Juniper Firewalls

Organizations are increasingly moving workloads to the cloud to capitalize on virtualization benefits—but with that move comes new security requirements. Enter the vSRX Virtual Firewall, providing scalable, secure protection across private, public, and hybrid clouds.

The vSRX offers the same features as our physical SRX Series firewalls but in a virtualized form factor for delivering security services that scale to match network demand. It offers the same features as the SRX appliance, including core firewall, robust networking, full next-gen capabilities, and automated life-cycle management. Handling speeds up to 100 Gbps, the vSRX is the industry’s fastest virtual firewall.

It supports Juniper Contrail, OpenContrail, and third-party software-defined networking (SDN) solutions and integrates with cloud orchestration tools such as OpenStack. Junos Space Security Director with Policy Enforcer enables automated security enforcement, giving you unified management and visibility for physical and virtual assets through a common interface.

Businesses increasingly rely on container technology for developing applications. cSRX provides advanced security services, including content security, AppSecure, and unified threat management in a container form-factor.

Using Docker containers substantially reduces overhead, because each container shares the host’s OS. Regardless of how many containers a server hosts, only one OS instance is in use. And because of containers’ lightweight quality, a server can host many more container instances than virtual machines (VMs) can, yielding tremendous improvements in utilization. With its small footprint and Docker as a container management system, cSRX enables agile, high-density security service deployment.

The cSRX container firewall differs from VMs in several important ways. It runs with no guest OS overhead, has a notably smaller footprint, and is easier to migrate or download. It uses less memory, and its spin-up time measures in subseconds—all leading to higher density at a lower cost.

The SRX110 Services Gateway provides next-generation, enterprise-class security and networking for today’s small businesses and branch offices. Consolidating security, routing, switching, and WAN connectivity in a small desktop device, SRX110 supports up to 700 Mbps firewall and 65 Mbps IPsec VPN in a single, consolidated, cost-effective networking and security platform.

The Juniper Networks SRX Series Services Gateways product family can deliver next-generation firewall protection with application awareness and user role-based controls, plus best-in-class unified threat management (UTM) options to protect and control your business assets.

SRX Series firewalls also feature a built-in, very-high-bit-rate digital subscriber line/asymmetric digital subscriber line (VDSL/ADSL2)+ WAN interface, 3G/4G wireless capabilities, and an 8-port Fast Ethernet switch.

The SRX220 Services Gateway provides robust, next-generation, enterprise-class security and networking for today’s small to midsize businesses and distributed enterprise locations. The SRX220 consolidates security, routing, switching, and WAN connectivity in an all-in-one 1 U device that supports up to 950 Mbps firewall, 100 Mbps IPsec VPN, and 80 Mbps intrusion prevention system (IPS).

The Juniper Networks SRX Series Services Gateways product family can deliver next-generation firewall protection with application awareness and user role-based controls, plus best-in-class unified threat management (UTM) options to protect and control your business assets.

The SRX300 line of services gateways delivers a next-generation networking and security solution that helps you support the changing needs of your cloud-enabled enterprise network. Whether you’re rolling out new services and applications across multiple locations, connecting to the cloud, or improving operational efficiency, the SRX300 line provides scalable, secure, and easy-to-manage connectivity.

As your network traffic grows, high-density native Gigabit Ethernet ports available on the SRX300 platforms provide secure connectivity to help you keep pace. Next-generation firewall and unified threat management (UTM) capabilities also make it easier to detect and proactively mitigate threats to improve the user and application experience.

The SRX550 Services Gateway is an all-in-one solution that consolidates security, routing, switching, and WAN connectivity into a single 2 U device. It is a robust, highly flexible device for next-generation security, delivering enterprise-class networking for protecting today’s medium-to-large branch locations and supporting up to 5.5 Gbps firewall, 1 Gbps IPsec VPN, and 800 Mbps intrusion prevention system (IPS).

The SRX550 supports next-generation firewall capabilities such as IPS, application visibility and control, and unified threat management (UTM) features including antivirus, antispam, and enhanced Web filtering. Integrated security intelligence offers adaptive threat protection against Command and Control (C&C)-related botnets, malware, and Web application threats. The SRX550 also enforces policies based on GeoIP data from Juniper-provided feeds. IT organizations can use their own custom and third-party feeds for advanced threat protection.

The foundation for strong business growth is secure connectivity that can scale to protect your key assets. The SRX1500 Services Gateway delivers that connectivity to help your business meet its goals. Whether rolling out new services and applications, connecting to the cloud, meeting compliance requirements, or improving operational efficiency, the SRX1500 keeps your network scalable, secure, and easy to manage.

A high-performance security appliance, the SRX1500 protects distributed enterprise campus locations and serves as a perimeter firewall for small to midsize data centers.

The combination of hardware and software architectures on the SRX1500 delivers very high performance in a small, 1 U form factor. The SRX1500 performs ultra-fast, high-speed firewalling and intrusion protection that can extend to protect end-user devices. Firewall performance remains consistent across different application profiles and usage patterns. Unified threat management (UTM) and intrusion prevention system (IPS) capabilities make it easier to detect intrusions, enforce policies, and proactively mitigate threats to improve the user and application experience.

The SRX3400 Services Gateway is ideally suited for medium to large enterprise, public sector, and service provider networks. It secures and segments data center network infrastructures, aggregates advanced security services, and enforces unique per-zone security policies in small to midsize server farms and hosting sites.

The SRX3400 is a next-generation security platform that delivers market-leading performance, scalability, and service integration in a midsize 3 U form factor. It supports up to 30 Gbps firewall, 8 Gbps firewall and IPS, or 8 Gbps of IPsec VPN, and up to 175,000 new connections per second.

Integrated security intelligence offers adaptive threat protection against command and control (C&C)-related botnets and Web application threats, as well as policy enforcement based on GeoIP data coming from Juniper provided feeds. Customers may also leverage their own custom and third-party feeds for protection from advanced malware and other threats.

The SRX4000 line of services gateways brings you integrated security and networking features for protecting next-generation services and applications. These gateways are designed for small to medium sized enterprise campuses and data centers. They can also serve as secure routers and VPN concentrators.

SRX4000 Services Gateways set a new benchmark for price and performance while enabling secure migration into hybrid clouds.

The SRX4000 line includes two models, each of which delivers market-leading performance, scalability, and security services in a compact, 1 U platform:

• The SRX4100 supports up to 20 Gbps IMIX and 5 Gbps next-generation firewall performance.
• The SRX4200 supports up to 40 Gbps IMIX and 10 Gbps next-generation firewall performance.

The high-performance SRX4600 next-generation firewall offers fast, scalable protection for enterprise private cloud, campus networks, cloud service providers, and telcos. With integrated malware prevention and a full suite of next-generation services, the SRX4600 is optimized to provide consistent protection across private cloud environments.

Fortification against advanced threats and zero-day attacks is ensured with real-time updates to IPS signatures, industry-leading antivirus and URL filtering, expansive application visibility, user identification, and deep content inspection.

As the center point of your defense, the SRX4600 offers unprecedented command over your security system with “single pane of glass” management through Junos Space Security Director.

The SRX5600 Services Gateway is a next-generation security platform ideally suited for service provider, large enterprise, and public sector networks.

Based on an innovative architecture that provides outstanding performance, scalability, and service integration, the SRX5600 delivers the most open and scalable security platform in the industry. Integrated threat intelligence offers adaptive, customized threat protection against command and control (C&C)-related botnets and malware, as well as dynamic policy enforcement based on GeoIP and threat data, with intelligence from Juniper-provided feeds. In companies that have their own threat collection capabilities, you can also leverage the SRX5600 as an enforcement point for custom and third-party feeds, protecting against advanced threats unique to your industry.

Extraordinary scalability makes the SRX5600 Services Gateway particularly well suited for securing large enterprise data centers, service provider infrastructures, and next-generation services and applications, as well as enforcing unique per-zone security policies.

The SRX5600 supports firewall performance of up to 960 Gbps, advanced anti-threat capabilities, and an unprecedented 100 million concurrent user sessions on a highly reliable system, with six-nines availability.

The SRX5800 Services Gateway is an award-winning, next-generation security platform based on an innovative architecture that provides outstanding performance, scalability, and service integration.

Ideally suited for service provider, large enterprise, and public sector networks, the SRX5800 supports 2 Tbps firewall, six nines of carrier-grade reliability, more than 100 Gbps intrusion prevention system (IPS), and an industry record-breaking 100 million concurrent user sessions.

The SRX5800 delivers the industry’s most open and scalable threat intelligence platform. Integrated threat intelligence offers adaptive, customized protection against command and control (C&C)-related botnets and malware, as well as dynamic policy enforcement based on GeoIP and threat data, with intelligence from Juniper-provided feeds. In companies that have their own threat collection capabilities, you can also leverage the SRX5800 as an enforcement point for custom and third-party feeds, protecting against advanced threats unique to your industry.