SRX Juniper PDF

Data Sheet
SRX Series Services

Gateways for the Branch
SRX100, SRX110, SRX210, SRX220, SRX240, SRX550, and SRX650
Product Overview Product Description

SRX Series Services Gateways for The Juniper Networks® SRX Series Services Gateways for the branch combine next
the branch are next-generation generation firewall and unified threat management (UTM) services with routing and
security gateways that provide switching in a single, high-performance, cost-effective network device.
essential capabilities that
connect, secure, and manage • SRX Series for the branch runs Juniper Networks Junos® operating system, the proven
workforce locations sized from OS that is used by core Internet routers in all of the top 100 service providers around the
handfuls to hundreds of users. By world. The rigorously tested carrier-class routing features of IPv4/IPv6, OSPF, BGP, and
consolidating fast, highly available multicast have been proven in over 15 years of worldwide deployments.
switching, routing, security,
• SRX Series for the branch provides perimeter security, content security, application
and next generation firewall
visibility, tracking and policy enforcement, user role-based control, threat intelligence
capabilities in a single device,
through integration with Juniper Networks Spotlight Secure*, and network-wide threat
enterprises can protect their
resources as well as economically visibility and control. Using zones and policies, network administrators can configure
deliver new services, safe and deploy branch SRX Series gateways quickly and securely. Policy-based VPNs
connectivity, and a satisfying end- support more complex security architectures that require dynamic addressing and
user experience. All SRX Series split tunneling. The SRX Series also includes wizards for firewall, IPsec VPN, Network
Services Gateways, including Address Translation (NAT), and initial setup to simplify configurations out of the box.
products scaled for Enterprise
• For content security, SRX Series for the branch offers a complete suite of next
branch, Enterprise edge, and
generation firewall, unified threat management (UTM) and threat intelligence
Data Center applications, are
services consisting of: intrusion prevention system (IPS), application security
powered by Junos OS—the proven
operating system that provides (AppSecure), user role-based firewall controls, on-box and cloud-based antivirus,
unmatched consistency, better antispam, and enhanced Web filtering to protect your network from the latest
performance with services, and content-borne threats. Integrated threat intelligence via Spotlight Secure offers
superior infrastructure protection adaptive threat protection against command and control (C&C) related botnets and
at a lower total cost of ownership. policy enforcement based on GeoIP and attacker fingerprinting technology (the latter
for Web application protection)—all of which are based on Juniper provided feeds.
Customers may also leverage their own custom and third-party feeds for protection
from advanced malware and other threats. The branch SRX Series integrates with
other Juniper security products to deliver enterprise-wide unified access control
(UAC) and adaptive threat management.
• SRX Series for the branch are secure routers that bring high performance and proven
deployment capabilities to enterprises that need to build a worldwide network of
thousands of sites. The wide variety of options allow configuration of performance,
functionality, and price scaled to support from a handful to thousands of users.
Ethernet, serial, T1/E1, DS3/E3, xDSL, Wi-Fi, and 3G/4G LTE wireless are all available
options for WAN or Internet connectivity to securely link your sites. Multiple form factors
allow you to make cost-effective choices for mission-critical deployments. Managing
the network is easy using the proven Junos OS command-line interface (CLI), scripting
capabilities, a simple-to-use Web-based GUI, or Juniper Networks Junos® Space
Security Director for centralized management.
*Available on SRX550 and higher devices
1
SRX Series Services Gateways for the Branch Data Sheet
Architecture and Key Components

Key Hardware Features of the Branch SRX Series Products
Product Description
SRX100 Services • Eight 10/100 Ethernet LAN ports and 1 USB port (support for 3G USB)
Gateway • Full UTM1; antivirus1, antispam1, enhanced Web filtering1, and content filtering
• Intrusion prevention system1, AppSecure1
• 2 GB DRAM, 2 GB flash default
SRX110 Services • VDSL/ADSL2+ and Ethernet WAN interfaces
Gateway • Eight 10/100 Ethernet LAN ports and two USB port (support for 3G USB)
• Full UTM1; antivirus1, antispam1, enhanced Web filtering1, intrusion prevention system1, AppSecure1
• Unified Access Control (UAC) and content filtering
• 2 GB DRAM, 2 GB CF default
SRX210 Services • Two 10/100/1000 Ethernet and 6 10/100 Ethernet LAN ports, 1 Mini-PIM slot, and 2 USB ports (support for 3G USB)
Gateway • Factory option of 4 dynamic Power over Ethernet (PoE) ports 802.3af
• Support for T1/E1, serial, ADSL/2/2+, VDSL, G.SHDSL, and Ethernet small form-factor pluggable transceiver (SFP)
• Content Security Accelerator hardware for faster performance of IPS and ExpressAV (with high memory version)
• Full UTM1; antivirus1, antispam1, enhanced Web filtering1, and content filtering
• Intrusion prevention system1, User role-based firewall, and AppSecure1
• 2 GB DRAM, 2 GB flash default
SRX220 Services • Eight 10/100/1000 Ethernet LAN ports, 2 Mini-PIM slots
Gateway • Factory option of 8 PoE ports; PoE+ 802.3at, backwards compatible with 802.3af
• Support for T1/E1, serial, ADSL2/2+, VDSL, G.SHDSL, and Ethernet SFP
• Content Security Accelerator hardware for faster performance of IPS and ExpressAV
• Intrusion prevention system1, User role-based firewall and AppSecure1
• 2 GB DRAM, 2 GB CF default
SRX240 Services • 16 10/100/1000 Ethernet LAN ports, 4 Mini-PIM slots
Gateway • Factory option of 16 PoE ports; PoE+ 802.3at, backwards compatible with 802.3af
• Support for T1/E1, serial, ADSL2/2+, VDSL, G.SHDSL, and Ethernet SFP
• Intrusion prevention system1, AppSecure1
SRX550 Services • Ten fixed Ethernet ports (6 10/100/1000 copper, 4 SFP), 2 Mini-PIM slots, 6 GPIM slots or multiple GPIM and XPIM
Gateway combinations
• Support for T1/E1, serial, ADSL2/2+, VDSL, G.SHDSL, DS3/E3, Gigabit Ethernet ports; supports up to 52 Ethernet
ports including SFP; 40 switch ports with optional PoE including 802.3at, PoE+, backwards compatible with 802.3af
(or 50 non-PoE 10/100/1000 copper ports)
• Threat intelligence for protection from command and control (C&C) botnets, Web application threats, and advanced
malware, and policy enforcement based on GeoIP data
• 2 GB DRAM default, 2 GB compact flash default (SRX550)
• 4 GB DRAM default, 8 GB compact flash default (SRX550 High Memory)
• Optional redundant AC power; standard AC power supply that is PoE-ready; PoE power up to 250 watts single power
supply or 500 watts dual power supply
SRX650 Services • F our fixed ports 10/100/1000 Ethernet LAN ports, 8 GPIM slots or multiple GPIM and XPIM combinations
Gateway • Support for T1, E1, DS3/E3, Ethernet ports; supports up to 52 Ethernet ports including SFP; 48 switch ports with
optional PoE including 802.3at, PoE+, backwards compatible with 802.3af (or 52 non-PoE 10/100/1000 copper ports)
• Threat intelligence for protection from command and control (C&C) botnets, Web application threats, and advanced
malware, and policy enforcement based on GeoIP data
• Modular Services and Routing Engine; future internal failover and hot-swap
• 2 GB DRAM default, 2 GB compact flash default, external compact flash slot for additional storage
• Optional redundant AC power; standard AC power supply that is PoE-ready; PoE power up to 250 watts single power
supply or 500 watts dual power supply
Network Deployments
The SRX Series Services Gateways for the branch are deployed at remote, branch and Enterprise edge locations in the network to
provide all-in-one secure WAN connectivity, and connection to local PCs and servers via integrated Ethernet switching.
1
Unified Threat Management—antivirus, antispam, Web filtering, AppSecure, and IPS require a subscription license option to use the feature. UTM is not supported on the low memory version.
Please see the ordering section for options. Content Filtering and UAC are part of the base software with no additional license.
2
Features and Benefits Adaptive Threat Intelligence

Next Generation Firewall To address the evolving threat landscape that has made it
imperative to integrate external threat intelligence into the
SRX Series Services Gateways deliver next generation firewall
firewall for thwarting advanced malware and other threats, some
protection with application awareness and extensive user role-
SRX Series Services Gateways include threat intelligence via
based control options plus best-
“Untrust” Zone integration with Spotlight Secure. The Spotlight Secure threat
of-breed UTM to protect and
intelligence platform aggregates threat feeds from multiple
control your business assets.
INTERNET sources to deliver open, consolidated, actionable intelligence to
Next generation firewalls are
SRX Series Services Gateways across the organization for policy
able to perform full packet
enforcement. These sources include Juniper threat feeds, third
inspection and can apply
party threat feeds and threat detection technologies that the
security policies based on layer 7
customer can deploy.
information. This means you can
“Trust” Zone
create security policies based on Administrators are able to define enforcement policies from all
the application running across feeds via a single, centralized management point, Junos Space
your network, the user who is Security Director.
Intranet
receiving or sending network
traffic or the content that is
Secure Routing
“Guest” Zone
“DMZ” Zone
traveling across your network Many organizations use both a router and a firewall/VPN at their
Figure 1: Firewalls, zones, to protect your environment network edge to fulfill their networking and security needs. For
and policies against threats, manage how many organizations, the SRX Series for the branch can fulfill
your network bandwidth is allocated, and control who has access both roles with one solution. Juniper built best-in-class routing,
to what. switching and firewall capabilities into one product.
SRX Series for the branch checks the traffic to see if it is

AppSecure
legitimate and permissible, and only forwards it on when it is.
AppSecure is a suite of application security capabilities for This reduces the load on the network, allocates bandwidth for all
Juniper Networks SRX Series services Gateways that identifies other mission-critical applications, and secures the network from
applications for greater visibility, enforcement, control, and malicious users.
protection of the network.
The main purpose of a secure router is to provide firewall
Intrusion Prevention protection and apply policies. The firewall (zone) functionality
The intrusion prevention system (IPS) understands application inspects traffic flows and state to ensure that originating and
behaviors and weaknesses to prevent application-borne security returning information in a session is expected and permitted for
threats that are difficult to detect and stop. a particular zone. The security policy determines if the session
can originate in one zone and traverse to another zone. Due to
Unified Threat Management (UTM) the architecture, SRX Series receives packets from a wide variety
SRX Series can include comprehensive content security against of clients and servers and keeps track of every session, of every
malware, viruses, phishing attacks, intrusions, spam and other application, and of every user. This allows the enterprise to make
threats with unified threat management (UTM). Get a best- sure that only legitimate traffic is on its network and that traffic is
of-breed solution with anti-virus, anti-spam, web filtering and flowing in the expected direction.
content filtering at a great value by easily adding these services
to your SRX Series Services Gateway. Cloud-based and on-box High Availability
solutions are both available. Junos Services Redundancy Protocol (JSRP) is a core feature
of the SRX Series for the branch. JSRP enables a pair of SRX
User Firewall
Series systems to be easily integrated into a high availability
Juniper offers a range of user role-based firewall control solutions
network architecture, with redundant physical connections
that support dynamic security policies. User role-based firewall
between the systems and the adjacent network switches. With
capabilities are integrated with the SRX Series Services Gateways
link redundancy, Juniper Networks can address many common
for standard next generation firewall controls. More extensive,
causes of system failures, such as a physical port going bad
scalable, granular access controls for creating dynamic policies
or a cable getting disconnected, to ensure that a connection
are available through the integration of SRX with a Juniper
is available without having to fail over the entire system. This
Unified Access Control solution.
is consistent with a typical active/standby nature of routing
resiliency protocols.
3
Active/Standby Active/Standby Active/Active
INTERNET INTERNET INTERNET
SRX240 SRX240 SRX240 SRX240 SRX240 SRX2

Active Standby Failure Active Active
EX Series EX Series EX Series EX Series EX Series EX
Active/Standby Active/Active Active/Active
INTERNET INTERNET INTERNET
X240 SRX240 SRX240 SRX240 SRX240 SRX240

Active Active Active Failure Active
es EX Series EX Series EX Series EX Series EX Series
Figure 2: High availability
When SRX Series Services Gateways for the branch are the forwarding table along with a pointer to the next-hop route.
configured as an active/active HA pair, traffic and configuration Established sessions have a single table lookup to verify that the
is mirrored automatically to provide active firewall and VPN session has been permitted and to find the next hop. This efficient
session maintenance in case of a failure. The branch SRX Series algorithm improves throughput and lowers latency for session
synchronizes both configuration and runtime information. As a traffic when compared with a classic router that performs multiple
result, during failover, synchronization of the following information table lookups to verify session information and then to find a next-
is shared: connection/session state and flow information, IPSec hop route.
security associations, Network Address Translation (NAT) traffic,
Figure 3 shows the session-based forwarding algorithm. When a
address book information, configuration changes, and more. In
new session is established, the session-based architecture within
contrast to the typical router active/standby resiliency protocols
Junos OS verifies that the session is allowed by the forwarding
such as Virtual Router Redundancy Protocol (VRRP), all dynamic
policies. If the session is allowed, Junos OS will look up the next-
flow and session information is lost and must be reestablished
hop route in the routing table. It then inserts the session and the
in the event of a failover. Some or all network sessions will have
next-hop route into the session and forwarding table and forwards
to restart depending on the convergence time of the links or
the packet. Subsequent packets for the established session
nodes. By maintaining state, not only is the session preserved,
require a single table lookup in the session and forwarding table,
but security is kept intact. In an unstable network, this active/
and are forwarded to the egress interface.
active configuration also mitigates link flapping affecting session
performance.
Session Initial
Security Policy Evaluation
Packet Processing and Next-Hop Lookup
Session-Based Forwarding Without the
Table
Performance Hit Update
Session and
In order to optimize the throughput and latency of the combined Forwarding Table
Ingress Forwarding for Egress
router and firewall, Junos OS implements session-based Interface Permitted Traffic Interface
forwarding, an innovation that combines the session state Disallowed by
Policy: Dropped
information of a traditional firewall and the next-hop forwarding
of a classic router into a single operation. With Junos OS, a Figure 3: Session-based forwarding algorithm
session that is permitted by the forwarding policy is added to
4
3G
SRX110 SF.com SIP UC
Connectivity
Internet Facebook
Skype Server Server
Google
App Server
Small Office
Private Data Center
VDSL
Private WAN
SRX650 SRX650
WLC800 EX4200 EX4200
4G LTE
Hosted Web
Large HA Office Server Server T1/E1 VDSL T1/E1
4G LTE
SFP DS3/E3 SRX210
SRX240
CX111
SRX550 SRX550
WLC100 EX3300 EX3300
WLA532
Small Branch with

Mid-sized HA Branch Small, Link HA Branch Cellular Backup
Figure 4: The distributed enterprise
SRX100 SRX110 SRX210
SRX220 SRX240
SRX550 SRX650
5
Specifications • Weighted random early detection (WRED)

• Queuing based on VLAN, data-link connection identifier
Protocols
(DLCI), interface, bundles, or multi-field (MF) filters
• IPv4, IPv6, ISO Connectionless Network Service (CLNS)
• Guaranteed bandwidth
Routing and Multicast • Maximum bandwidth
• Static routes
• Ingress traffic policing
• RIPv2 +v1
• Priority-bandwidth utilization
• OSPF/OSPFv3
• DiffServ marking
• BGP
• Virtual channels
• BGP Router Reflector1
• IS-IS
Security
• Multicast (Internet Group Management Protocol Firewall
(IGMPv1/2/3), PIM-SM/DM/SSM, Session Description • Firewall, zones, screens, policies
Protocol (SDP), Distance Vector Multicast Routing Protocol
• Stateful firewall, stateless filters
(DVMRP), source-specific, Multicast inside IPsec tunnel),
MSDP • Network attack detection
• MPLS (RSVP, LDP, Circuit Cross-connect (CCC), Translational • Screens denial of service (DoS) and provides distributed
Cross-connect (TCC), Layer 2 VPN (VPLS), Layer 3 VPN, denial of service (DDoS) protection (anomaly-based)
VPLS, NGMVPN) • Prevent replay attack; Anti-Replay
IP Address Management • Unified Access Control
• Static -- TCP reassembly for fragmented packet protection

• DHCP, PPPoE client -- Brute force attack mitigation
• Internal DHCP server, DHCP Relay -- SYN cookie protection
Address Translation -- Zone-based IP spoofing
• Source NAT with Port Address Translation (PAT) -- Malformed packet protection
• Static NAT NGFW/UTM3

• Destination NAT with PAT • Intrusion Prevention System (IPS)
• Persistent NAT, NAT64 -- Protocol anomaly detection
Encapsulations -- Stateful protocol signatures

-- Intrusion prevention system (IPS) attack pattern
• Ethernet (MAC and VLAN tagged)
obfuscation
• Point-to-Point Protocol (PPP) (synchronous)
-- User role-based policies
-- Multilink Point-to-Point Protocol (MLPPP)
• Customer signatures creation
• Frame Relay
• Multiple times a week and emergency updates
-- Multilink Frame Relay (MLFR) (FRF.15, FRF.16), FRF.12, LFI
• AppSecure
• High-Level Data Link Control (HDLC)
-- AppTrack (application visibility and tracking)
• Serial (RS-232, RS-449, X.21, V.35, EIA-530)
-- AppFirewall (policy enforcement by application name)
• 802.1q VLAN support
-- Custom signatures
• Point-to-Point Protocol over Ethernet (PPPoE)
-- AppQoS (network traffic prioritization and bandwidth
L2 Switching2 management)
• 802.1Q, 802.1D, RSTP, MSTP, 802.3ad (LACP) -- Dynamic signature updates
• 802.1x, LLDP, 802.1ad (Q-in-Q), IGMP Snooping -- User-based application policy enforcement
• Layer 2 switching with high availability • Antivirus

-- Express AV (stream-based AV, not available on SRX100
Traffic Management Quality of Service (QoS) and SRX110)
• 802.1p, DSCP, EXP
-- File-based antivirus
• Marking, policing, and shaping
• Signature database
• Class-based queuing with prioritization
• Protocols scanned: POP3, HTTP, SMTP, IMAP, FTP
1
BGP Route Reflector supported on SRX550 and SRX650. See ordering section for more information.
2
As of Junos 15.1X49-D40, the SRX550 High Memory unit does not support xSTP, LLDP, 802.1x, Q-in-Q, IGMP Snooping and L2 switching with HA
3
Unified Threat Management – antivirus, antispam, Web filtering, AppSecure, and IPS require individual subscription license. UTM is not supported on the low memory version. Please see the
ordering section for options.
6
• Antispyware IPv6
• Anti-adware • OSPFv3
• Antikeylogger • RIPng
-- Cloud-based antivirus • IPv6 Multicast Listener Discovery (MLD)
• Antispam • BGP
• Integrated enhanced Web filtering • ISIS
-- Category granularity (90+ categories) Wireless
-- Real time threat score • CX111 Cellular 3G/4G/LTE Broadband Data Bridge supported
on all branch SRX Series devices
• Redirect Web filtering
• 3G USB modem support for SRX100, SRX110, and SRX210
• Content Security Accelerator in SRX210 high memory,
SRX220, SRX240, SRX550, and SRX6504 SLA, Measurement, and Monitoring
• ExpressAV option in SRX210 high memory, SRX220 high • Real-time performance monitoring (RPM)
memory, SRX240, SRX550, and SRX6504 • Sessions, packets, and bandwidth usage
• Content filtering • Juniper J-Flow monitoring and accounting services
-- Based on MIME type, file extension, and protocol • IP Monitoring
commands
Logging
VPN • Syslog
• Auto VPN (Zero Touch Hub) • Traceroute
• Tunnels (GRE, IP-IP, IPsec) • Extensive control- and data-plane structured and
• IPsec, Data Encryption Standard (DES) (56-bit), triple Data unstructured syslog
Encryption Standard (3DES) (168-bit), Advanced Encryption
Standard (AES) (128-bit+) encryption
Administration
• Juniper Networks Network and Security Manager support
• Message Digest 5 (MD5),SHA-1 , SHA-128, SHA-256
(NSM)
authentication
• Juniper Networks Junos Space Security Director support
• Junos Pulse Dynamic VPN client; browser-based remote
access feature requiring a license • Juniper Networks STRM Series Security Threat Response
• IPv4 and IPv6 VPN Managers support
• Multi-Proxy ID for site-to-site VPN • Juniper Networks Advanced Insight Solutions support
• External administrator database (RADIUS, LDAP, SecureID)
Multimedia Transport
• Auto-configuration
• Compressed Real-Time Transport Protocol (CRTP)
• Configuration rollback
High Availability
• Rescue configuration with button
• VRRP
• Commit confirm for changes
• JSRP
• Auto-record for diagnostics
• Stateful failover and dual box clustering
• Software upgrades (USB upgrade option)
• SRX550/SRX650:
• Juniper Networks J-Web
-- Redundant power (optional)
• Command-line interface
-- GPIM hot swap
• Smart image download
-- Future internal failover and SRE hot swap (OIR) on
SRX650 Certifications
• NEBS Compliance for SRX240, SRX6506
• Backup link via 3G/4G LTE wireless or other WAN
• Department of Defense (DoD) Certification for SRX Series
• Active/active—L3 mode5
Services Gateways, including testing and certification by the
• Active/passive—L3 mode5 Department of Defense Joint Interoperability Test Command
• Configuration synchronization5 (JITC) for interoperability with DoD networks and addition of
• Session synchronization for firewall and VPN5 the SRX Series Services Gateways to the Unified Capabilities
Approved Product List (UC APL)
• Session failover for routing change5
• Device failure detection5
• Link failure detection5
• IP Monitoring with route and interface failover
4
Unified Threat Management – antivirus, antispam, Web filtering, AppSecure and IPS require individual subscription license. UTM is not supported on the low memory version. Please see the
ordering section for options.
5
SRX100B installed with 1 GB DRAM, with 512 MB accessible. Optional upgrade to 1 GB DRAM is available with purchase of memory software license key.
6
Coming soon for SRX110 and SRX550.
7
Product Comparison
SRX100 SRX110 SRX210 SRX220 SRX240 SRX550 SRX650
Maximum Performance and Capacity

Junos OS version tested Junos OS Junos OS Junos OS Junos OS Junos OS Junos OS Junos OS
12.1X44-D15 12.1X44-D15 12.1X44-D15 12.1X44-D15 11.4R5 12.1/15.17 11.4R5
Firewall performance 700 Mbps 700 Mbps 850 Mbps 950 Mbps 1.8 Gbps 7 Gbps 7 Gbps
(large packets)
Firewall performance (IMIX) 200 Mbps 200 Mbps 250 Mbps 300 Mbps 600 Mbps 2 Gbps 2.5 Gbps
Firewall + routing PPS (64 Byte) 70 Kpps 70 Kpps 95 Kpps 125 Kpps 200 Kpps 700 Kpps 850 Kpps
Firewall performance8 (HTTP) 100 Mbps 100 Mbps 290 Mbps 350 Mbps 830 Mbps 2 Gbps 2 Gbps
IPsec VPN throughput (large 65 Mbps 65 Mbps 85 Mbps 100 Mbps 300 Mbps 1.0 Gbps 1.5 Gbps
packets)
IPsec VPN tunnels 128 128 256 512 1,000 2,000 3,000
AppSecure firewall throughput 8
90 Mbps 90 Mbps 250 Mbps 300 Mbps 750 Mbps 2.0 Gbps 1.9 Gbps
IPS (intrusion prevention system) 75 Mbps9 75 Mbps 65 Mbps 80 Mbps 230 Mbps 800 Mbps 1 Gbps
Antivirus 25 Mbps 25 Mbps 30 Mbps 35 Mbps 85 Mbps 300 Mbps 350 Mbps
(Sophos AV) (Sophos AV) (Sophos AV) (Sophos AV) (Sophos AV) (Sophos AV) (Sophos AV)
Connections per second 1,800 1,800 2,200 2,800 8,500 27,000 35,000
Maximum concurrent sessions 32 K 7
32 K 7
64 K 7
96 K 7
256 K 7
375 K 512 K
DRAM options 2 GB DRAM 2 GB DRAM 2 GB DRAM 2 GB DRAM 2 GB DRAM 2 GB/4 GB7 2 GB DRAM
DRAM
Maximum security policies 384 384 512 2,048 4,096 8,000 8,192
Maximum users supported Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted
Network Connectivity
Fixed I/O 8 x 10/100 8 x 10/100 2x 8x 16 x 6x 4x
VDSL/ 10/100/1000 10/100/1000 10/100/1000 10/100/1000 10/100/1000
ADSL2+ BASE-T + 6 x BASE-T BASE-T BASE-T + 4 BASE-T
WAN (Annex 10/100 SFP
A or B)
I/O slots N/A N/A 1 x SRX Series 2 x SRX 4 x SRX 2 x SRX 8 x GPIM
Mini-PIM Series Series Series or multiple
Mini-PIM Mini-PIM Mini-PIM, GPIM
6 x GPIM and XPIM
or multiple combinations
GPIM
and XPIM
combinations
Services and Routing Engine
No No No No No No 210
slots
See ordering See ordering See ordering See ordering See ordering
WAN/LAN interface options N/A N/A
information information information information information
Maximum number of PoE ports N/A N/A Up to 4 ports Up to 8 ports Up to 16 Up to 40 Up to 48
(PoE optional on some SRX of 802.3af of 802.3af/ ports of ports of ports of
Series models) with at with 802.3af/ 802.3af/ 802.3af/
maximum maximum at with at with at with
50 W 120 W maximum maximum maximum
150 W 247 W 247 W
USB 1 2 2 2 2 2 2 per SRE
7
Based on 2 GbE memory models, which require Junos OS 12.1X44-D15 (exception: Junos OS 11.4r5 for SRX240 only).
8
Throughput numbers based on HTTP traffic with 44 kilobyte transaction size.
9
Use software based IPS engine which has higher performance and less capacity
10
SRX650 supports a single Services and Routing Engine (SRE) as of software release 11.4.
8
Routing
Routing (Packet Mode) PPS 100Kpps 100Kpps 150Kpps 200Kpps 300Kpps 1000Kpps 1000Kpps
BGP instances 5 5 10 16 20 56 64
BGP peers 8 8 16 16 32 192 256
BGP routes 8K 8K 16 K 32 K 600 K 712 K 800 K
OSPF instances 4 4 10 16 20 56 64
OSPF routes 8K 8K 16 K 32 K 200 K 200 K 200 K
RIP v1 / v2 instances 4 4 10 16 20 56 64
RIP v2 routes 8K 8K 16 K 32 K 32 K 32 K 32 K
Static routes 8K 8K 16 K 32 K 100 K 100 K 100 K
Source-based routing Yes Yes Yes Yes Yes Yes Yes
Policy-based routing Yes Yes Yes Yes Yes Yes Yes
Equal-cost multipath (ECMP) Yes Yes Yes Yes Yes Yes Yes
Reverse path forwarding (RPF) Yes Yes Yes Yes Yes Yes Yes
IPsec VPN
Concurrent VPN tunnels 128 128 256 512 1,000 2,000 3,000
Tunnel interfaces 10 10 64 64 128 456 512
DES (56-bit), 3DES (168-bit) Yes Yes Yes Yes Yes Yes Yes
and AES (256-bit)
MD-5, SHA-1 and SHA-2 Yes Yes Yes Yes Yes Yes Yes
authentication
Manual key, Internet Key Yes Yes Yes Yes Yes Yes Yes
Exchange (IKE v1+v2), public key
infrastructure (PKI) (X.509)
Perfect forward secrecy (DH 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5
Groups)
Prevent replay attack Yes Yes Yes Yes Yes Yes Yes
Dynamic remote access VPN Yes Yes Yes Yes Yes Yes Yes
IPsec NAT traversal Yes Yes Yes Yes Yes Yes Yes
Redundant VPN gateways Yes Yes Yes Yes Yes Yes Yes
Number of remote access users 25 users 25 users 50 users 150 users 250 users 500 users 500 users
User Authentication and Access Control

Third-party user authentication RADIUS, RSA RADIUS, RSA RADIUS, RSA RADIUS, RSA RADIUS, RSA RADIUS, RSA RADIUS, RSA
SecureID, SecureID, SecureID, SecureID, SecureID, SecureID, SecureID,
LDAP LDAP LDAP LDAP LDAP LDAP LDAP
RADIUS accounting Yes Yes Yes Yes Yes Yes Yes
XAUTH VPN, Web-based, 802.X Yes Yes Yes Yes Yes Yes Yes
authentication
PKI certificate requests (PKCS 7 Yes Yes Yes Yes Yes Yes Yes
and PKCS 10)
Certificate Authorities supported Yes Yes Yes Yes Yes Yes Yes
Virtualization
Maximum number of security 10 10 12 24 64 96 128
zones
Maximum number of virtual 3 3 10 15 64 128 128
routers
Maximum number of VLANs 16 16 64 128 2,000 3,967 3,967
9
Encapsulations
PPP/MLPPP N/A N/A Yes Yes Yes Yes Yes
PPPoE Yes Yes Yes Yes Yes Yes Yes
PPPoA N/A Yes Yes Yes Yes Yes Yes
MLPPP maximum physical N/A N/A 1 2 4 12 12

interfaces
Frame Relay N/A N/A Yes Yes Yes Yes Yes
MLFR (FRF .15, FRF .16) N/A N/A Yes Yes Yes Yes Yes
MLFR maximum physical N/A N/A 1 2 4 12 12

interfaces
HDLC N/A N/A Yes Yes Yes Yes Yes
Wireless
CX111 3G /4G LTE Bridge support Yes Yes Yes Yes Yes Yes Yes
Junos/SRX Series management

Yes Yes Yes Yes Yes Yes Yes
of CX111
Flash and Memory

Memory (DRAM) 2 GB 2 GB 2 GB 2 GB 2 GB 2 GB/4 GB11 2 GB
(SRX100H2) (SRX110H2) (SRX210HE2) (SRX220H2) (SRX240H2) (SRX650)
Fixed Fixed Fixed Fixed Fixed

Memory slots 2 DIMM 4 DIMM
memory memory memory memory memory
Flash memory 2 GB 2 GB CF, 2 GB 2 GB CF, 2 GB 2 GB/8 GB11 2 GB CF
externally externally CF internal internal on
accessible accessible SRE, external
slot empty,
up to 2 GB CF
supported
USB port for external storage Yes Yes Yes Yes Yes Yes Yes
Dimensions and Power

Dimensions (W x H x D) 8.5 x 1.4 x 11.02 x 1.72 x 11.02 x 1.73 x 14.31 x 1.73 x 17.5 x 1.75 x 17.5 x 3.5 x 17.5 x 3.5 x
5.8 in (21.6 x 8.385 in 7.12 in (28.0 x 7.11 in (36.3 x 15.1 in (44.4 18.2 in (44.4 18.2 in (44.4
3.6 x 14.7 cm) (28 x 4.37 x 4.4 x 18.1 cm) 4.4 x 18.1 cm) x 4.4 x 38.5 x 8.8 x 46.2 x 8.8 x 46.2
21.3 cm) cm) cm) cm)
Weight (device and power 2.5 lb (1.1 kg) 6.7 lb 3.3 lb (1.5 kg) 3.43 lb For LM and 21.96 lb 24.9 lb
supply) (3.06 kg) non-PoE / (1.56 kg) HM-AC: 11.2 (9.96 kg) (11.3 kg)
4.4 lb non-PoE lb (5.1 kg) No interface No interface
(2 kg) PoE No interface For HM - DC: modules modules
No interface modules 12.56 lb (5.7 1 power 1 power
modules kg) / 12.3 lb supply supply
(5.6 kg) PoE
No interface
modules
Rack-mountable Yes, 1 RU Yes, 1 RU Yes, 1 RU Yes, 1 RU Yes, 1 RU Yes, 2 RU Yes, 2 RU
Power supply (AC) 100-240 100-240 100–240 100–240 150 W for LM 100–240 100–240
VAC, 30 W VAC, 60 W VAC, VAC, and HM VAC, VAC,
60 W non- 60 W non- 190 W for HM single 645 single 645
PoE/ PoE / with DC W or W or
150 W PoE 200 W PoE 360 W for dual 645 W dual 645 W
PoE
Maximum PoE power N/A N/A 50 W 120 W 150 W 247 W 247 W
redundant, or redundant, or
494 W non- 494 W non-
redundant redundant
11
7: 4 GB DRAM and 8 GB CF is default on the SRX550 High Memory SKUs
10

Average power consumption 10 W 24 W 28 W, 28 W SRX240H2 85 W 122 W
84 W (PoE) - 74 W
SRX240H2-
DC - 72 W
SRX240H2-
PoE- 86 W
Input frequency 50-60 Hz 50-60 Hz 50-60 Hz 50-60 Hz 50-60 Hz 50-60 Hz 50-60 Hz
Maximum current consumption 0.25 A @ 100 1.75 A @ 100 0.44 A @ 100 0.44 A @ 100 1.1 A @ 100 7.5 A @ 100 5.3 A @ 100
VAC VAC VAC, 1.13 A VAC VAC, 3.0 A VAC with VAC with
@ 100 VAC @ 100 VAC single PSU single PSU
(PoE) (PoE) with PoE, 10.5 with PoE, 8.3
A @ 100 VAC A @ 100 VAC
with dual with dual
PSU with PoE PSU with PoE
Maximum inrush current 60 A 70 A 80 A, 60 A 80 A 40 A, 45 A for 45 A for ½ 45 A for ½
for PoE PoE cycle cycle
Average heat dissipation 35 BTU/hr 81 BTU/hr 95 BTU/hr 104 BTU/ 253 BTU/hr 238 BTU/hr 319 BTU/hr
(SRX210HE2) hour (SRX240H2)
116 BTU/hr (SRX220H2)
246 BTU/hr
(SRX210HE2-
PoE) (SRX240H2-
DC
294 BTU/hr
(SRX40H2-
PoE)
Maximum heat dissipation 80 BTU/hr 99 BTU/hr 126 BTU/hr 126 BTU/hour 427 BTU/hr 1,449 BTU/hr 699 BTU/hr
(SRX210HE2) (SRX220H2) (SRX240H2)
157 BTU/hr 409 BTU/hr
(SRX210HE2-
(SRX240H2-
PoE)
DC)
560 BTU/hr
(SRX240H2-
PoE)
Redundant power supply (hot No No No No No Yes (up to Yes (up to
swappable) maximum maximum
capacity of capacity of
single PSU) single PSU)
Acoustic noise level 0 dB 0 dB 29.1 dB 51.1 dB 70.0 dB 51.8 dB 60.9 dB
(Per ISO 7779 Standard) (fanless) (fanless)
Environment
Operational temperature 32° to 104° F 32° to 104° F 32° to 104° F 32° to 104° F 32° to 104° F 32° to 104° F 32° to 104° F
(0° to 40° C) (0° to 40° C) (0° to 40° C) (0° to 40° C) (0° to 40° C) (0° to 40°C) (0° to 40°C)
Nonoperational temperature 4° to 158° F, 4° to 158° F, 4° to 158° F, 4° to 158° F, -40° to 4° to 158° F, 4° to 158° F,

(-20° to (-20° to (-20° to (-20° to 158° F, (-20° to (-20° to
70° C) 70° C) 70° C) 70° C) (-40° to 70° C) 70° C)
70° C)
Humidity (operating) 10% to 90% noncondensing
Humidity (nonoperating) 5% to 95% noncondensing
Mean time between failures 24.8 years 24.8 years 14.03 years 13.46 years 11.63 years 9.6 years 9.6 years
(Telcordia model) (SRX210HE2) (SRX220H2) (SRX240H2) with with
10.26 years 11.06 years 9.92 years redundant redundant
(SRX210HE2- (SRX220H2- (SRX240H2- power power
PoE) PoE) PoE)
11
Certifications and Network Homologation

USA
Safety certifications UL 60950-1 UL 60950-1 UL 60950-1 UL 60950-1 UL 60950-1 UL 60950-1 UL 60950-1
EMC certifications FCC Class B FCC Class B FCC Class B 1
FCC Class A FCC Class A FCC Class A FCC Class A
Network homologation TIA-968 TIA-968 TIA-968 TIA-968 TIA-968 TIA-966 TIA-966
Canada
Safety certifications CSA 60950-1 CSA 60950-1 CSA 60950-1 CSA 60950-1 CSA 60950-1 CSA 60950-1 CSA 60950-1
EMC certifications ICES class B ICES class B ICES class B 1
ICES Class A ICES class A ICES class A ICES class A
Network homologation CS-03 CS-03 CS-03 CS-03 CS-03 CS-03 CS-03
Australia
Safety certifications AS / NZS AS / NZS AS / NZS AS / NZS AS / NZS AS / NZS AS / NZS
60950-1 60950-1 60950-1 60950-1 60950-1 60950-1 60950-1
EMC certifications AS / NZS AS / NZS AS / NZS AS / NZS AS / NZS AS / NZS AS / NZS
CISPR22 CISPR22 CISPR22 CISPR22 CISPR22 CISPR22 CISPR22
Class B Class B Class B1 Class A Class A Class A Class A
Network homologation AS / ACIF AS / ACIF AS / ACIF AS / ACIF AS / ACIF AS / ACIF S AS / ACIF S
S 002, S S 002, S S 002, S S 002, S S 002, S 016 016
016, S 043.1, 016, S 043.1, 016, S 043.1, 016, S 043.1, 016, S 043.1,
S043.2 S043.2 S043.2 S043.2 S043.2
New Zealand
Safety certifications AS / NZS AS / NZS AS / NZS AS / NZS AS / NZS AS / NZS AS / NZS
60950-1 60950-1 60950-1 60950-1 60950-1 60950-1 60950-1
EMC certifications AS / NZS AS / NZS AS / NZS AS / NZS AS / NZS AS / NZS AS / NZS
CISPR22 CISPR22 CISPR22 CISPR22 CISPR22 CISPR22 CISPR22
Class B Class B Class B1 Class A Class A Class A Class A
Network homologation PTC 217, PTC PTC 217, PTC PTC 217, PTC PTC 217, PTC PTC 217, PTC PTC 217 PTC 217
273 273 273 273 273
Japan
Safety certifications Comply safety certifications (UL/CUL/CSA) by CB Scheme
EMC certifications VCCI Class B VCCI Class B VCCI Class B1 VCCI Class A VCCI Class A VCCI Class A VCCI Class A
European Union
Safety certifications EN 60950-1 EN 60950-1 EN 60950-1 EN 60950-1 EN 60950-1 EN 60950-1 EN 60950-1
EMC certifications EN 55022 EN 55022 EN 55022 EN 55022 EN 55022 EN 55022 EN 55022
Class B, Class B, Class B12, Class A, Class A, Class A, Class A,
EN 300 386 EN 300 386 EN 300 386 EN 300 386 EN 300 386 EN 300 386 EN 300 386
Network homologation CTR 12/13, CTR 12/13, CTR 12/13, CTR 12/13, CTR 12/13, CTR 12/13, CTR 12/13,
CTR 21, DoC CTR 21, DoC CTR 21, DoC CTR 21, DoC CTR 21, DoC DoC DoC
Software Certifications
NIST FIPS-140-2 Level 2 Yes Yes Yes Yes Yes In Progress Yes
ISO Common Criteria Yes Yes Yes Yes Yes Yes Yes
NDPP+TFFW EP
USGv6 Yes Yes Yes Yes Yes Yes Yes
SRX210H-POE is class A.
12
*There are several models available for the SRX210 and SRX240 including the enhanced version. Please contact your Juniper or partner account representative for more information.
12
Interface Modules Compatibility Matrix

Component Description SRX100 SRX110 SRX210 SRX220 SRX240 SRX550 SRX650
16-port
SRX-GP-16GE 10/100/1000BASE-T X X X X X 313 3
XPIM
16-port
SRX-GP-16GE-POE 10/100/1000BASE-T PoE X X X X X 3 3
XPIM
24-port
10/100/1000BASE-T
SRX-GP-24GE X X X X X 313 3
XPIM, includes
4 SFP slots
24-port
10/100/1000BASE-T
SRX-GP-24GE-POE X X X X X 313 3
PoE XPIM, includes 4 SFP
slots
8-port GbE copper, fiber
SRX-GP-8SFP X X X X X 3 3
SFP XPIM
SRX-GP-DUAL-T1-E1 Dual T1/E1 GPIM X X X X X 3 3
SRX-GP-QUAD-T1-E1 Quad T1/E1 GPIM X X X X X 3 3
1-port clear channel DS3/
SRX-GP-1DS3-E3 X X X X X 3 3
E3 GPIM single GPIM slot
Eight-port Sync Serial
SRX-GP-8SERIAL X X X X X 313 3
GPIM
1-port Sync Serial
SRX-MP-1SERIAL X X 3 3 3 313 X
Mini-PIM
1-port ADSL2+ Mini-PIM
SRX-MP-1ADSL2-A supporting ADSL/ADSL2/ X X 3 3 3 313 X
ADSL2+ Annex A
1-port ADSL2+ Mini-PIM
SRX-MP-1ADSL2-B supporting ADSL/ADSL2/ X X 3 3 3 313 X
ADSL2+ Annex B
1-port VDSL2 Mini-PIM
supporting Annex A,
SRX-MP-1VDSL2-A X X 3 3 3 313 X
with fallback to ADSL2/
ADSL2+
8-wire (4-pair) G.SHDSL
SRX-MP-8GSHDSL X X 3 3 3 313 X
Mini-PIM
SRX-MP-1SFP-GE 1-port SFP Mini-PIM X X 3 3 3 313 X
SRX-MP-1T1E1 1-port T1 or E1 Mini-PIM X X 3 3 3 313 X
1-port T1 or E1 Mini-PIM
SRX-MP-1T1E1-R X X X X X 314 X
(ROHS version)
1-port VDSL2 Mini-PIM
supporting Annex A,
SRX-MP-1VDSL2-R X X X X X 314 X
with fallback to ADSL2/
ADSL2+ (ROHS version)
1-port Sync Serial Mini-
SRX-MP-1SERIAL-R X X X X X 314 X
PIM (ROHS version)
13
Not supported on the SRX550 High Memory
14
Only supported on the SRX550 High Memory
Juniper Networks Services and Support Automated Support and Prevention

Juniper Networks is the leader in performance-enabling services Juniper’s Automated Support and Prevention consists of an
that are designed to accelerate, extend, and optimize your ecosystem of tools, applications, and systems targeted towards
high-performance network. Our services allow you to maximize simplifying and streamlining operations, delivering operational
operational efficiency while reducing costs and minimizing efficiency, reducing downtime, and increasing your network’s ROI
risk, achieving a faster time to value for your network. Juniper running Juniper Networks Junos operating system. Automated
Networks ensures operational excellence by optimizing the Support and Prevention brings operational efficiency by
network to maintain required levels of performance, reliability, automating several time-consuming tasks such as incident
and availability. For more details, please visit www.juniper.net/us/ management, inventory management, proactive bug notification
en/products-services. and on-demand EOL/EOS/EOE reports. The Junos Space Service
Now and Service Insight service automation tools are standard
entitlements of all Juniper Care contracts.
13
Ordering Information
Model Number Description Model Number Description
SRX650 Base System SRX650-S-AV-3 Three year subscription for Juniper-Sophos AV

updates on SRX650
SRX650-BASE- SRX650 Services Gateway with SRE 6, SRX650-IDP-3 Three year subscription for IDP updates on
SRE6-645AP 645 W AC PoE PSU; includes 4 onboard SRX650
10/100/1000BASE-T ports, 2 GB DRAM, 2 GB
CF, 247 W PoE power, fan tray, power cord and SRX650-S2-AS-3 Three year subscription for Juniper-Sophos
rack-mount kit antispam updates on SRX650
SRX650-BASE- SRX650 Services Gateway with SRE 6, SRX650-W-WF-3 Three year subscription for Juniper-Websense
SRE6-645DP 645 W DC PoE PSU; includes 4 onboard Web filtering updates on SRX650
10/100/1000BASE-T ports, 2 GB DRAM, 2 GB
CF, 247 W PoE power, fan tray, power cord and SRX650-SMB4-CS-3 Three year security subscription for
rack-mount kit enterprise—includes Kaspersky AV, enhanced
WF, Sophos AS, AppSecure and IDP on
SRX650B-SRE6- Trade Agreement Act-compliant SRX650 SRX650
645AP-TAA Services Gateway with SRE 6, 645
W AC PoE PSU; includes 4 onboard SRX650-S-SMB4- Three year security subscription for
10/100/1000BASE-T ports, 2 GB DRAM, 2 GB CS-3 enterprise–includes Sophos AV, enhanced
CF, 247 W PoE power, fan tray, power cord and WF, Sophos AS, AppSecure and IDP on
rack-mount kit SRX650
SRX650 Power Supplies and Accessories SRX-BGP-ADV-LTU Advanced BGP License for SRX650 only
SRX600-PWR- Spare 645 W AC PoE power supply unit for SRX650-K-AV-5 Five year subscription for Juniper-Kaspersky
645AC-POE SRX650, SRX550 systems—one is included AV updates on SRX650
in SRX650, SRX550 base system (SRX650-
SRX650-S-AV-5 Five year subscription for Juniper-Sophos AV
BASE-SRE6-645AP, SRX550-645AP)
updates on SRX650
SRX600-PWR- 645 W DC source power supply for SRX550
645DC-POE and SRX650; provides 397 W system power SRX650-IDP-5 Five year license for IDP updates for SRX650
@ 12 V and 248 W PoE power @ 50 VDC; SRX650-W-WF-5 Five year subscription for Juniper-Websense
works with 43-56 VDC input—no power cord Web filtering updates on SRX650
SRX600-SRE6H Spare SRE6-H for SRX650—one is included in
SRX650-SMB4-CS-5 Five year security subscription for enterprise—
SRX650 base system (SRX650-BASE-SRE6-
includes Kaspersky AV, enhanced WF, Sophos
645AP)
AS, AppSecure and IDP on SRX650
SRX650-CHAS SRX650 chassis including fan tray—no system
processor (SRE) and no power supply unit SRX650-S-SMB4- Five year security subscription for enterprise—
CS-5 includes Sophos AV, enhanced WF, Sophos
SRX650-FAN-01 Spare SRX650 fan tray, one is included in AS, AppSecure and IDP on SRX650
SRX650 chassis spare (SRX650-CHAS), and
included in SRX650 base system (SRX650- SRX-RAC-5-LTU Dynamic VPN Client: 5 simultaneous users for
BASE-SRE6-645AP) SRX100, SRX110, SRX210, SRX220, SRX240,
SRX550, and SRX650
SRX650-FILT-01 Not included in SRX650 chassis spare
(SRX650-CHAS), and not included in SRX-RAC-10-LTU Dynamic VPN Client: 10 simultaneous users
SRX650 base system (SRX650-BASE-SRE6- for SRX100, SRX110, SRX210, SRX220,
645AP)—optional, as this is not required for SRX240, SRX550, and SRX650
normal operations, but recommended for SRX-RAC-25-LTU Dynamic VPN Client: 25 simultaneous
dusty environments users for SRX100, SRX110, SRX210, SRX220,
SRX650 Additional Software Feature Licenses SRX240, SRX550, and SRX650
SRX650-K-AV One year subscription for Juniper-Kaspersky SRX-RAC-50-LTU Dynamic VPN Client: 50 simultaneous users
antivirus updates on SRX650 for SRX210, SRX220, SRX240, SRX550, and
SRX650 only
SRX650-S-AV One year subscription for Juniper-Sophos
antivirus updates on SRX650 SRX-RAC-100-LTU Dynamic VPN Client: 100 simultaneous users
for SRX220, SRX240, SRX550, and SRX650
SRX650-IDP One year subscription for IDP updates on only
SRX650
SRX-RAC-150-LTU Dynamic VPN Client: 150 simultaneous users
SRX650-S2-AS One year subscription for Juniper-Sophos for SRX220, SRX240, SRX550, and SRX650
antispam updates on SRX650 only
SRX650-W-WF One year subscription for Juniper-Websense SRX-RAC-250-LTU Dynamic VPN Client: 250 simultaneous users
Web filtering updates on SRX650 for SRX240, SRX550, and SRX650 only
SRX650-SMB4-CS One year security subscription for enterprise— SRX-RAC-500-LTU Dynamic VPN Client: 500 simultaneous users
includes Kaspersky AV, enhanced WF, Sophos for SRX550 and SRX650 only
SRX650-APPSEC-A-1 One year subscription for Application Security
SRX650-S-SMB4-CS One year security subscription for enterprise— and IPS updates for SRX650
includes Sophos AV, enhanced WF, Sophos
AS, AppSecure and IDP on SRX650 SRX650- Three year subscription for Application
APPSEC-A-3 Security and IPS updates for SRX650
SRX650-K-AV-3 Three year subscription for Juniper-Kaspersky
AV updates on SRX650 SRX650- Five year subscription for Application Security
APPSEC-A-5 and IPS updates for SRX650
14

SRX550 Base System SRX550-S2-AS-3 Three year subscription for Juniper-Sophos
antispam updates on SRX550
SRX550-645AP-M SRX550 Services Gateway with 4 GB DRAM
and 8 GB CF, 2 RU height, 6 GPIM slots, 2 SRX550-W-WF-3 Three year subscription for Juniper-Websense
Mini-PIM slots, 6 10/100/1000BASE-T ports, Web filtering updates on SRX550
4GbE SFP ports, dual PS slots, fans; ships
SRX550-SMB4-CS-3 Three year security subscription for
with one 645 watt AC power supply with 247
enterprise—includes Kaspersky AV, enhanced
W PoE power (power cord and rack-mount kit
included)
SRX550
SRX550-645DP-M SRX550 Services Gateway with 4 GB DRAM
SRX550-S-SMB4- Three year security subscription for
and 8 GB CF, 2 RU height, 6 GPIM slots, 2
CS-3 enterprise–includes Sophos AV, enhanced
Mini-PIM slots, 6 10/100/1000BASE-T ports,
4GbE SFP ports, dual PS slots, fans; ships
SRX550
with one 645 watt DC power supply with 247
W PoE power (no power cord or rack-mount SRX550-K-AV-5 Five year subscription for Juniper-Kaspersky
kit included) AV updates on SRX550
SRX550- 645AP SRX550 Services Gateway, 2 RU SRX550-S-AV-5 Five year subscription for Juniper-Sophos AV
height, 6 GPIM slots, 2 Mini-PIM slots, 6 updates on SRX550
10/100/1000BASE-T ports, 4GbE SFP ports,
dual PS slots, fans; ships with one 645 watt SRX550-IDP-5 Five year license for IDP updates for SRX550
AC power supply with 247 W PoE power
SRX550-W-WF-5 Five year subscription for Juniper-Websense
(power cord and rack-mount kit included)
Web filtering updates on SRX550
SRX550- 645DP SRX550 Services Gateway, 2 RU
SRX550-SMB4-CS-5 Five year security subscription for enterprise—
height, 6 GPIM slots, 2 Mini-PIM slots, 6
10/100/1000BASE-T ports, 4GbE SFP ports,
dual PS slots, fans; ships with one 645 watt
DC power supply with 247 W PoE power (no SRX550-S-SMB4- Five year security subscription for enterprise—
power cord and rack-mount kit Included) CS-5 includes Sophos AV, enhanced WF, Sophos
SRX550 Power Supplies and Accessories
SRX-RAC-5-LTU Dynamic VPN Client: 5 simultaneous users for
SRX600-PWR- Spare 645 W AC PoE power supply unit SRX100, SRX110, SRX210, SRX220, SRX240,
645AC-POE for SRX550 and SRX650 systems—one SRX550, and SRX650
is included in SRX550 and SRX650 base
systems (SRX650-BASE-SRE6-645AP, SRX-RAC-10-LTU Dynamic VPN Client: 10 simultaneous users
SRX550-645AC) for SRX100, SRX110, SRX210, SRX220,
SRX240, SRX550, and SRX650
SRX600-PWR- 645 W DC source power supply for SRX550,
645DC-POE SRX650 provides 397 W system power @ 12 SRX-RAC-25-LTU Dynamic VPN Client: 25 simultaneous
V and 248 W PoE power @ 50 VDC; works users for SRX100, SRX110, SRX210, SRX220,
with 43-56 VDC input—no power cord SRX240, SRX550, and SRX650
SRX550-CHAS SRX550 Services Gateway, 2 RU SRX-RAC-50-LTU Dynamic VPN Client: 50 simultaneous users
height, 6 GPIM slots, 2 Mini-PIM slots, 6 for SRX210, SRX220, SRX240, SRX550, and
10/100/1000BASE-T ports, 4 GbE SFP SRX650 only
ports, dual PS slots, fans (power supply not
included) SRX-RAC-100-LTU Dynamic VPN Client: 100 simultaneous users
SRX550-FILT-01 Not included in SRX550 systems, optional, as only
this is not required for normal operations, but
recommended for dusty environments SRX-RAC-150-LTU Dynamic VPN Client: 150 simultaneous users
SRX550 Additional Software Feature Licenses only
SRX550-K-AV One year subscription for Juniper-Kaspersky SRX-RAC-250-LTU Dynamic VPN Client: 250 simultaneous users
antivirus updates on SRX550 for SRX240, SRX550, and SRX650 only
SRX550-S-AV One year subscription for Juniper-Sophos SRX-RAC-500-LTU Dynamic VPN Client: 500 simultaneous users
antivirus updates on SRX550 for SRX550 and SRX650 only
SRX550-IDP One year subscription for IDP updates on SRX550-APPSEC-A-1 One year subscription for Application Security
SRX550 and IPS updates for SRX550
SRX550-S2-AS One year subscription for Juniper-Sophos SRX550- Three year subscription for Application
antispam updates on SRX550 APPSEC-A-3 Security and IPS updates for SRX550
SRX550-W-WF One year subscription for Juniper-Websense SRX550- Five year subscription for Application Security
Web filtering updates on SRX550 APPSEC-A-5 and IPS updates for SRX550
SRX550-SMB4-CS One year security subscription for enterprise— SRX240 Base System
AS, AppSecure and IDP on SRX550 SRX240H2 SRX240 Services Gateway with 16 x GbE
ports, 4x mini-PIM slots, and high memory
SRX550-S-SMB4-CS One year security subscription for enterprise— (2 GB DRAM, 2 GB Flash); integrated power
includes Sophos AV, enhanced WF, Sophos supply with power cord, and 19” rack mount
kit included
SRX550-K-AV-3 Three year subscription for Juniper-Kaspersky
SRX240H2-POE SRX240 Services Gateway with 16 x GbE
AV updates on SRX550
ports, 4x mini-PIM slots, and high memory
SRX550-S-AV-3 Three year subscription for Juniper-Sophos AV (2 GB RAM, 2 GB Flash), with 16 ports PoE
updates on SRX550 (150 W); integrated power supply with
SRX550-IDP-3 Three year subscription for IDP updates on power cord, and 19” rack mount kit included
SRX550
15

SRX240H2-DC SRX240 Services Gateway with 16 x GbE SRX240-SMB4- Five year security subscription for
ports, 4x mini-PIM slots, and high memory CS-5 enterprise—includes Kaspersky AV,
(2 GB RAM, 2 GB Flash); integrated -48 V enhanced WF, Sophos AS, AppSecure and
DC power supply with 19” rack mount kit IDP on SRX240
included
SRX240-S-SMB4- Five year security subscription for
SRX240-RMK SRX240 rack-mount kit for 19 in rack (holds CS-5 enterprise—includes Sophos AV, enhanced
one unit) WF, Sophos AS, AppSecure and IDP on
SRX240H-TAA Trade Agreement Act-compliant SRX240 SRX240
Services Gateway with 16 GbE ports, 4 Mini- SRX240-S2-AS-5 Five year subscription for Juniper-Sophos
PIM slots, and high memory (1 GB RAM, 1 GB antispam updates on SRX240
Flash)
SRX240H-POE-TAA Trade Agreement Act-compliant SRX240
Services Gateway with 16 GbE ports, 4 Mini-
PIM slots, and high memory (1 GB RAM, 1 GB SRX240-SMB2- Five year security subscription for
Flash), with 16 ports PoE (150 W) CS-5 enterprise—includes Kaspersky antivirus,
Web filtering, Sophos antispam, and IDP on
SRX240 Additional Software Feature Licenses
SRX240
SRX240-K-AV One year subscription for Juniper-Kaspersky
antivirus updates on SRX240 SRX240-S-SMB- Five year security subscription for enterprise—
CS-5 includes Sophos antivirus, Web filtering,
SRX240-S-AV One year subscription for Juniper-Sophos Sophos antispam and IPS on SRX240
antivirus updates on SRX240
SRX-RAC-5-LTU Dynamic VPN Client: 5 simultaneous users
SRX240-IDP One year subscription for IDP updates on for SRX100, SRX110, SRX210, SRX220,
SRX240
SRX240-S2-AS One year subscription for Juniper-Sophos
SRX-RAC-10-LTU Dynamic VPN Client: 10 simultaneous
users for SRX100, SRX110, SRX210, SRX220,
SRX240-W-WF One year subscription for Juniper-Websense SRX240, SRX550, and SRX650
SRX240-SMB4-CS One year security subscription for enterprise— users for SRX100, SRX110, SRX210, SRX220,
includes Kaspersky AV, enhanced WF, Sophos SRX240, SRX550, and SRX650
SRX240-S-SMB4-CS One year security subscription for enterprise—
users for SRX210, SRX22, SRX240, SRX550
AS, AppSecure and IDP on SRX240 and SRX650 only
SRX240-K-AV-3 Three year subscription for Juniper-Kaspersky SRX-RAC-100-LTU Dynamic VPN Client: 100 simultaneous
antivirus updates on SRX240 users for SRX220, SRX240, SRX550, and
SRX650 only
SRX240-S-AV-3 Three year subscription for Juniper-Sophos
antivirus updates on SRX240 SRX-RAC-150-LTU Dynamic VPN Client: 150 simultaneous
users for SRX220, SRX240, SRX550, and
SRX240-IDP-3 Three year subscription for IDP updates on
SRX650 only
SRX240
SRX240-S2-AS-3 Three year subscription for Juniper-Sophos
antispam updates on SRX240 users for SRX240, SRX550, and SRX650
only
SRX240-W-WF-3 Three year subscription for Juniper-
Websense Web filtering updates on SRX240 SRX240- One year subscription for Application
APPSEC-A-1 Security and IPS updates for SRX240
SRX240-SMB4- Three year security subscription for
CS-3 enterprise—includes Kaspersky AV, SRX240- Three year subscription for Application
enhanced WF, Sophos AS, AppSecure and APPSEC-A-3 Security and IPS updates for SRX240
IDP on SRX240 SRX240- Five year subscription for Application
SRX240-S-SMB4- Three year security subscription for APPSEC-A-5 Security and IPS updates for SRX240
CS-3 enterprise—includes Sophos AV, enhanced SRX220 Base System
SRX240 SRX220H2 SRX220 Services Gateway with 8 GbE ports,
2 Mini-PIM slots, and high memory (2 GB
SRX240-K-AV-5 Five year subscription for Juniper-Kaspersky RAM, 2 GB Flash)—external power supply
antivirus updates on SRX240 and cord included
SRX240-S-AV-5 Five year subscription for Juniper-Sophos SRX220H2-POE SRX220 Services Gateway with 8 GbE ports,
antivirus updates on SRX240 2 Mini-PIM slots, and high memory (2 GB
SRX240-IDP-5 Five year subscription for IDP updates on RAM, 2 GB Flash), with 8 ports PoE (120 W)*
SRX240 SRX220-RMK SRX220 rack-mount kit for 19 in rack (holds
SRX240-S2-AS-5 Five year subscription for Juniper-Sophos one unit)
antispam updates on SRX240 SRX220-WALL-KIT SRX220 wall mount kit (holds one unit)
SRX220-PWR- Spare SRX220 switching power supply,
60W* 60 W (non-POE)
*See price list for country-specific power cord model numbers.
16

SRX220 Additional Software Feature Licenses SRX-RAC-150-LTU Dynamic VPN Client: 150 simultaneous users
SRX220-K-AV One year subscription for Juniper-Kaspersky
SRX220-APPSEC-A-1 One year subscription for Application Security
antivirus updates on SRX220 and IPS updates for SRX220
SRX220-S-AV One year subscription for Juniper-Sophos SRX220- Three year subscription for Application
antivirus updates on SRX220 APPSEC-A-3 Security and IPS updates for SRX220
SRX220-IDP One year subscription for IDP updates on SRX220- Five year subscription for Application Security
SRX220 APPSEC-A-5 and IPS updates for SRX220
SRX220-S2-AS One year subscription for Juniper-Sophos SRX210 Base System

antispam updates on SRX220 SRX210HE2 SRX210 Services Gateway with 2 GbE+ 6 Fast
SRX220-W-WF One year subscription for Juniper-Websense Ethernet ports, 1 Mini-PIM slot, 1 ExpressCard
slot and high memory (2 GB RAM, 2 GB Flash)
SRX210HE2-POE SRX210 Services Gateway with 2 GbE + 6 Fast
SRX220-SMB4-CS One year security subscription for Ethernet ports, 1 Mini-PIM slot, 1 ExpressCard
enterprise—includes Kaspersky AV, slot and high memory (2 GB RAM, 2 GB
enhanced WF, Sophos AS, AppSecure and Flash), with 4 ports PoE (50 W)
IDP on SRX220
SRX210 Additional Hardware
SRX220-S-SMB4-CS One year security subscription for enterprise—
SRX210-DESK- SRX210 desk top stand (holds one unit)
STAND
SRX210-RMK SRX210 rack-mount kit for 19 in rack (holds
SRX220-K-AV-3 Three year subscription for Juniper- one unit)
Kaspersky antivirus updates on SRX220
SRX210-WALL-KIT SRX210 wall mount kit (holds one unit)
antivirus updates on SRX220 SRX210-PWR- Spare SRX210 switching power supply,
60W-* 60 W (non-PoE)
SRX220-IDP-3 Three year subscription for IDP updates on
SRX220 SRX210-PWR- Spare SRX210 switching power supply,
150W-* 150 W (PoE)
SRX220-S2-AS-3 Three year subscription for Juniper-Sophos
antispam updates on SRX220 SRX210 Additional Software Feature Licenses
SRX220-W-WF-3 Three year subscription for Juniper- SRX210-K-AV One year subscription for Juniper-Kaspersky
Websense Web filtering updates on SRX220 antivirus updates on SRX210
SRX220-SMB4-CS-3 Three year security subscription for SRX210-S-AV One year subscription for Juniper-Sophos
enterprise—includes Kaspersky AV, antivirus updates on SRX210
enhanced WF, Sophos AS, AppSecure and
IDP on SRX220 SRX210-IDP One year subscription for IDP updates on
SRX210
SRX220-S-SMB4- Three year security subscription for
CS-3 enterprise—includes Sophos AV, enhanced SRX210-S2-AS One year subscription for Juniper-Sophos
WF, Sophos AS, AppSecure and IDP on antispam updates on SRX210
SRX220 SRX210-W-WF One year subscription for Juniper-Websense
SRX220-K-AV-5 Five year subscription for Juniper-Kaspersky Web filtering updates on SRX210
SRX210-SMB4-CS One year security subscription for
SRX220-S-AV-5 Five year subscription for Juniper-Sophos enterprise—includes Kaspersky AV,
antivirus updates on SRX220 enhanced WF, Sophos AS, AppSecure and
SRX220-IDP-5 Five year subscription for IDP updates on IDP on SRX210
SRX220
SRX210-S-SMB4-CS One year security subscription for
SRX220-W-WF-5 Five year subscription for Juniper-Websense enterprise—includes Sophos AV, enhanced
Web filtering updates on SRX220 WF, Sophos AS, AppSecure and IDP on
SRX220-SMB4- Five year security subscription for SRX210
CS-5 enterprise—includes Kaspersky AV, SRX210-K-AV-3 Three year subscription for Juniper-
enhanced WF, Sophos AS, AppSecure and Kaspersky antivirus updates on SRX210
IDP on SRX220
SRX220-S-SMB4- Five year security subscription for enterprise—
CS-5 includes Sophos AV, enhanced WF, Sophos
AS, AppSecure and IDP on SRX220 SRX210-IDP-3 Three year subscription for IDP updates on
SRX-RAC-5-LTU Dynamic VPN Client: 5 simultaneous users for SRX210
SRX100, SRX110, SRX210, SRX220, SRX240, SRX210-S2-AS-3 Three year subscription for Juniper-Sophos
SRX550, and SRX650
users for SRX100, SRX110, SRX210, SRX220, SRX210-W-WF-3 Three year subscription for Juniper-
SRX240, SRX550, and SRX650 Websense Web filtering updates on SRX210
SRX-RAC-25-LTU Dynamic VPN Client: 25 simultaneous SRX210-SMB4-CS-3 Three year security subscription for
users for SRX100, SRX110, SRX210, SRX220, enterprise—includes Kaspersky AV,
SRX240, SRX550, and SRX650 enhanced WF, Sophos AS, AppSecure and
SRX-RAC-50-LTU Dynamic VPN Client: 50 simultaneous users IDP on SRX210
for SRX210, SRX220, SRX240, SRX550, and
SRX650 SRX210-S-SMB4- Three year security subscription for
CS-3 enterprise—includes Sophos AV, enhanced
SRX-RAC-100-LTU Dynamic VPN Client: 100 simultaneous users WF, Sophos AS, AppSecure and IDP on
SRX210
17

SRX210-K-AV-5 Five year subscription for Juniper-Kaspersky SRX110 Additional Hardware
SRX110-DESK- SRX110 desktop stand; holds one unit
SRX210-S-AV-5 Five year subscription for Juniper-Sophos STAND
SRX110-RMK SRX110 rack-mount kit; holds one unit
SRX210-IDP-5 Five year subscription for IDP updates on
SRX210 SRX110-WALL-KIT SRX110 wall mount kit; holds one unit
SRX210-S2-AS-5 Five year subscription for Juniper-Sophos SRX100 Base System

SRX100H2 SRX100 Services Gateway with 8xFE ports
SRX210-W-WF-5 Five year subscription for Juniper-Websense and high memory (2 GB RAM, 2 GB Flash)
SRX100 Additional Hardware
SRX210-SMB4-CS-5 Five year security subscription for
enterprise—includes Kaspersky AV, SRX100-PWR- Spare SRX100 switching power supply,
enhanced WF, Sophos AS, AppSecure and 30W-* 30 W (non-PoE)
IDP on SRX210 SRX-100-RMK SRX100 19” rack-mount kit (holds two units)
SRX210-S-SMB4- Five year security subscription for SRX100-WALL-KIT SRX100 wall mount kit (holds one unit)
CS-5 enterprise—includes Sophos AV, enhanced
WF, Sophos AS, AppSecure and IDP on SRX100-DESK- SRX100 desk stand (holds one unit)
SRX210 STAND
SRX-RAC-5-LTU Dynamic VPN Client: 5 simultaneous users SRX100/SRX110 Dynamic VPN Client
for SRX100, SRX110, SRX210, SRX220,
SRX-RAC-5-LTU 5 simultaneous users for SRX100, SRX110,
SRX210, SRX220, SRX240, SRX550, and
SRX-RAC-10-LTU Dynamic VPN Client: 10 simultaneous users SRX650
for SRX100, SRX110, SRX210, SRX220,
SRX-RAC-25-LTU Dynamic VPN Client: 25 simultaneous SRX650
users for SRX100, SRX110, SRX210, SRX220,
SRX-RAC-50-LTU Dynamic VPN Client: 50 simultaneous users SRX650
for SRX210, SRX220, SRX240, SRX550, and
SRX650 only SRX100/SRX110 Additional Software Feature
Licenses **
SRX210-APPSEC-A-1 One year subscription for Application
Security and IPS updates for SRX210 SRX1XX-K-AV One year subscription for Juniper-Kaspersky
AV updates
SRX210- Three year subscription for Application
APPSEC-A-3 Security and IPS updates for SRX210 SRX1XX-K-AV-3 Three year subscription for Juniper-
Kaspersky AV updates
SRX210- Five year subscription for Application
APPSEC-A-5 Security and IPS updates for SRX210 SRX1XX-K-AV-5 Five year subscription for Juniper-Kaspersky
AV updates
Small Form Factor Pluggable (SFP) Transceivers
SRX1XX-S-AV One year subscription for Juniper-Sophos
SRX-SFP-1GE-LH SFP 1000BASE-LH Optical Transceiver AV updates
SRX-SFP-1GE-LX SFP 1000BASE-LX Optical Transceiver SRX1XX-S-AV-3 Three year subscription for Juniper-Sophos
AV updates
SRX-SFP-1GE-SX SFP 1000BASE-SX Optical Transceiver
SRX1XX-S-AV-5 Five year subscription for Juniper-Sophos AV
SRX-SFP-1GE-T SFP 1000BASE-T Copper Transceiver
updates
SRX-SFP-FE-FX SFP 100BASE-FX Optical Transceiver SRX1XX-S2-AS One year subscription for Juniper-Sophos
SRX-MP-1SFP-GE Single-port SFP Mini-PIM antispam updates
SRX1XX-S2-AS-3 Three year subscription for Juniper-Sophos
SRX-GP-8SFP 8-port GbE copper, fiber SFP XPIM
antispam updates
SRX110 Base System SRX1XX-S2-AS-5 Five year subscription for Juniper-Sophos
SRX110H2-VA SRX110 Services Gateway with 8xFE ports, antispam updates
2 GB RAM and Flash, 1-port VDSL2/ADSL2+ SRX1XX-W-EWF One year subscription for Juniper-Websense
over POTS, USB port for cellular modem enhanced Web filtering updates
connectivity, and external PS and cord
included SRX1XX-W-EWF-3 Three year subscription for Juniper-
Websense enhanced Web filtering updates
SRX110H2-VB SRX110 Services Gateway with 8xFE ports,
2 GB RAM and Flash, 1-port VDSL2/ADSL2+ SRX1XX-W-EWF-5 Five year subscription for Juniper-Websense
over ISDN BRI, USB port for cellular modem enhanced Web filtering updates
connectivity, and external PS and cord SRX1XX-SMB4-CS One year security subscription for enterprise—
included includes Kaspersky AV, enhanced WF, Sophos
AS, AppSecure and IDP
SRX1XX-SMB4-CS-3 Three year security subscription for
Kaspersky AV, enhanced WF, Sophos AS,
AppSecure and IDP
*See price list for country-specific power cord model numbers. **The additional software feature licenses apply to both the SRX100 and the SRX110.
18

SRX1XX-SMB4-CS-5 Five year security subscription for SRX1XX-SMB4- One year renewal security subscription
enterprise—includes Kaspersky AV, CS-R for enterprise—includes Kaspersky AV,
enhanced WF, Sophos AS, AppSecure and enhanced WF, Sophos AS, AppSecure and
IDP IDP
SRX1XX-S-SMB4-CS One year security subscription for SRX1XX-SMB4-CS- Three year renewal security subscription
enterprise—includes Sophos AV, enhanced 3-R for enterprise—includes Kaspersky AV,
WF, Sophos AS, AppSecure, AppSecure and enhanced WF, Sophos AS, AppSecure and
IDP IDP
SRX1XX-S-SMB4- Three year security subscription for SRX1XX-SMB4-CS- Five year renewal security subscription for
CS-3 enterprise—includes Sophos AV, enhanced 5-R enterprise—includes Kaspersky AV, enhanced
WF, Sophos AS, AppSecure and IDP WF, Sophos AS, AppSecure and IDP
SRX1XX-S-SMB4- Five year security subscription for SRX1XX-S-SMB4- One year renewal security subscription for
CS-5 enterprise—includes Sophos AV, enhanced CS-R enterprise—includes Sophos AV, enhanced
WF, Sophos AS, AppSecure and IDP WF, Sophos AS, AppSecure and IDP
SRX1XX-IDP One year license for IDP updates SRX1XX-S-SMB4- Three year renewal security subscription for
CS-3-R enterprise—includes Sophos AV, enhanced
SRX1XX-IDP-3 Three year license for IDP updates
WF, Sophos AS, AppSecure and IDP
SRX1XX-IDP-5 Five year license for IDP updates SRX1XX-S-SMB4- Five year renewal security subscription for
SRX1XX-K-AV-3-R Three year renewal subscription for Juniper- CS-5-R enterprise—includes Sophos AV, enhanced
Kaspersky AV updates WF, Sophos AS, AppSecure and IDP
SRX1XX-K-AV-5-R Five year renewal subscription for Juniper- SRX1XX-IDP-R One year renewal subscription for IDP
Kaspersky AV updates Signature service
SRX1XX-K-AV-R One year renewal subscription for Juniper- SRX1XX-IDP-3-R Three year renewal subscription for IDP
Kaspersky AV updates Signature service
SRX1XX-S-AV-3-R Three year renewal subscription for Juniper- SRX1XX-IDP-5-R Five year renewal subscription for IDP
Sophos AV updates Signature service
SRX1XX-S-AV-5-R Five year renewal subscription for Juniper- SRX100- One year subscription for Application
Sophos AV updates APPSEC-A-1 Security and IPS updates for SRX100
SRX1XX-S-AV-R One year renewal subscription for Juniper- SRX100- Three year subscription for Application
Sophos AV updates APPSEC-A-3 Security and IPS updates for SRX100
SRX1XX-S2-AS-3-R Three year renewal subscription for Juniper- SRX100- Five year subscription for Application
Sophos antispam updates APPSEC-A-5 Security and IPS updates for SRX100
** The additional software feature licenses apply to both the SRX100 and the SRX110.
SRX1XX-S2-AS-5-R Five year renewal subscription for Juniper-
Sophos antispam updates
SRX1XX-S2-AS-R One year renewal subscription for Juniper-
Sophos antispam updates About Juniper Networks
SRX1XX-W-EWF-3-R Three year renewal subscription for Juniper- Juniper Networks challenges the status quo with products,
enhanced Websense enhanced Web
solutions and services that transform the economics of
filtering updates
networking. Our team co-innovates with customers and partners
SRX1XX-W-EWF- Five year renewal subscription for Juniper-
5-R enhanced Websense enhanced Web to deliver automated, scalable and secure networks with agility,
filtering updates performance and value. Additional information can be found at
SRX1XX-W-EWF-R One year renewal subscription for Juniper- Juniper Networks or connect with Juniper on Twitter and Facebook.
enhanced Websense enhanced Web
filtering updates
Corporate and Sales Headquarters APAC and EMEA Headquarters

Juniper Networks, Inc. Juniper Networks International B.V.
EXPLORE JUNIPER
1133 Innovation Way Boeing Avenue 240 Get the App.
Sunnyvale, CA 94089 USA 1119 PZ Schiphol-Rijk
Phone: 888.JUNIPER (888.586.4737) Amsterdam, The Netherlands
or +1.408.745.2000 Phone: +31.0.207.125.700
Fax: +1.408.745.2100 Fax: +31.0.207.125.701
www.juniper.net
Copyright 2017 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Juniper,
and Junos are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All
other trademarks, service marks, registered marks, or registered service marks are the property of their
respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper
Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
1000281-033-EN May 2017

SRX Juniper PDF

Uploaded by

Copyright:

Available Formats

SRX Juniper PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

SRX Juniper PDF

Uploaded by

Copyright:

Available Formats

Data Sheet

SRX Series Services

Product Overview Product Description

*Available on SRX550 and higher devices

Architecture and Key Components

Features and Benefits Adaptive Threat Intelligence

SRX Series for the branch checks the traffic to see if it is

Active/Standby Active/Standby Active/Active

INTERNET INTERNET INTERNET

SRX240 SRX240 SRX240 SRX240 SRX240 SRX2

EX Series EX Series EX Series EX Series EX Series EX

Active/Standby Active/Active Active/Active

INTERNET INTERNET INTERNET

X240 SRX240 SRX240 SRX240 SRX240 SRX240

es EX Series EX Series EX Series EX Series EX Series

Figure 2: High availability

WLC800 EX4200 EX4200

WLC100 EX3300 EX3300

Small Branch with

Figure 4: The distributed enterprise

SRX100 SRX110 SRX210

Specifications • Weighted random early detection (WRED)

IP Address Management • Unified Access Control

• Static -- TCP reassembly for fragmented packet protection

Address Translation -- Zone-based IP spoofing

• Static NAT NGFW/UTM3

Encapsulations -- Stateful protocol signatures

• 802.1Q, 802.1D, RSTP, MSTP, 802.3ad (LACP) -- Dynamic signature updates

• Layer 2 switching with high availability • Antivirus

Maximum Performance and Capacity

SRX100 SRX110 SRX210 SRX220 SRX240 SRX550 SRX650

Tunnel interfaces 10 10 64 64 128 456 512

User Authentication and Access Control

SRX100 SRX110 SRX210 SRX220 SRX240 SRX550 SRX650

PPPoE Yes Yes Yes Yes Yes Yes Yes

PPPoA N/A Yes Yes Yes Yes Yes Yes

MLPPP maximum physical N/A N/A 1 2 4 12 12

MLFR maximum physical N/A N/A 1 2 4 12 12

Junos/SRX Series management

Flash and Memory

Fixed Fixed Fixed Fixed Fixed

Dimensions and Power

SRX100 SRX110 SRX210 SRX220 SRX240 SRX550 SRX650

Nonoperational temperature 4° to 158° F, 4° to 158° F, 4° to 158° F, 4° to 158° F, -40° to 4° to 158° F, 4° to 158° F,

SRX100 SRX110 SRX210 SRX220 SRX240 SRX550 SRX650

Certifications and Network Homologation

Interface Modules Compatibility Matrix

Juniper Networks Services and Support Automated Support and Prevention

SRX650 Base System SRX650-S-AV-3 Three year subscription for Juniper-Sophos AV

Model Number Description Model Number Description

Model Number Description Model Number Description

*See price list for country-specific power cord model numbers.

Model Number Description Model Number Description

SRX220-S2-AS One year subscription for Juniper-Sophos SRX210 Base System

Model Number Description Model Number Description

SRX210-S2-AS-5 Five year subscription for Juniper-Sophos SRX100 Base System

Model Number Description Model Number Description

Corporate and Sales Headquarters APAC and EMEA Headquarters

1000281-033-EN May 2017