Juniper SRX650-BASE-SRE6-645DP

The SRX650-BASE-SRE6-645DP Security Gateway is an ideal solution for protecting regional offices in distributed enterprise networks, providing routing security and supporting firewalls with throughput up to 7.0 Gbps, IPsec VPN at 1.5 Gbps and IPS at 900 Mbps.

The SRX Series gateways are high-performance, network security solutions for enterprises and service providers. Their easy-to-manage platforms feature high port density, advanced security, and flexible connectivity. The SRX650-BASE-SRE6-645DP gateway is a 2RU device that integrates security, routing, switching, and WAN connectivity into one device. The SRX650-BASE-SRE6-645DP security gateway provides routing security and supports up to 7.0 Gbps firewalls, 1.5 Gbps IPsec VPN, and 900 Mbps IPS. The device is equipped with additional security features, including Unified Threat Management (UTM), which includes an intrusion prevention system (IPS), antivirus and antispam filters, and web filtering. The SRX650-BASE-SRE6-645DP gateway is the optimal solution for protecting regional offices in distributed corporate networks. It was recognized as the best multifunctional device in the Infrastructure category at the 2009 Las Vegas exhibition. The SRX gateways for branches feature high-performance hardware processing Content Security Acceleration, support for power over Ethernet (PoE) technology and VoIP (SIP) technology.

Specifications of SRX650-BASE-SRE6-645DP:

Tested JUNOS version: JUNOS 10.3 Firewall Performance (Maximum): 7 Gbps IPS Performance (NSS 4.2.1) 900 Mbps AES256+SHA-1 / 3DES+SHA-1 VPN Performance 1.5 Gbps Maximum number of sessions 512K (2GB DRAM) Session creation speed (persistent, TCP, 3-way), per second 30000 Maximum number of security policies 8192 Maximum number of supported users Unlimited Maximum number of IOC card slots Not applicable Fixed I/O ports 4 x 10/100/1000BASE-T Support CX111 3G Bridge Yes Internal connector for 3G Express card Not applicable Support WAN/LAN interfaces Dual T1/E1 port Four T1/E1 ports 16 x 1 10/100/1000, copper (PoE - optional) 24 x 1 10/100/1000, copper with 4 SFP ports (PoE - optional) 2 x 10 GbE SFP+ / 10 GbE Base-T, copper Support for accessibility features Yes AppSecure Services Not applicable Dimensions and power supply Dimensions (L x W x H): 44.4 x 46.2 x 8.8 cm Weight: Chassis: 11.3 kg Without interface modules, 1 power supply Power module (AC): 100-240 VAC, single 250 W or dual 250 W Maximum power consumption: 247 W (with reserve), 494 W (without reserve) Average power consumption: 122 W

Firewall Network-level attack detection: Yes DoS and DDoS protection: Yes TCP reassembly to protect fragmented packets: Yes Brute Force Attack Resistance: Yes SYN Cookie Protection: Yes IP address substitution in zones: Yes Malformed Packet Protection: Yes Intrusion protection system Stateful Protocol Signatures: Yes Attack Detection Mechanisms: Stateful Signatures, Protocol Abnormality Detection (mitigating attacks that exploit application vulnerabilities), Application Identification Attack response mechanisms: Connection reset, connection stop, session packet log, session summary report, email message, session setupAttack notification mechanisms: Structured system log Worm protection: Yes Inspection of SSL encrypted traffic: Yes Simplified installation using recommended policies: Yes Trojan protection: Yes Protection from spyware, adware and keyboard loggers: YesProtection from other malware: Yes Protection against continuous attacks from infected systems: Yes Probing protection: Yes Cross-Site Request Forgery Protection: Yes Distributed attacks - combination of signatures with connection monitoring and protocol anomaly detection: Yes Create your own attack signatures: Yes Configuration access contexts: 500+ Changes to attack descriptions (port range, etc.): Yes Stream Signatures: Yes Protocol boundaries: Yes Stateful Protocol Signatures: Yes Approximate number of attacks reflected: 5500+ Detailed threat description and threat mitigation/patches information: Yes Create and enforce appropriate application usage policies: Yes Create reports and audit trails about attackers and attack targets: Yes Deployment modes: Embedded or TAP