Juniper SRX220-PWR-60W-JP-04 データシート

UTM

(continued)

• Customer signatures creation
• Daily and emergency updates
• AppSecure

- AppTrack (application visibility and tracking)

- AppFW (policy enforcement by application name)

- Custom signatures

- Dynamic signature updates

- User-based application policy enforcement

• Antivirus

- Express AV (stream-based AV, not available on SRX100 and

SRX110)

- File-based antivirus

› Signature database

› Protocols scanned: POP3, hTTP, SMTP, IMAP, FTP

› Antispyware

› Anti-adware

› Antikeylogger

- Cloud-based antivirus

• Antispam
• Integrated enhanced Web filtering

- Category granularity (90+ categories)

- Real time threat score

• Redirect Web filtering
• Content Security Accelerator in SRX210 high memory, SRX220,

SRX240, SRX550, and SRX650

• ExpressAV option in SRX210 high memory, SRX220 high memory,

SRX240, SRX550, and SRX650

• Content filtering

- Based on MIME type, file extension, and protocol commands

VPN

• Auto VPN (Zero Touch hub)
• Tunnels (GRE, IP-IP, IPsec)
• IPsec, Data Encryption Standard (DES) (56-bit), triple Data

Encryption Standard (3DES) (168-bit), Advanced Encryption
Standard (AES) (128-bit+) encryption

• Message Digest 5 (MD5),ShA-1 , ShA-128, ShA-256

authentication

• Junos Pulse Dynamic VPN client; browser-based remote access

feature requiring a license

Multimedia Transport

• Compressed Real-Time Transport Protocol (CRTP)

High Availability

• VRRP
• JSRP
• Stateful failover and dual box clustering
• SRX550/SRX650:

- Redundant power (optional)

- GPIM hot swap

- Future internal failover and SRE hot swap (OIR) on SRX650

• Backup link via 3G/4G LTE wireless or other WAN
• Active/active—L3 mode

• Active/passive—L3 mode

• Configuration synchronization

• Session synchronization for firewall and VPN

• Session failover for routing change

• Device failure detection

• Link failure detection

• IP Monitoring with route and interface failover

IPv6

• OSPFv3
• RIPng
• IPv6 Multicast Listener Discovery (MLD)
• BGP
• ISIS

Wireless

• CX111 Cellular 3G/4G/LTE Broadband Data Bridge supported on all

branch SRX Series devices

• 3G USB modem support for SRX100, SRX110, and SRX210
• AX411 Wireless LAN (Wi-Fi 802.11 a/b/g/n) Access Point supported

on all branch SRX Series devices

SLA, Measurement, and Monitoring

• Real-time performance monitoring (RPM)
• Sessions, packets, and bandwidth usage
• Juniper J-Flow monitoring and accounting services
• IP Monitoring

Logging

• Syslog
• Traceroute
• Extensive control- and data-plane structured and unstructured

syslog

Administration

• Juniper Networks Network and Security Manager support (NSM)
• Juniper Networks Junos Space Security Design support
• Juniper Networks STRM Series Security Threat Response

Managers support

• Juniper Networks Advanced Insight Solutions support
• External administrator database (RADIUS, LDAP, SecureID)
• Auto-configuration
• Configuration rollback
• Rescue configuration with button
• Commit confirm for changes
• Auto-record for diagnostics
• Software upgrades (USB upgrade option)
• Juniper Networks Junos

Web

• Command-line interface
• Smart image download

Certifications

• Common Criteria (CC) EAL4

• Common Criteria (CC) EAL3
• FIPS-140 Level 2
• ICSA Corporate Firewall and ICSA IPSec 1.3
• USGv6 – Firewall Profile

Specifications

(continued)

Unified Threat Management – antivirus, antispam, Web filtering, AppSecure and IPS require individual subscription license and is only supported on high memory versions of the SRX Series. UTM is

not supported on the low memory version. Please see the ordering section for options.

SRX100B installed with 1 GB DRAM, with 512 MB accessible. Optional upgrade to 1 GB DRAM is available with purchase of memory software license key.

Coming soon for SRX110.

Certified on Junos-FIPS 10.4R4 on all versions of SRX100, SRX210, SRX220, SRX240 and SRX650.