Overview

SRX Series Services Gateways are high-performance network security solutions for enterprises and service providers that pack high port-density, advanced security, and flexible connectivity, into easily managed platforms.

These versatile and cost-effective solutions support fast, secure, and highly-available, data center and branch operations, with unmatched performance to deliver some of the industry’s best price-performance ratios and lowest TCOs.

The SRX5400 Services Gateway is a next-generation security platform ideally suited for service provider, large enterprise and public sector networks. It is based on a revolutionary new architecture and utilizes new line cards to provide market-leading connectivity, performance and service integration.

Its superior price/performance value and small footprint makes the SRX5400 Services Gateway ideal for securing enterprise edges and data centers, service provider infrastructures, and next-generation services and applications.

The SRX5400 supports up to 65 Gbps firewall and 22 Gbps IPS, as well as 450,000 new connections per second and 28 million concurrent user sessions. It offers 10GbE, 40GbE, and 100GbE connectivity options.

Specifications

Junos Software version tested	Junos 12.1X46
Firewall performance (max)	65Gbps
IPS performance (NSS 4.2.1)	22Gbps
AES256+SHA-1 / 3DES+SHA-1 VPN performance	43Gbps
Maximum concurrent sessions	28 million
New sessions/second (sustained, TCP, 3-way)	450,000
Maximum security policies	80,000
Maximum users supported	Unrestricted
Maximum available slots for IOCs	2
Fixed I/O ports	N/A
CX111 3G Bridge support	N/A
Internal 3G Express Card Slot support	N/A
Centralized Management	Junos Space Security Design
LAN interface options	1 x 100 Gigabit Ethernet 2 x 40 Gigabit Ethernet 10 x 10 Gigabit Ethernet
High-availability support	Active/Passive, Active/Active Low impact chassis cluster Interface aggregation groups across chassis cluster
AppSecure Services	Application Identification: yes Application Denial of Service Protection (AppDoS): yes AppTrack: yes AppQoS: yes AppFW: yes
Dimensions and Power	Dimensions (W x H x D): 8.7 x 17.45 x 24.5 in (22.1 x 44.3 x 62.2 cm) Weight: Chassis: Fully Configured: 128 lb / 58.1 kg Power supply (AC): 100 to 240 V AC Power supply (DC): -40 to -60 V DC Maximum power draw: 4,100 W
Firewall	Network attack detection: Yes DoS and DDoS protection: Yes TCP reassembly for fragmented packet protection: Yes Brute force attack mitigation: Yes SYN cookie protection: Yes Zone-based IP spoofing: Yes Malformed packet protection: Yes GPRS stateful inspection: Yes
Intrusion Prevention System	Stateful protocol signatures: Yes Attack detection mechanisms: Stateful signatures, protocol anomaly detection (zero-day coverage), application identification Attack response mechanisms: Drop connection, close connection, session packet log, session summary, email, custom session Attack notification mechanisms: Structured syslog Worm protection: Yes SSL encrypted traffic inspection: Yes Simplified installation through recommended policies: Yes Trojan protection: Yes Spyware/adware/keylogger protection: Yes Other malware protection: Yes Protection against attack proliferation from infected systems: Yes Reconnaissance protection: Yes Request and response side attack protection: Yes Compound attacks — combines stateful signatures and protocol anomalies: Yes Create custom attack signatures: Yes Access contexts for customization: 500+ Attack editing (port range, other): Yes Stream signatures: Yes Protocol thresholds: Yes Stateful protocol signatures: Yes Approximate number of attacks covered: 8,000+ Detailed threat descriptions and remediation/patch info: Yes Create and enforce appropriate application-usage policies: Yes Attacker and target audit trail and reporting: Yes Deployment modes: Inline or TAP