SRX SRX00 SRX20 0/00 LAN 8 USB 3G USB Web AppSecure UTM UAC 52MB DRAM/ GB 2 DRAMGB 0/00/000 LAN 2 0/00 LAN 6 Mini-PIM ExpressCard USB 3G USB af

Transcription

1 DATASHEET SRX SRX00 SRX20 SRX220 SRX550 SRX650 SRX SRX Junos OS Junos OS OS SRX EX M MX 3D T SRX Junos Junos OS SRX Junos OS 00 OS IPv4/IPv6 OSPF BGP 5 SRX SRX SRX IPSec VPN NAT VPN IPS AppSecure Web UTM SRX IPS SRX UAC SRX WAN T/E DS3/E3 xdsl Wi-Fi 3G/4G LTE Junos OS CLI GUI Network and Security Manage NSM Junos Space Security Design

2 SRX SRX00 SRX20 0/00 LAN 8 USB 3G USB Web AppSecure UTM UAC 52MB DRAM/ GB 2 DRAMGB 0/00/000 LAN 2 0/00 LAN 6 Mini-PIM ExpressCard USB 3G USB af PoE Power over Ethernet4 T/EADSL/2/2+ VDSL G.SHDSL SFP Small Form-factor Pluggable IPS ExpressAV Web AppSecure UTM UAC GB DRAMGB 52MB DRAM SRX220 SRX550 SRX650 0/00/000 LAN 8 Mini-PIM 2 PoE 8 PoE at 802.3af T/EADSL2/2+ VDSL G.SHDSL SFP IPS ExpressAV Web AppSecure UTM UAC GB DRAM GB 0/00/000 LAN 6 Mini-PIM 4 PoE 6 PoE+802.3at 802.3af T/EADSL2/2+ VDSL G.SHDSL SFP IPS ExpressAV Web AppSecure UTM UAC GB/2GB DRAM 2GB 0 0/00/000 6 SFP 4 Mini-PIM 2 GPIM 6 GPIM XPIM T/EADSL2/2+ VDSL G.SHDSL DS3/E3 GbE 52 SFP 40 PoE 802.3at PoE af 50 PoE 0/00/000 0GbE IPS ExpressAV Web AppSecure UTM UAC 2GB DRAM 2GB AC AC PoE PoE 250W 500W 0/00/000 LAN 4 GPIM 8 GPIM XPIM T E DS3/E3 52 SFP 48 PoE 802.3at PoE af 52 PoE 0/00/000 0GbE IPS ExpressAV Web AppSecure UTM UAC 2GB DRAM 2GB AC AC PoE PoE 250W 500W SRX WAN PC UTM Web AppSecure IPS UTM UAC 2 SRX00B 52MB DRAM GB DRAM 2

3 SRX アントラスト ゾーン インターネット トラスト ゾーン SRX イントラネット ゲスト DMZ SRX 2 LAN SRX WAN Web CLI JSRP Junos OS Services Redundancy Protocol SRX JSRP 2 SRX / SRX / VPN SRX / IPSec NAT VRRP / JSRP / / 高可用性 アクティブ / スタンバイ アクティブ / スタンバイ アクティブ / アクティブ アクティブ / アクティブ インターネット インターネット インターネット インターネット アクティブ スタンバイ スタンバイ アクティブアクティブ アクティブ スタンバイ アクティブ 2 3

4 Junos OS Junos OS 3 Junos OS Junos OS / / セッションの最初のパケットの処理 セッション / 転送テーブル受信インタフェース ポリシーにより拒否 : 破棄 セキュリティポリシーの評価とネクストホップのルックアップ テーブルの更新 許可されたトラフィックの転送 3 送信インタフェース 小規模オフィス SRX0 3G の接続性 インターネット SF.com フェイスブックスカイプ Google SIP サーバー UC サーバー アプリケーションサーバープライベートデータセンター VDSL プライベート WAN SRX650 SRX650 WLC800 EX4200 EX4200 ホストされた Web 大規模なHAオフィスサーバー サーバー T/E VDSL T/E 4G LTE SFP DS3/E3 SRX20 4G LTE SRX550 SRX550 AX4 AX4 AX4 CX WLC200 EX3300 EX3300 WLA532 中規模な支社 (HA) 小規模な支社 ( リンク HA) 小規模な支社 ( 携帯電話でバックアップ ) 4 4

5 SRX00 SRX20 SRX220 SRX550 SRX650 IPv4 IPv6 ISO Connectionless Network Service CLNS RIPv2+v OSPF/OSPFv3 BGP BGP 2 IS-IS IGMPv/2/3 Internet Group Management Protocol PIM-SM/DM/SSM SDP Session Description Protocol DVMRP Distance Vector Multicast Routing Protocol IPsec MSDP MPLS RSVP LDP CCC TCC 2VPN VPLS 3VPN VPLS NGMVPN IP DHCP PPPoE DHCP DHCP NAT-SrcPAT NAT NAT-Dst PAT NAT NAT64 MAC+VLAN PPP Point-to-Point Protocol - MLPPP Multilink Point-to-Point Protocol - MLFR Multilink Frame Relay FRF.5 FRF.6 FRF.2 LFI HDLC High-Level Data Link Control RS-232 RS-449 X.2 V.35 EIA q VLAN PPPoE Point-to-Point Protocol over Ethernet L2 802.D RSTP MSTP 802.3ad LACP 802.x LLDP 802.ad Q-in-Q IGMP 2 QoS 802.p DSCP EXP CBQ Class based queuing WRED Weighted random early detection VLAN DLCI data-link connection identifier MF DiffServ DoS Denial of Service /DDoS Distributed Denial of Service - TCP - - SYN Cookie - IP - UTM IPS IPS / UTM Web AppSecure IPS SRX UTM 2 BGP SRX550 SRX650 5

6 UTM AppSecure - AppTrack - AppFW Express AV AV SRX00 - POP3 HTTP SMTP IMAP FTP - Web Web SRX20 SRX220 SRX550 SRX650 ExpressAV SRX20 SRX220 SRX550 SRX650 - MIME VPN VPN Zero Touch Hub GRE IP-in-IP IPSec IPSec, DES Data Encryption Standard 56-bit 3DES triple Data Encryption Standard 68-bit AES Advanced Encryption Standard 28-bit+ MD5 Message Digest 5 SHA- SHA-28 SHA-256 Junos Pulse VPN CRTP Compressed Real-Time Transport Protocol VRRP JSRP SRX550/SRX GPIM - SRX650 SRE OIR 3G/4G LTE WAN / L3 2 / L3 2 2 /VPN IP IPv6 OSPFv3 RIPng IPv6 MLD Multicast Listener Discovery BGP ISIS CX Cellular 3G/4G LTE Broadband Data Bridge SRX 3G USB SRX00 SRX20 AX4 LAN Wi-Fi 802. a/b/g/n SRX SLA RPM Real-time performance monitoring J-Flow IP Syslog Traceroute Syslog Network and Security Manager Junos Space Security Design STRM Security Threat Response Manager Advanced Insight Solutions RADIUS LDAP SecureID (USB ) Junos Web Common Criteria CC EAL4 3 Common Criteria CC EAL3 FIPS-40 2 ICSA Corporate Firewall ICSA IPSec.3 USGv6 FIPS 40-2 SRX00B SRX20BE B SRX650-BASE-SRE6-645AP with JNPR-FIPS-TAMPER-LBLS EMI/EMC FIPS Triple-DES AES DSA SHS - RNG RSA SRX650 NEBS SRX DoD DoD JITC Joint Interoperability Test Command UC APL Unified Capabilities Approved Product List UTM Web AppSecure IPS SRX UTM 2 SRX00B 52MB DRAM GB DRAM 3 Junos -SRX00 SRX20 SRX220 SRX650 FIPS 0.4R4 6

7 SRX00 SRX20* SRX220 * SRX550 SRX650 Junos Junos OS.4R5 Junos OS.4R5 Junos OS.4R5 Junos OS.4R5 Junos OS 2. Junos OS.4R5 700Mbps 850Mbps 950Mbps.8Gbps 5.5Gbps 7Gbps IMIX 200Mbps 250Mbps 300Mbps 600Mbps.7Gbps 2.5Gbps + PPS 64 5 HTTP 70Kpps 95Kpps 25Kpps 200Kpps 700Kpps 850Kpps 00Mbps 290Mbps 350Mbps 830Mbps.5Gbps 2Gbps IPSec VPN 65Mbps 85Mbps 00Mbps 300Mbps.0Gbps.5Gbps IPSec VPN ,000 2,000 3,000 AppSecure 90Mbps 250Mbps 300Mbps 750Mbps.5Gbps.9Gbps 5 IPS intrusion prevention system 75Mbps 65Mbps 80Mbps 230Mbps 800Mbps Gbps 25Mbps Sophos AV 30Mbps Sophos AV 35Mbps Sophos AV 85Mbps Sophos AV 300Mbps Sophos AV 350Mbps Sophos AV /,800 2,200 2,800 8,500 27,000 35,000 DRAM 6K/32K 52MB 3 /GB DRAM 32K/64K 96K 52MB/GB DRAM GB DRAM 28K/256K GB/2GB DRAM 375K 2 2 GB DRAM 52K 2 2GB DRAM ,048,024/4,096 7,256 8,92 I/O 8 x 0/00 2 0/00/ 000BASE-T +6 0/00 8 0/00/ 000BASE-T 6 0/00/ 000BASE-T 6 0/00/000 BASE-T+4 SFP 4 0/00/ 000BASE-T I/O SRX Mini-PIM 2 SRX Mini-PIM 4 SRX Mini-PIM 2 SRX 8 GPIM Mini-PIM 6 GPIM GPIM XPIM GPIM XPIM 2 4 ExpressCard 3G WAN WAN/LAN PoE SRX af 50W af/at 20W af/at 50W af/at 247W af/at 247W USB SRE 2 PPS 00Kpps 50Kpps 200Kpps 300Kpps 000Kpps 000Kpps BGP BGP BGP 4K/8K 6 8K/6K 6 32K 600K 72 K 800K OSPF OSPF 4K/8K 6 8K/6K 6 32K 200K 72 K 800K RIP v/v RIP v2 4K/8K 6 8K/6K 6 32K 200K 72 K 800K 4K/8K 6 8K/6K 6 32K 256K 72 K 800K *SRX20 UTM 2 UTM 3 SRX00B 52MB DRAM GB DRAM 4 SRX650.4 SRE 5 44 HTTP 6 / 7

8 SRX00 SRX20* SRX220 * SRX550 SRX650 ECMP RPF IPSec VPN VPN ,000 2,000 3, DES 56-bit 3DES 68-bit AES 256-bit MD-5/SHA-/SHA-2 IKE v+v2 PKI X.509 PFS DH VPN IPSec NAT VPN RADIUS RSA SecureID LDAP RADIUS RSA SecureID LDAP RADIUS RSA SecureID LDAP RADIUS RSA SecureID LDAP RADIUS RSA SecureID LDAP RADIUS RSA SecureID LDAP RADIUS XAUTH VPN Web 802.X PKI PKCS 7 PKCS 0 VeriSign Entrust VeriSign Entrust VeriSign Entrust VeriSign Entrust VeriSign Entrust VeriSign Entrust Microsoft RSA Keon iplanet Netscape Baltimore DoD PKI Microsoft RSA Keon iplanet Netscape Baltimore DoD PKI Microsoft RSA Keon iplanet Netscape Baltimore DoD PKI Microsoft RSA Keon iplanet Netscape Baltimore DoD PKI Microsoft RSA Keon iplanet Netscape Baltimore DoD PKI Microsoft RSA Keon iplanet Netscape Baltimore DoD PKI VLAN ,000 3,967 3,967 PPP/MLPPP PPPoE PPPoA MLPPP MLFR FRF.5 FRF.6 MLFR HDLC *SRX20 8

9 SRX00 SRX20* SRX220 * SRX550 SRX650 CX 3G/4G LTE Bridge Junos/SRX CX 3G ExpressCard USB 3G AX4 WLAN WLA WLC > 4 > 4 > 4 > 4 > 4 > 4 DRAM 52MB GB 52MB/GB GB GB/2GB 2GB 2GB 2 DIMM 4 DIMM GB GB GB GB/2GB 2GB CF SRE 2GB CF 2GB CF USB cm cm cm cm cm cm kg 2.5 PoE.5kg PoE.56kg LM HM kg kg AC PoE 2kg kg.2 HM - DC 5.7kg 2.56 /5.6kg 2.3 PoE RU RU RU RU 2RU 2RU AC 2 AC V 30W AC V AC V 50W LM 60W PoE 60W PoE HM /50W PoE /200W PoE 90W HM - DC 360W PoE PoE 50W 20W 50W 247W /494W AC V AC V 645W 645W 645W 645W 247W /494W 0W 27W LM 28W LM 7W B 85W 22W 28W HM 84W PoE 74W H 72W H- DC 86W H- PoE 50 60Hz 50 60Hz 50 60Hz 50 60Hz 50 60Hz 50 60Hz 0.25A AC00V 0.4A AC 00V 0.44A AC 00V.0A AC 00V 7.5A AC 00V LM 0.44A AC HM 00V HM.3A AC 00V PoE LM.A AC 00V HM 3.0A AC 00V PoE 60A 80A LM/HM 80A HM 60A PoE 35 BTU/hr 92BTU/hr 26BTU/hr SRX20BE SRX220H 95BTU/hr SRX20HE 6BTU/hr SRX20HE-PoE PoE 0.5A AC 00V PoE 5.3A AC 00V PoE 8.3A AC 00V PoE 40A LM/HM 45A /2 45A /2 45A PoE 242BTU/hr 238BTU/hr 39BTU/hr B 253BTU/hr H 246BTU/hr H-DC 294BTU/hr H-PoE *SRX20 SRX00B 52MB DRAM GB DRAM 2 AC00V 9

10 SRX00 SRX20* SRX220 * SRX550 SRX BTU/hr,20BTU/hr SRX20BE 26BTU/hr SRX20HE 57BTU/hr 26BTU/hr SRX220H SRX20HE-PoE 396BTU/hr,449BTU/hr B 427BTU/hr H 409BTU/hr H-DC 560BTU/hr H-PoE ISO BTU/hr 0dB 29.dB 5.dB 70.0dB 5.8dB 60.9dB F F F F F F F F F F F F 0 90% 5 95% 0 90% 5 95% 0 90% 5 95% 0 90% 5 95% 0 90% 5 95% 0 90% 5 95% MTBF Telcordia 24.8 SRX00B 24.8 SRX00H SRX20HE SRX220H SRX20HE-PoESRX220H-PoE.97 B.63 H 9.92 H-PoE UL UL UL UL UL UL EMC FCC Class B FCC Class B FCC Class A FCC Class A FCC Class A FCC Class A TIA-968 TIA-968 TIA-968 TIA-968 TIA-966 TIA-966 CSA CSA CSA CSA CSA CSA EMC ICES class B ICES class B ICES Class A ICES class A ICES class A ICES class A CS-03 CS-03 CS-03 CS-03 CS-03 CS EMC CISPR22 Class B AS / ACIF S 002 S 06 S 043. S043.2 CISPR22 Class B AS / ACIF S 002 S 06 S 043. S043.2 CISPR22 Class A AS / ACIF S 002 S 06 S 043. S043.2 CISPR22 Class A AS / ACIF S 002 S 06 S 043. S043.2 CISPR22 Class A CISPR22 Class A AS / ACIF S 06 AS / ACIF S EMC CISPR22 Class B CISPR22 Class B CISPR22 Class A CISPR22 Class A CISPR22 Class A CISPR22 Class A PTC 27 PTC 273 PTC 27 PTC 273 PTC 27 PTC 273 PTC 27 PTC 273 PTC 27 PTC 27 CB CB CB CB CB CB EMC VCCI Class B VCCI Class B VCCI Class A VCCI Class A VCCI Class A VCCI Class A *SRX20 SRX20H-POE Class A 0

11 SRX00 SRX20* SRX220 * SRX550 SRX650 EU EN EN EN EN EN EN EMC EN Class B EN EN Class B EN EN Class A EN EN Class A EN EN Class A EN EN Class A EN CTR 2/3 CTR 2 DoC CTR 2/3 CTR 2 DoC CTR 2/3 CTR 2 DoC CTR 2/3 CTR 2 DoC CTR 2/3 DoC CTR 2/3 DoC *SRX20 SRX20H-POE Class A

12 SRX00 SRX20 SRX220 SRX550 SRX650 SRX-GP-6GE 0/00/000BASE-T XPIM 6 SRX-GP-6GE-POE 0/00/000BASE-T PoE XPIM 6 SRX-GP-2XE- 2 0GbE SFP+/0GbE SFPPTX BASE-T XPIM SRX-GP-24GE 0/00/000BASE-T XPIM 24 SFP 4 SRX-GP-24GE-POE 0/00/000BASE-T PoE XPIM 24 SFP 4 SRX-GP-8SFP 8 GbE SFP XPIM SRX-GP-DUAL-T-E T/E GPIM SRX-GP-QUAD-T-E T/E GPIM SRX-GP-DS3-E3 DS3/ E3 GPIM GPIM SRX-GP-8SERIAL 8 GPIM SRX-MP-SERIAL Mini-PIM SRX-MP-ADSL2-A ADSL2+ Mini-PIM ADSL/ADSL2/ADSL2+ Annex A SRX-MP-ADSL2-B ADSL2+ Mini-PIM ADSL/ADSL2/ADSL2+ Annex B SRX-MP-VDSL2-A VDSL2 Mini-PIM Annex A ADSL2/ ADSL2+ SRX-MP-8GSHDSL 8 4 G.SHDSL Mini-PIM SRX-MP-SFP-GE SFP Mini-PIM SRX-MP-TE T E Mini- PIM Twitter Facebook F FAX Juniper Networks, Inc. 94 North Mathilda Avenue Sunnyvale, CA USA 888-JUNIPER ( ) FAX URL Juniper Networks International B.V. Boeing Avenue PZ Schiphol-Rijk Amsterdam, The Netherlands FAX URL Copyright 203, Juniper Networks, Inc. All rights reserved. Juniper Networks Junos NetScreen ScreenOS Juniper NetworksJuniper Networks, Inc JP Apr 203 2