Межсетевой экран Juniper SRX5600E-BASE-DC
Межсетевые экраны SRX5600E – наиболее подходящие и оптимальное решение для защиты специализированных центров обработки данных крупных корпоративных сетей, а также сетевых инфраструктур локальных операторов связи.
Брандмауэры серии Juniper SRX5600E разработаны для защиты услуг и приложений нового поколения, также функционал экранов позволяет обеспечивать на высоком уровне работоспособность приложений нового поколения и применения особых, уникальных политик безопасности к отдельным рабочим областям, зонам.
Juniper SRX5600Е имеет 40 портов Gigabit Ethernet SFP, 4 порта 10 Gigabit Ethernet (SR или LR), 16 портов 10/100/1000 Ethernet FlexIOC и 4 порта 10 Gigabit Ethernet Ethernet (SR или LR) FlexIOC. Как и другие устройства Juniper, шлюз безопасности SRX5600 работает под управлением операционной системы Junos
Шлюз Juniper SRX5600Е поддерживает межсетевые экраны с пропускной способностью до 60 Гбит/с, IPS со скоростью 15 Гбит/с, а также обеспечивает 350 000 новых соединений в секунду и одновременную работу 9 млн. пользовательских сессий. Экран Juniper SRX5600Е отличается высоким уровнем масштабируемости. Juniper SRX5600Е поддерживает функционал: FW, IPS, NAT, IPSec VPN, DDoS, QoS и роутинг, любой сервис для любого трафика и разделение control and data planes.
Технические характеристики межсетевого экрана Juniper SRX5600E-BASE-DC:
|
|
|
|
|
SRX5400 |
SRX5600 |
SRX5800 |
Maximum Performance and Capacity1 |
|||
Junos OS version tested |
Junos OS 15.1x49 |
Junos OS 15.1x49 |
Junos OS 15.1x49 |
Firewall performance, large packet (with Express Path) |
480 Gbps |
960 Gbps |
2 Tbps |
Firewall performance, IMIX (with Express Path) |
468 Gbps |
936 Gbps |
2 Tbps |
Firewall performance |
65 Gbps |
130 Gbps |
320 Gbps |
Latency (with Express Path) |
~7-11μsec |
~7-11μsec |
~7-11μsec |
Maximum AES256+SHA-1 VPN performance |
35 Gbps |
100 Gbps |
200 Gbps |
Maximum IPS performance |
22 Gbps |
50 Gbps |
100 Gbps |
Maximum concurrent sessions2 |
42 Million |
114 Million |
230 Million |
New sessions/second (sustained, tcp, 3way) |
420 |
1 Million |
2 Million |
Maximum user supported |
Unrestricted |
Unrestricted |
Unrestricted |
Network Connectivity |
|||
Maximum available slots for IOCs |
2 |
5 |
11 |
IOC3 options (SRX5K-MPC3-100G10G; SRX5K-MPC3-40G10G) |
2x100GbE CFP2 and 4x10GbE SFP+ or 6x40GbE QSFP+ and 24x10GbE SFP+ |
||
IOC2 options (SRX5K-MPC) |
Supports 2 pluggable MIC modules per card. MICs can be mixed from the |
||
IOC options (SRX5K-40GE-SFP; SRX5K-4XGE-XFP) |
|
40 x 1GbE SFP or |
|
Flex IOC options (SRX5K-FPC-IOC) |
|
Supports 2 pluggable IOC modules per card. |
|
Virtualization |
|||
Maximum virtual firewalls with data plane traffic segregation (virtual routers) |
2 |
2 |
2 |
Maximum security zones |
2 |
2 |
2 |
Maximum virtual firewalls with data plane and administrative separation (logical systems) |
32 |
32 |
32 |
Additional off-platform virtual firewall option with Firefly (VM based) |
Unlimited |
Unlimited |
Unlimited |
Maximum number of VLANs |
4,096 |
4,096 |
4,096 |
Routing |
|||
BGP instances |
1 |
1 |
1 |
BGP peers |
2 |
2 |
2 |
BGP routes |
1 Million4 |
1 Million4 |
1 Million4 |
OSPF instances |
400 |
400 |
400 |
OSPF routes |
1 Million |
1 Million |
1 Million |
RIP v1/v2 instances |
50 |
50 |
50 |
RIP v2 table size |
30 |
30 |
30 |
Dynamic routing |
Yes |
Yes |
Yes |
Static routes |
Yes |
Yes |
Yes |
Source-based routing |
Yes |
Yes |
Yes |
Policy-based routing |
Yes |
Yes |
Yes |
Equal cost multipath (ECMP) |
Yes |
Yes |
Yes |
Reverse path forwarding (RPF) |
Yes |
Yes |
Yes |
Multicast |
Yes |
Yes |
Yes |
Certifications |
|||
Safety certifications |
Yes |
Yes |
Yes |
Electromagnetic Compatibility (EMC) certifications |
Yes |
Yes |
Yes |
RoHS2 Compliant (European Directive 2011/65/EU) |
Yes |
Yes |
Yes |
Designed for NEBS Level 3 |
Yes |
Yes |
Yes |
NIST FIPS-140-2 Level 2 |
In progress |
Yes (with Junos OS 10.4R4) |
Yes (with Junos OS 10.4R4) |
Common Criteria NDPP+TFFW EP + VPN EP |
Yes (with Junos OS 12.1x46) |
Yes (with Junos OS 12.1x46) |
Yes (with Junos OS 12.1x46) |
ICSA Network Firewall |
Yes |
Yes |
Yes |
ICSA IPsec |
Yes |
Yes |
Yes |
USGv6 |
Yes (with Junos OS 12.1x46) |
Yes (with Junos OS 12.1x46) |
Yes (with Junos OS 12.1x46) |
Dimensions and Power |
|||
Dimensions (W x H x D) |
17.45 x 8.7 x 24.5 in |
17.5 x 14 x 23.8 in |
17.5 x 27.8 x 23.5 in |
(44.3 x 22.1 x 62.2 cm) |
(44.5 x 35.6 x 60.5 cm) |
(44.5 x 70.5 x 59.7 cm) |
|
Weight |
Fully configured 128 lb (58.1 kg) |
Fully Configured: 180 lb (81.7 kg) |
Fully Configured: 334 lb (151.6 kg) |
Power supply (AC) |
100 to 240 VAC |
100 to 240 VAC |
200 to 240 VAC |
Power supply (DC) |
-40 to -60 VDC |
-40 to -60 VDC |
-40 to -60 VDC |
Maximum power |
4,100 watts (AC high capacity) |
4,100 watts (AC high capacity) |
8,200 watts (AC high capacity) |
Typical Power |
1540 watts |
2440 watts |
5015 watts |
Environmental |
|||
Operating temperature – long term |
41° to 104° F (5° to 40° C) |
41° to 104° F (5° to 40° C) |
41° to 104° F (5° to 40° C) |
Operating temperature – short term8 |
23° to 131° F (-5° to 55° C) |
23° to 131° F (-5° to 55° C) |
23° to 131° F (-5° to 55° C) |
Humidity – long term |
5% to 85% noncondensing |
5% to 85% noncondensing |
5% to 85% noncondensing |
Humidity – short term8 |
5% to 93% noncondensing but not to exceed 0.026kg water/kg of dry air |
5% to 93% noncondensing but not to exceed 0.026kg water/kg of dry air |
5% to 93% noncondensing but not to exceed 0.026kg water/kg of dry air |