Juniper SRX240H-DC

The SRX240H-DC Security Gateway is an ideal solution for protecting branch offices in distributed enterprise networks, providing routing security and supporting firewalls with throughput up to 1.5 Gbps, IPsec VPN at 250 Mbps, and IPS at 250 Mbps.

The SRX Series gateways are high-performance, network security solutions for enterprises and service providers. Their easy-to-manage platforms feature high port density, advanced security, and flexible connectivity. The SRX240H-DC gateway is a 1 RU device that consolidates security, routing, switching, and WAN connectivity in a single solution. The SRX240H-DC security gateway provides routing security and supports firewalls with throughput up to 1.5 Gbps, IPsec VPN at 250 Mbps, and IPS at 250 Mbps. The device is equipped with additional security features, including Unified Threat Management (UTM), which includes an intrusion prevention system (IPS), antivirus and spam filters, and web filtering. The SRX240H-DC gateway is an optimal solution for protecting branch offices in distributed enterprise networks. SRX branch gateways feature high-performance Content Security Acceleration hardware processing, support for Power over Ethernet (PoE) and Voice over IP (SIP) technology.

SRX240H-DC Specifications:

Tested JUNOS version: JUNOS 10.3 Firewall Performance (Maximum): 1.5 Gbps IPS Performance (NSS 4.2.1) 250 Mbps AES256+SHA-1 / 3DES+SHA-1 VPN Performance 250 Mbps Maximum number of sessions 64000 (512 MB DRAM) / 128000 (1 GB DRAM) Session creation speed (persistent, TCP, 3-way), per second 9000 Maximum number of security policies 4096 Maximum number of supported users Unlimited Maximum number of IOC card slots Not applicable Fixed I/O ports 16 x 10/100/1000BASE-T Support CX111 3G Bridge Yes Internal connector for 3G Express card Not applicable Support WAN/LAN interfaces T1/E1 ADSL2 Annex A ADSL2 Annex B G.SHDSL VDSL2 Cable modem DOCSIS 3.0 SFP Sync Serial Support for accessibility features Yes AppSecure Services Not applicable Dimensions and power supply Dimensions (L x W x H): 44.4 x 40.8 x 4.4 cm Weight: Chassis: 5.1 kg Non-PoE / 5.6 kg PoE Without interface modules Power supply: 100-240 VAC 150 W Non-PoE / 350 W PoE Maximum power consumption: 150 W Average power consumption: 61W (LM), 65W (HM), 179W (PoE)

Firewall Network-level attack detection: Yes DoS and DDoS protection: Yes TCP reassembly to protect fragmented packets: Yes Brute Force Attack Resistance: Yes SYN Cookie Protection: Yes IP address substitution in zones: Yes Malformed Packet Protection: Yes Intrusion protection system Stateful Protocol Signatures: Yes Attack Detection Mechanisms: Stateful Signatures, Protocol Abnormality Detection (mitigating attacks that exploit application vulnerabilities), Application Identification Attack response mechanisms: Connection reset, connection stop, session packet log, session summary report, email message, session setupAttack notification mechanisms: Structured system log Worm protection: Yes Simplified installation using recommended policies: Yes Trojan protection: Yes Protection from spyware, adware and keyboard loggers: Yes Protection from other malware: Yes Protection against continuous attacks from infected systems: Yes Probing protection: Yes Cross-Site Request Forgery Protection: Yes Distributed attacks - combination of signatures with connection monitoring and protocol anomaly detection: Yes Create your own attack signatures: Yes Access contexts for configuration: 500+ Changes to attack descriptions (port range, etc.): Yes Stream Signatures: Yes Protocol boundaries: Yes Stateful Protocol Signatures: Yes Approximate number of attacks reflected: 5,500+ Detailed threat description and threat mitigation/patches information: Yes Create and enforce appropriate application usage policies: Yes Create reports and audit trails about attackers and attack targets: Yes Deployment Modes: Embedded