Juniper SRX100H

The SRX100H Security Gateway is an ideal solution for protecting small distributed enterprise networks, providing routing security and supporting firewalls with throughput up to 650 Mbps and IPsec VPN at 65 Mbps.

The SRX Series gateways are based on the Dynamic Service Delivery architecture, a versatile approach that simultaneously scales integrated network services and high throughput. They support a full suite of capabilities to combat existing and potential threats. The SRX100H security gateway provides routing security and supports firewalls with throughput up to 650 Mbps and IPsec VPN at 65 Mbps. The device is equipped with additional security features, including Unified Threat Management (UTM), which includes an intrusion prevention system (IPS), antivirus and spam filters, and web filtering. The SRX100H gateway is an optimal solution for protecting small distributed enterprise networks. With integration with a world-class network antivirus solution from Kaspersky Lab, Juniper Networks devices provide reliable protection of network traffic and email from viruses, worms, spyware, Trojans and other types of malware. SRX branch gateways feature high-performance Content Security Acceleration hardware processing, support for Power over Ethernet (PoE) and Voice over IP (SIP) technology.

SRX100H Features:

Tested JUNOS version: JUNOS 10.3 Firewall Performance (Maximum): 650 Mbps IPS Performance (NSS 4.2.1) 60 Mbps AES256+SHA-1 / 3DES+SHA-1 VPN Performance 65 Mbps Maximum number of sessions 16000 (512 MB DRAM) / 32000 (1 GB DRAM) Session creation speed (persistent, TCP, 3-way), per second 2,000 Maximum number of security policies 384 Maximum number of supported users Unlimited Maximum number of IOC card slots Not applicable Fixed I/O ports 8 x 10/100 Support CX111 3G Bridge Yes Internal slot for 3G Express card Not applicable Support WAN/LAN interfaces Not applicable Support for accessibility features Yes AppSecure Services Not applicable Firewall Network-level attack detection: Yes DoS and DDoS protection: Yes TCP reassembly to protect fragmented packets: Yes Brute Force Attack Resistance: Yes SYN Cookie Protection: Yes IP address substitution in zones: Yes Malformed Packet Protection: Yes

Intrusion protection system Stateful Protocol Signatures: Yes Attack Detection Mechanisms: Stateful Signatures, Protocol Abnormality Detection (mitigating attacks that exploit application vulnerabilities), Application Identification Attack response mechanisms: Connection reset, connection stop, session packet log, session summary report, email message, session setup Attack Notification Mechanisms: Structured System Log Worm protection: Yes Simplified installation using recommended policies: Yes Trojan protection: Yes Protection from spyware, adware and keyboard loggers: Yes Protection from other malware: Yes Protection against continuous attacks from infected systems: Yes Probing protection: Yes Cross-Site Request Forgery Protection: Yes Distributed attacks - combination of signatures with connection monitoring and protocol anomaly detection: Yes Create your own attack signatures: Yes Access contexts for configuration: 500+ Changes to attack descriptions (port range, etc.): Yes Flow Signatures: No Protocol boundaries: Yes Stateful Protocol Signatures: Yes Approximate number of attacks reflected: 5500+ Detailed threat description and threat mitigation/patches information: Yes Create and enforce appropriate application usage policies: Yes Create reports and audit trails about attackers and attack targets: Yes Deployment Modes: Embedded Dimensions and power supply Dimensions (L x W x H): 21.6 x 14.7 x 3.6 cm Weight [device and power supply]: Chassis: 1.1 kg Power Module (AC): 100-240V AC 30W Maximum power consumption: 30 W Average power consumption: 10 W