Juniper SRX210H

The SRX210H Security Gateway provides routing security and supports up to 750Mbps firewalls, 75Mbps IPsec VPN, and 80Mbps IPS, making it ideal for protecting small distributed enterprise networks.

The SRX100H Security Gateway provides routing security and supports firewalls with throughput up to 650 Mbps and IPsec VPN at 65 Mbps. It also features additional security features, including Unified Threat Management (UTM), which includes an intrusion prevention system (IPS), antivirus and antispam filters, and web filtering. The SRX100 is an ideal solution for protecting small distributed enterprise networks. The SRX210H Security Gateway provides routing security and supports firewalls with throughput up to 750 Mbps, IPsec VPN at 75 Mbps, and IPS at 80 Mbps. It also features additional security features, including Unified Threat Management (UTM), which includes an intrusion prevention system (IPS), antivirus and antispam filters, and web filtering. The SRX210H gateway operates on wired and wireless 3G networks and is ideal for protecting small distributed enterprise networks. It was recognized as the best multifunctional device in the SMB Infrastructure category at the 2009 Tokyo exhibition. The SRX gateways for branch offices feature high-performance hardware processing Content Security Acceleration, support for Power over Ethernet (PoE) technology and VoIP (SIP) technology.

SRX210H Features:

Tested JUNOS version: JUNOS 10.3 Firewall Performance (Maximum): 750 Mbps IPS Performance (NSS 4.2.1) 80 Mbps AES256+SHA-1 / 3DES+SHA-1 VPN Performance 75 Mbps Maximum number of sessions 32000 (512 MB DRAM) / 64000 (1 GB DRAM) Session creation speed (persistent, TCP, 3-way), per second 2000 Maximum number of security policies 512 Maximum number of supported users Unlimited Maximum number of IOC card slots Not applicable Fixed I/O ports 2 x 10/100/1000BASE-T and 6 x 10/100 Support CX111 3G Bridge Yes Internal slot for 3G Express card Yes Support WAN/LAN interfaces T1/E1 ADSL2 Annex A ADSL2 Annex B G.SHDSL VDSL2 Cable modem DOCSIS 3.0 SFP Sync Serial Support for accessibility features Yes AppSecure Services Not applicable Dimensions and power supply Dimensions (L x W x H): 28.2 x 18 x 4.4 cm Weight: Chassis: 1.5 kg, non-PoE / 2 kg, PoE Without interface modules Power Module (AC): 100-240V AC 60W (Non-PoE) / 150W PoE Maximum power consumption: 50 W Average power consumption: 27 W in base memory mode (LM), 28 W in extended memory mode (HM), 84 W (PoE)

Firewall Network-level attack detection: Yes DoS and DDoS protection: Yes TCP reassembly to protect fragmented packets: Yes Brute Force Attack Resistance: Yes SYN Cookie Protection: Yes IP address substitution in zones: Yes Malformed Packet Protection: Yes Intrusion protection system Stateful Protocol Signatures: Yes Attack Detection Mechanisms: Stateful Signatures, Protocol Abnormality Detection (mitigating attacks that exploit application vulnerabilities), Application Identification Attack response mechanisms: Connection reset, connection stop, session packet log, session summary report, email message, session setup Attack Notification Mechanisms: Structured System Log Worm protection: Yes Simplified installation using recommended policies: Yes Trojan protection: Yes Protection from spyware, adware and keyboard loggers: Yes Protection from other malware: Yes Protection against continuous attacks from infected systems: Yes Probing protection: Yes Cross-Site Request Forgery Protection: Yes Distributed attacks - combination of signatures with connection monitoring and protocol anomaly detection: Yes Create your own attack signatures: Yes Access contexts for configuration: 500+ Changes to attack descriptions (port range, etc.): Yes Stream Signatures: Yes Protocol boundaries: Yes Stateful Protocol Signatures: Yes Approximate number of attacks reflected: 5500+ Detailed threat description and threat mitigation/patches information: Yes Create and enforce appropriate application usage policies: Yes Create reports and audit trails about attackers and attack targets: Yes Deployment Modes: Embedded