

The SRX210B Security Gateway provides routing security and supports up to 750 Mbps firewalls, 75 Mbps IPsec VPN, and 80 Mbps IPS, making it ideal for protecting small distributed enterprise networks.

The SRX Series gateways are based on the Dynamic Service Delivery architecture, a versatile approach that simultaneously scales integrated network services and high throughput. They support a full suite of capabilities to combat existing and potential threats. The SRX210B Security Gateway provides routing security and supports firewalls with throughput up to 750 Mbps, IPsec VPN at 75 Mbps, and IPS at 80 Mbps. The device is equipped with additional security features, including Unified Threat Management (UTM), which includes an intrusion prevention system (IPS), antivirus and spam filters, and web filtering. The SRX210B gateway operates on wired and wireless 3G networks and is ideal for protecting small distributed enterprise networks. It was named the best all-in-one device in the SMB Infrastructure category at the 2009 Tokyo Show. The SRX branch gateways feature high-performance Content Security Acceleration hardware processing, support for Power over Ethernet (PoE) and VoIP (SIP) technology.

SRX210B Features:

Tested JUNOS version: JUNOS 10.3 Firewall Performance (Maximum): 750 Mbps IPS Performance (NSS 4.2.1) 80 Mbps AES256+SHA-1 / 3DES+SHA-1 VPN Performance 75 Mbps Maximum number of sessions 32000 (512 MB DRAM) / 64000 (1 GB DRAM) Session creation speed (persistent, TCP, 3-way), per second 2000 Maximum number of security policies 512 Maximum number of supported users Unlimited Maximum number of IOC card slots Not applicable Fixed I/O ports 2 x 10/100/1000BASE-T and 6 x 10/100 Support CX111 3G Bridge Yes Internal slot for 3G Express card Yes Support WAN/LAN interfaces T1/E1 ADSL2 Annex A ADSL2 Annex B G.SHDSL VDSL2 Cable modem DOCSIS 3.0 SFP Sync Serial Support for accessibility features Yes AppSecure Services Not applicable Dimensions and power supply Dimensions (L x W x H): 28.2 x 18 x 4.4 cm Weight: Chassis: 1.5 kg, non-PoE / 2 kg, PoE Without interface modules Power Module (AC): 100-240V AC 60W (Non-PoE) / 150W PoE Maximum power consumption: 50 W Average power consumption: 27 W in base memory mode (LM), 28 W in extended memory mode (HM), 84 W (PoE)

Firewall Network-level attack detection: Yes DoS and DDoS protection: Yes TCP reassembly to protect fragmented packets: Yes Brute Force Attack Resistance: Yes SYN Cookie Protection: Yes IP address substitution in zones: Yes Malformed Packet Protection: Yes Intrusion protection system Stateful Protocol Signatures: Yes Attack Detection Mechanisms: Stateful Signatures, Protocol Abnormality Detection (mitigating attacks that exploit application vulnerabilities), Application Identification Attack response mechanisms: Connection reset, connection stop, session packet log, session summary report, email message, session setup Attack Notification Mechanisms: Structured System Log Worm protection: Yes Simplified installation using recommended policies: Yes Trojan protection: Yes Protection from spyware, adware and keyboard loggers: Yes Protection from other malware: Yes Protection against continuous attacks from infected systems: Yes Probing protection: Yes Cross-Site Request Forgery Protection: Yes Distributed attacks - combination of signatures with connection monitoring and protocol anomaly detection: Yes Create your own attack signatures: Yes Access contexts for configuration: 500+ Changes to attack descriptions (port range, etc.): Yes Stream Signatures: Yes Protocol boundaries: Yes Stateful Protocol Signatures: Yes Approximate number of attacks reflected: 5500+ Detailed threat description and threat mitigation/patches information: Yes Create and enforce appropriate application usage policies: Yes Create reports and audit trails about attackers and attack targets: Yes Deployment Modes: Embedded