Juniper SRX220H

The SRX220H Security Gateway is an ideal solution for protecting small to medium-sized distributed enterprise networks, providing routing security and supporting up to 950 Mbps firewalls, 100 Mbps IPsec VPN, and 100 Mbps IPS.

The SRX Series gateways are based on the Dynamic Service Delivery architecture, a versatile approach that simultaneously scales integrated network services and high throughput. They support a full suite of capabilities to combat existing and potential threats. The SRX220H security gateway provides routing security and supports firewalls with throughput up to 950 Mbps, IPsec VPN at 100 Mbps and IPS at 100 Mbps. The device is equipped with additional security features, including Unified Threat Management (UTM), which includes an intrusion prevention system (IPS), antivirus and spam filters, and web filtering. The SRX220H gateway is an optimal solution for protecting distributed small and medium-sized enterprise networks. SRX branch gateways feature high-performance hardware-based Content Security Acceleration, support for Power over Ethernet (PoE) technology and Voice over IP (SIP) technology.

SRX220H Specifications:

Tested JUNOS version: JUNOS 10.3 Firewall Performance (Maximum): 950 Mbps IPS Performance (NSS 4.2.1) 100 Mbps AES256+SHA-1 / 3DES+SHA-1 VPN Performance 100 Mbps Maximum number of sessions 96000 (1GB DRAM) Session creation speed (persistent, TCP, 3-way), per second 2500 Maximum number of security policies 2048 Maximum number of supported users Unlimited Maximum number of IOC card slots Not applicable Fixed I/O ports 8 x 10/100/1000BASE-T Support CX111 3G Bridge Yes Internal slot for 3G Express card Not applicable Support WAN/LAN interfaces T1/E1 ADSL2 Annex A ADSL2 Annex B G.SHDSL VDSL2 Cable modem DOCSIS 3.0 SFP* Sync Serial Note: *Supported since Q4 2010 Support for accessibility features Yes* Note: *Supported since Q4 2010 AppSecure Services Not applicable Firewall Network-level attack detection: Yes DoS and DDoS protection: Yes TCP reassembly to protect fragmented packets: Yes Brute Force Attack Resistance: Yes SYN Cookie Protection: Yes IP address substitution in zones: Yes Malformed Packet Protection: Yes

Intrusion protection system Stateful Protocol Signatures: Yes Attack Detection Mechanisms: Stateful Signatures, Protocol Abnormality Detection (mitigating attacks that exploit application vulnerabilities), Application Identification Attack response mechanisms: Connection reset, connection stop, session packet log, session summary report, email message, session setup Attack Notification Mechanisms: Structured System Log Worm protection: Yes Simplified installation using recommended policies: Yes Trojan protection: Yes Protection from spyware, adware and keyboard loggers: Yes Protection from other malware: Yes Protection against continuous attacks from infected systems: Yes Probing protection: Yes Cross-Site Request Forgery Protection: Yes Distributed attacks - combination of signatures with connection monitoring and protocol anomaly detection: Yes Create your own attack signatures: Yes Access contexts for configuration: 500+ Changes to attack descriptions (port range, etc.): Yes Stream Signatures: Yes Protocol boundaries: Yes Stateful Protocol Signatures: Yes Approximate number of attacks reflected: 6000+ Detailed threat description and threat mitigation/patches information: Yes Create and enforce appropriate application usage policies: Yes Create reports and audit trails about attackers and attack targets: Yes Deployment Modes: Embedded Dimensions and power supply Dimensions (L x W x H): 36.3 x 18.1 x 4.4 cm Weight: Chassis: 1.56 kg, non-PoE, without interface modules Power Module (AC), 100-240V AC, 60W (non-PoE) / 200W PoE Maximum power consumption: 120 W Average power consumption: 28 W (NM)