Juniper SRX3600BASE-AC

The Juniper SRX3600BASE-AC Gateway is ideal for protecting midsize and large enterprise data centers, supporting up to 30Gbps firewalls, 10Gbps firewalls and IPS, or 10Gbps IPsec VPN, and delivering up to 175,000 new connections per second.

The SRX Series gateways are high-performance, network security solutions for enterprises and service providers. Their easy-to-manage platforms feature high port density, advanced security features, and flexible connectivity. The Juniper SRX3600BASE-AC gateway is a next-generation security platform that delivers the highest performance, scalability, and service integration in a mid-range form factor. The Juniper SRX3600BASE-AC gateway supports up to 30 Gbps firewalls, 10 Gbps firewalls and IPS, or 10 Gbps IPsec VPN, and provides up to 175,000 new connections per second. The SRX series gateways are equipped with all the security features. SRX is the optimal solution for protecting midsize and large enterprise data centers, data centers on provider premises or leased from providers, as well as next-generation services and applications. SRX branch gateways feature high-performance Content Security Acceleration hardware processing, support for Power over Ethernet (PoE) and Voice over IP (SIP) technology.

SRX3600BASE-AC Specifications:

Tested JUNOS version: Junos 10.2 Firewall Performance (Maximum): 30 Gbps IPS Performance (NSS 4.2.1) 10 Gbps AES256+SHA-1 / 3DES+SHA-1 VPN Performance 10 Gbps Maximum number of sessions 2.25 million Session creation speed (persistent, TCP, 3-way), per second 175,000 Maximum number of security policies 40,000 Maximum number of supported users Unrestricted Maximum number of IOC card slots 6 (front connectors) Fixed I/O ports 8 10/100/1000 + 4 SFP Support CX111 3G Bridge Not applicable Internal connector for 3G Express card Not applicable LAN interfaces 16 x 1 10/100/1000, copper 16 x 1 Gigabit Ethernet SFP Transceivers 2 x 10 Gigabit Ethernet XFP Support for accessibility features Active/passive, active/active Chassis cluster maintenance with minimal service level degradation Interface aggregation groups in a chassis cluster AppSecure Services Application identification: yes Application protection against denial of service (AppDoS) attacks: yes AppTrack: yes Firewall Network-level attack detection: Yes DoS and DDoS protection: Yes TCP reassembly to protect fragmented packets: Yes Brute Force Attack Resistance: Yes SYN Cookie Protection: Yes IP address substitution in zones: Yes Malformed Packet Protection: Yes GPRS inspection with connection status monitoring: Yes

Intrusion protection system Stateful Protocol Signatures: Yes Attack Detection Mechanisms: Stateful Signatures, Protocol Abnormality Detection (mitigating attacks that exploit application vulnerabilities), Application Identification Attack response mechanisms: Connection reset, connection stop, session packet log, session summary report, email message, session setupAttack notification mechanisms: Structured system log Worm protection: Yes Inspection of SSL encrypted traffic: Yes Simplified installation using recommended policies: Yes Trojan protection: Yes Protection from spyware/adware and keyloggers: YesProtection from other malware: Yes Protection against continuous attacks from infected systems: Yes Probing protection: Yes Cross-Site Request Forgery Protection: Yes Distributed attacks - combination of signatures with connection monitoring and protocol anomaly detection: Yes Create your own attack signatures: Yes Configuration access contexts: 500+ Changes to attack descriptions (port range, etc.): Yes Stream Signatures: Yes Protocol boundaries: Yes Stateful Protocol Signatures: Yes Approximate number of attacks reflected: 6,000+ Detailed description of threats and information about threat elimination/patches: Yes Create and enforce appropriate application usage policies: Yes Create reports and audit trails about attackers and attack targets: Yes Deployment modes: Embedded or TAP Dimensions and power supply Dimensions (L x W x H): 44.5 x 64.8 x 22.2 cm (17.5 x 25.5 x 8.75 in) Weight: Chassis: 19.8 kg, full configuration: 52.6 kg Power module (AC): 100-240VAC Power module (DC): -40 – -72 VDC Maximum power consumption: 1750W (AC), 1850W (DC) Redundant power supply support: 2+1 / 2+2