SRX Series Services Gateways for the Branch

Transcription

1 DATASHEET SRX SERIES 서비스게이트웨이 : 브랜치용 SRX100, SRX110, SRX210, SRX220,, 제품소개 주니퍼네트웍스 SRX Series 서비스게이트웨이브랜치용은수십에서수백명의이용자를보유한지점들을위한필수적인연결, 보안, 관리기능들을제공합니다. 하나의장비에빠르고가용성높은스위칭, 라우팅, 보안, 애플리케이션기능들을통합함으로써기업환경에서새로운서비스들과안전한연결성을경제적으로제공할수있으며, 이용자들의만족스러운경험을보장할수있습니다. 브랜치, 캠퍼스, 데이터센터애플리케이션을위한모든 SRX Series 서비스게이트웨이들은주니퍼네트웍스 Junos OS를탑재하고있습니다. Junos OS는다양한장비와기능들전반에서일관성을보장하는동시에뛰어난성능과서비스, 강력한인프라스트럭처보안을실현합니다. 아울러 TCO 절감을실현합니다. 제품설명 주니퍼네트웍스 SRX Series 서비스게이트웨이브랜치용은보안, UTM(unified threat management), 라우팅, 스위칭기능을비용대비효과적인하나의하이퍼포먼스네트워크디바이스에결합시킨제품입니다. SRX Series 브랜치용은 Junos OS 소프트웨어를탑재하고있습니다. Junos OS는전세계 100 대통신사업자들의네트워크에서코어인터넷라우터에탑재되어사용되고있습니다. Junos OS 의 IPv4/IPv6, OSPF, BGP, 멀티캐스트등캐리어급라우팅기능들은 15년이상전세계현장에서검증되어왔습니다. SRX Series 서비스게이트웨이브랜치용은네트워크경계보안, 컨텐트보안, 애플리케이션가시성, 트래킹, 정책실행, 역할기반접근제어, 네트워크전반의위협에대한가시성및제어기능을제공합니다. 보안존과정책들을사용함으로써네트워크관리자가 SRX Series 브랜치용을빠르고안전하게구성하고구축할수있습니다. SRX Series에는또한방화벽, IPsec VPN, NAT(Network Address Translation), 초기설정을위한마법사 (wizard) 가포함되어있어서구성을간소화합니다. 정책기반 VPN은다이나믹어드레싱 (dynamic addressing) 과분할터널링 (split tunneling) 이요구되는보다복잡한보안아키텍처들을지원합니다. 컨텐트보안을위해 SRX Series 브랜치용은 IPS, 애플리케이션보안 (AppSecure), 온박스및클라우드기반안티바이러스, 안티스팸, 고급웹필터링, 데이터손실방지등을포함한종합적인 UTM (Unified Threat Management) 서비스를제공합니다. 컨텐트필터링을통한이러한위협관리는나날이진화하는컨텐트내재형위협들로부터네트워크를보호합니다. 선택사양으로하이퍼포먼스 IPS와안티바이러스스캐닝을위한 Content Security Accelerator 기능을제공합니다. 브랜치용 SRX 시리즈는다른주니퍼보안제품들과통합되어엔터프라이즈전반에대한일원화된접근제어 (UAC: unified access control) 와능동적위협관리 (adaptive threat management) 를제공합니다. 이러한기능들은보안전문가들에게사이버범죄및데이터손실에대응할수있는강력한도구를제공합니다. SRX Series 브랜치용은전세계수천곳의사이트에네트워크를구축해야하는기업들에게하이퍼포먼스의검증된구축기능들을제공합니다. 다양한옵션들은수십에서수천명에이르기까지이용자규모에맞게성능, 기능, 가격대를설정할수있도록해줍니다. 조직의여러사이트들을안전하게연결하기위한 WAN 또는인터넷연결옵션으로이더넷, 시리얼, T1/E1, xdsl, Wi-Fi, 3G/4G LTE 무선옵션을모두사용할수있습니다. SRX Series는또한여러가지외형으로제공되기때문에미션-크리티컬한구축들을위한비용대비효과적인모델을선택할수있습니다. 네트워크관리는검증된 Junos OS CLI (command-line interface) 와스크립팅기능들, 간단한웹기반 GUI, 대규모구축환경을위한주니퍼네트웍스 NSM(Network and Security Manager), 또는중앙관리를위한 Junos Space Security Director를통해간편하게수행할수있습니다. 1

2 아키텍처및주요구성요소 브랜치 SRX Series 제품들의주요하드웨어사양 제품 SRX100 서비스게이트웨이 SRX110 서비스게이트웨이 SRX210 서비스게이트웨이 SRX220 서비스게이트웨이 서비스게이트웨이 SRX550 서비스게이트웨이 SRX650 서비스게이트웨이 설명 8 개의 10/100 Ethernet LAN 포트및 1 개의 USB 포트 (3G USB 지원 ) 종합적인 UTM1; 안티바이러스 1, 안티스팸 1, 고급웹필터링 1, IPS(intrusion prevention system)1, AppSecure1 UAC(Unified Access Control) 및컨텐트필터링 2 GB DRAM, 2 GB 플래쉬디폴트 VDSL/ADSL2+ 및 Ethernet WAN 인터페이스 8 개의 10/100 Ethernet LAN 포트및 2 개의 USB 포트 (3G USB 지원 ) 종합적인 UTM1; 안티바이러스 1, 안티스팸 1, 고급웹필터링 1, IPS(intrusion prevention system)1, AppSecure1 UAC(Unified Access Control) 및컨텐트필터링 2 GB DRAM, 2 GB CF 디폴트 2 개의 10/100/1000 Ethernet 및 6 개의 10/100 Ethernet LAN 포트, 1 개의 Mini-PIM 슬롯, 2 개의 USB 포트 (3G USB 지원 ) 4 개의다이나믹 PoE(Power over Ethernet) 포트 802.3af 팩토리옵션 T1/E1, Serial, ADSL/2/2+, VDSL, G.SHDSL, Ethernet SFP(small form-factor pluggable transceiver) 지원 IPS 및 ExpressAV 성능가속을위한 Content Security Accelerator 하드웨어 ( 하이메모리버전 ) 종합적인 UTM1; 안티바이러스 1, 안티스팸 1, 고급웹필터링 1, IPS(intrusion prevention system)1, AppSecure1 UAC(Unified Access Control) 및컨텐트필터링 2 GB DRAM, 2 GB 플래쉬디폴트 8 개의 10/100/1000 Ethernet LAN 포트, 2 개의 Mini-PIM 슬롯 8 개의다이나믹 PoE(Power over Ethernet) 포트 802.3af 팩토리옵션, PoE at, 802.3af 와백워드호환 T1/E1, Serial, ADSL2/2+, VDSL, G.SHDSL, Ethernet SFP 지원 IPS 및 ExpressAV 성능가속을위한 Content Security Accelerator 하드웨어종합적인 UTM1; 안티바이러스 1, 안티스팸 1, 고급웹필터링 1, IPS(intrusion prevention system)1, AppSecure1 UAC(Unified Access Control) 및컨텐트필터링 2 GB DRAM, 2 GB CF 디폴트 16 개의 10/100/1000 Ethernet LAN 포트, 4 개의 Mini-PIM 슬롯 16 개의 PoE 포트팩토리옵션, PoE at, 802.3af 와백워드호환 T1/E1, Serial, ADSL2/2+, VDSL, G.SHDSL, Ethernet SFP 지원 IPS 및 ExpressAV 성능가속을위한 Content Security Accelerator 하드웨어종합적인 UTM1; 안티바이러스 1, 안티스팸 1, 고급웹필터링 1, IPS(intrusion prevention system)1, AppSecure1 UAC(Unified Access Control) 및컨텐트필터링 2 GB DRAM, 2 GB 컴팩트플래쉬디폴트 10 개의고정 Ethernet 포트 (6 10/100/1000 Copper, 4 SFP), 2 개의 Mini-PIM 슬롯, 6 개의 GPIM 슬롯또는다수 GPIM 및 XPIM 컴비네이션 T1/E1, Serial, ADSL2/2+, VDSL, G.SHDSL, DS3/E3, Gigabit Ethernet 포트지원 ; SFP를포함하여최대 52개의 Ethernet 포트지원 ; 40개의스위치포트와옵션 PoE(802.3at, PoE+, 802.3af 와백워드호환포함 ) 또는 50개의 Non-PoE 10/100/1000 Copper 포트지원, 10GbE IPS 및 ExpressAV 성능가속을위한 Content Security Accelerator 하드웨어종합적인 UTM1; 안티바이러스1, 안티스팸1, 고급웹필터링1, IPS(intrusion prevention system)1, AppSecure1 UAC(Unified Access Control) 및컨텐트필터링 2 GB DRAM 디폴트, 2 GB 컴팩트플래쉬디폴트 AC 전원이중화옵션 ; 표준 AC 전원 (PoE- 레디 ; PoE 전력최대 250 와트싱글파워써플라이또는 500 와트듀얼파워써플라이 ) 4 개의고정포트 10/100/1000 Ethernet LAN 포트, 8 개의 GPIM 슬롯또는다수의 GPIM 및 XPIM 컴비네이션 T1, E1, DS3/E3, Ethernet 포트지원 ; 최대 52 개의 Ethernet 포트 (SFP; 48 개의스위치포트와 802.3at, PoE+, 802.3af 백워드호환 PoE 옵션 ( 또는 52 개의 Non-PoE 10/100/1000 Copper 포트 ), 10GbE 지원 IPS 및 ExpressAV 성능가속을위한 Content Security Accelerator 하드웨어종합적인 UTM1; 안티바이러스1, 안티스팸1, 고급웹필터링1, IPS(intrusion prevention system)1, AppSecure1 UAC(Unified Access Control) 및컨텐트필터링모듈형서비스및라우팅엔진 (Routing Engine); 향후인터널페일오버 (failover) 및핫스왑 (hot-swap) 2 GB DRAM 디폴트, 2 GB 컴팩트플래쉬디폴트, 추가스토리지를위한외부컴팩트플래쉬슬롯 AC 전원이중화옵션 ; 표준 AC 전원 (PoE- 레디 ; PoE 전력최대 250 와트싱글파워써플라이또는 500 와트듀얼파워써플라이 ) 네트워크구축 SRX Series 서비스게이트웨이브랜치용은원격지네트워크및브랜치로케이션에구축되어올 - 인 - 원으로보안기능이포함된 WAN 연결, 통합된이더넷스위칭을통한로컬 PC 및서버들과의연결을제공합니다. 1 Unified Threat Management antivirus, antispam, Web filtering, AppSecure, and IPS require a subscription license option to use the feature. UTM is not supported on the low memory version. Please see the ordering section for options. Content Filtering and UAC are part of the base software with no additional license. 2

3 기능및이점보안라우팅 네트워크보안을위해반드시라우터와방화벽을모두사용해야할까요? 동급최강의라우팅및방화벽기능을하나의제품으로통합한 SRX Series를구축한다면그럴필요가없습니다. 적절하지않은트래픽까지전부다포워딩할필요가있을까요? SRX Series 브랜치용은트래픽이적절한지아닌지를검사하고, 적절한트래픽만을포워딩합니다. 이렇게함으로써네트워 Untrust Zone INTERNET Trust Zone Intranet Guest Zone DMZ Zone 그림 1: 방화벽, 존, 정책 크부하를감소시키고, 중요한애플리케이션들에대역폭을할당할수있습니다. 또한해킹으로부터네트워크를보호할수있습니다. 보안라우터의주목적은방화벽기능과정책적용을제공하는것입니다. 방화벽 ( 존 ) 기능은트래픽플로우와상태를검사하여특정존에대해세션내의오리진및리턴정보가일치하는지확인하고허용되도록보장합니다. 보안정책은해당세션이어떤존내에서만들어져다른존으로이동할수있는지를결정합니다. 이러한아키텍처는다양한종류의클라이언트및서버들로부터패킷들을수신하여모든세션, 모든애플리케이션, 모든이용자들을추적합니다. 이렇게함 으로써허용된트래픽만이자사네트워크에진입하고, 허용된트래픽이목적하는방향으로전송되도록보장할수있습니다. 방화벽설정을간소화하기위해 SRX Series 브랜치용은 존 (zones) 과 정책 두가지기능을사용합니다. 이것들은사용자가설정할수있으며, 디폴트설정에는최소한의트러스트존 (trust zone) 및언트러스트존 (untrust zone) 이포함되어있습니다. 트러스트존은브랜치용 SRX Series에 LAN을연결하는데사용됩니다. 언트러스트존은 WAN 또는인터넷인터페이스를위해사용됩니다. 설치및설정을간소화하기위해디폴트정책이적용되어있어서트러스트존에서언트러스트존으로이동하는트래픽을허용해줍니다. 웹인터페이스또는 CLI를사용하여엔터프라이즈는일련의보안정책들을만들수있습니다. 이러한보안정책들은존내부와각기다른존들사이를이동하는트래픽을제어합니다. 가장넓게는보안존내의모든소스에서나오는모든종류의트래픽이다른존들의어떤목적지로든시간제한없이전송될수있습니다. 가장좁게는제한된시간동안한존내부의특정호스트와다른존의특정호스트사이에서오직한종류의트래픽만이동할수있도록허용하는정책들을만들수있습니다. 고가용성 (High Availability) Junos OS Services Redundancy Protocol (JSRP) 은 SRX Series 브랜치용의핵심기능입니다. JSRP은두대의보안시스템들이하나의고가용성네트워크아키텍처로쉽게통합될수있도록해줍니다. 시스템들과인접한스위치들은이중화된물리적링크로연결됩니다. 링크이중화를통해주니퍼네트웍스는물리적포트에결함이발생하거나, 케이블이빠지는것과같은흔히발생하는시스템오류원인들에대처합니다. 하나의연결이언제든지유지되도록보장함으로써전체시스템중단을방지합니다. 이는라우팅복원프로토콜들의일반적인액티브 / 스탠바이특징과일치합니다. SRX Series 서비스게이트웨이브랜치용이액티브 / 액티브 HA 페어로설정되었을경우, 오류발생시트래픽과설정은자동적으로미러링되어액티브방화벽및 VPN 세션유지를제공합니다. 브랜치용 SRX Series는설정과런타임정보모두를일치시킵니다. 그결과페일오버중에도연결 / 세션상태및플로우정보, IPsec SA(security associations), NAT 트래픽, 어드레스북정보, 설정변경및기타정보들이공유됩니다. VRRP(Virtual Router Redundancy Protocol) 와같은일반적인라우터액티브 / 스탠바이복원프로토콜 (resiliency protocols) 들은모든다이나믹플로우및세션정보는손실되고페일오버발생시반드시재생성되어야합니다. 일부또는모든애플리케이션세션들은링크나노드의 Convergence Time에따라재시작됩니다. 상태를유지함으로써세션이보존될뿐만아니라보안역시그대로유지됩니다. 불안정한네트워크에서는이러한액티브 / 액티브설정이링크변동으로인해세션성능에미치는영향을최소화합니다. 이정책은언트러스트존에서트러스트존으로이동하는모든트래픽을차단합니다. 전통적인라우터는방화벽 ( 세션인식 ) 또는정책 ( 세션의소스및목적지 ) 의개념이 없으므로모든트래픽을포워딩합니다. Active/Standby Active/Standby Active/Active Active/Active INTERNET INTERNET INTERNET INTERNET Active Standby Failure Active Active Active Failure Active EX Series EX Series EX Series EX Series EX Series EX Series EX Series EX Series 그림 2: 고가용성 3

4 성능저하없는세션기반포워딩 통합된라우터와방화벽의처리량과지연시간을최적화하기위해 Junos OS는세션기반포워딩을사용합니다. 세션기반포워딩은전통적인방화벽의세션상태정보와전통적인라우터의넥스트-홉 (next-hop) 포워딩을단일처리로통합한혁신적인기술입니다. Junos OS를사용하면포워딩정책에의해승인된세션은다음단계루트로의포인터와함께포워딩테이블에추가됩니다. 세션이승인되는경우, Junos OS는라우팅테이블에서다음단계 (next-hop) 루트를탐색합니다. 그리고해당세션과다음단계루트를세션과포워딩테이블에기록하고패킷을전송합니다. 이미전송된세션에뒤이어처리되는패킷들은세션과포워딩테이블을이용한단한번의테이블검사를통해서출구 (egress) 인터페이스로전송됩니다. 이미생성된세션의트래픽은허용된세션인지의여부와다음단계 (next-hop) 루트를찾기위해단한번의세션테이블검사만으로처리가됩니다. 이러한효율적인알고리듬은세션정보검증과루트탐색을위한다수의테이블을보유한전통적인라우터에비해세션기반트래픽에대한처리량을향상시키고지연시간을줄입니다. 그림3은세션기반포워딩알고리듬을보여줍니다. 새로운세션이생성되었을때, Junos OS를사용하는세션기반아키텍처는해당세션이정책들에의해승인되는지를검증합니다. Session Initial Packet Processing Ingress Interface Session and Forwarding Table Disallowed by Policy: Dropped Security Policy Evaluation and Next-Hop Lookup Table Update Forwarding for Permitted Traffic Egress Interface 그림 3: 세션기반포워딩알고리듬 Small Office SRX110 3G Connectivity Internet SF.com Facebook Skype Google SIP Server App Server UC Server Private Data Center VDSL Private WAN SRX650 SRX650 WLC800 EX4200 EX4200 Large HA Office Hosted Server Web Server T1/E1 VDSL T1/E1 4G LTE SFP DS3/E3 SRX210 4G LTE CX111 SRX550 SRX550 WLC100 EX3300 EX3300 WLA532 Mid-sized HA Branch Small, Link HA Branch Small Branch with Cellular Backup 그림 4: Distributed Enterprise 4

5 SRX100 SRX110 SRX210 SRX220 SRX550 SRX650 사양 Protocols IPv4, IPv6, ISO Connectionless Network Service (CLNS) Routing and Multicast Static routes RIPv2 +v1 OSPF/OSPFv3 BGP BGP Router Reflector 2 IS-IS Multicast (Internet Group Management Protocol (IGMPv1/2/3), PIM-SM/DM/SSM, Session Protocol (SDP), Distance Vector Multicast Routing Protocol (DVMRP), source-specific, Multicast inside IPsec tunnel), MSDP MPLS (RSVP, LDP, Circuit Cross-connect (CCC), Translational Cross-connect (TCC), Layer 2 VPN (VPLS), Layer 3 VPN, VPLS, NGMVPN) IP Address Management Static DHCP, PPPoE client Internal DHCP server, DHCP Relay Address Translation Source NAT with Port Address Translation (PAT) Static NAT Destination NAT with PAT Persistent NAT, NAT64 Encapsulations Ethernet (MAC and VLAN tagged) Point-to-Point Protocol (PPP) (synchronous) Multilink Point-to-Point Protocol (MLPPP) Frame Relay Multilink Frame Relay (MLFR) (FRF.15, FRF.16), FRF.12, LFI High-Level Data Link Control (HDLC) Serial (RS-232, RS-449, X.21, V.35, EIA-530) 802.1q VLAN support Point-to-Point Protocol over Ethernet (PPPoE) L2 Switching 802.1D, RSTP, MSTP, 802.3ad (LACP) 802.1x, LLDP, 802.1ad (Q-in-Q), IGMP Snooping Layer 2 switching with high availability Traffic Management Quality of Service (QoS) 802.1p, DSCP, EXP Marking, policing, and shaping Class-based queuing with prioritization Weighted random early detection (WRED) Queuing based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multi-field (MF) filters Guaranteed bandwidth Maximum bandwidth Ingress traffic policing Priority-bandwidth utilization DiffServ marking Virtual channels Security Firewall Firewall, zones, screens, policies Stateful firewall, stateless filters Network attack detection Screens denial of service (DoS) and provides distributed denial of service (DDoS) protection (anomaly-based) Prevent replay attack; Anti-Replay Unified Access Control TCP reassembly for fragmented packet protection Brute force attack mitigation SYN cookie protection Zone-based IP spoofing Malformed packet protection UTM 1 Intrusion Prevention System (IPS) Protocol anomaly detection Stateful protocol signatures Intrusion prevention system (IPS) attack pattern obfuscation User role-based policies 1 Unified Threat Management antivirus, antispam, Web filtering, AppSecure, and IPS require individual subscription license. UTM is not supported on the low memory version. Please see the ordering section for options. 2 BGP Route Reflector supported on SRX550 and SRX650. See ordering section for more information. 5

6 사양 ( 계속 ) UTM 1 (continued) Customer signatures creation Daily and emergency updates AppSecure AppTrack (application visibility and tracking) AppFirewall (policy enforcement by application name) Custom signatures AppQoS (network traffic prioritization and bandwidth management) Dynamic signature updates User-based application policy enforcement Antivirus Express AV (stream-based AV, not available on SRX100 and SRX110) File-based antivirus Signature database Protocols scanned: POP3, HTTP, SMTP, IMAP, FTP Antispyware Anti-adware Antikeylogger Cloud-based antivirus Antispam Integrated enhanced Web filtering Category granularity (90+ categories) Real time threat score Redirect Web filtering Content Security Accelerator in SRX210 high memory, SRX220,, 1 ExpressAV option in SRX210 high memory, SRX220 high memory,, 1 Content filtering Based on MIME type, file extension, and protocol commands VPN Auto VPN (Zero Touch Hub) Tunnels (GRE, IP-IP, IPsec) IPsec, Data Encryption Standard (DES) (56-bit), triple Data Encryption Standard (3DES) (168-bit), Advanced Encryption Standard (AES) (128-bit+) encryption Message Digest 5 (MD5),SHA-1, SHA-128, SHA-256 authentication Junos Pulse Dynamic VPN client; browser-based remote access feature requiring a license IPv4 and IPv6 VPN Multi-Proxy ID for site-to-site VPN Multimedia Transport Compressed Real-Time Transport Protocol (CRTP) High Availability VRRP JSRP Stateful failover and dual box clustering SRX550/SRX650: Redundant power (optional) GPIM hot swap Future internal failover and SRE hot swap (OIR) on SRX650 Backup link via 3G/4G LTE wireless or other WAN Active/active L3 mode 2 Active/passive L3 mode 2 Configuration synchronization 2 Session synchronization for firewall and VPN 2 Session failover for routing change 2 Device failure detection 2 Link failure detection 2 IP Monitoring with route and interface failover IPv6 OSPFv3 RIPng IPv6 Multicast Listener Discovery (MLD) BGP ISIS Wireless CX111 Cellular 3G/4G/LTE Broadband Data Bridge supported on all branch SRX Series devices 3G USB modem support for SRX100, SRX110, and SRX210 SLA, Measurement, and Monitoring Real-time performance monitoring (RPM) Sessions, packets, and bandwidth usage Juniper J-Flow monitoring and accounting services IP Monitoring Logging Syslog Traceroute Extensive control- and data-plane structured and unstructured syslog Administration Juniper Networks Network and Security Manager support (NSM) Juniper Networks Junos Space Security Director support Juniper Networks STRM Series Security Threat Response Managers support Juniper Networks Advanced Insight Solutions support External administrator database (RADIUS, LDAP, SecureID) Auto-configuration Configuration rollback Rescue configuration with button Commit confirm for changes Auto-record for diagnostics Software upgrades (USB upgrade option) Juniper Networks J-Web Command-line interface Smart image download Certifications NEBS Compliance for, SRX650 3 Department of Defense (DoD) Certification for SRX Series Services Gateways, including testing and certification by the Department of Defense Joint Interoperability Test Command (JITC) for interoperability with DoD networks and addition of the SRX Series Services Gateways to the Unified Capabilities Approved Product List (UC APL) 1 Unified Threat Management antivirus, antispam, Web filtering, AppSecure and IPS require individual subscription license. UTM is not supported on the low memory version. Please see the ordering section for options. 2 SRX100B installed with 1 GB DRAM, with 512 MB accessible. Optional upgrade to 1 GB DRAM is available with purchase of memory software license key. 3 Coming soon for SRX110 and SRX550. 6

7 제품비교 Maximum Performance and Capacity SRX100 SRX110 SRX210 SRX220 SRX550 SRX650 Junos OS version tested Junos OS 12.1X44-D15 Junos OS 12.1X44-D15 Junos OS 12.1X44-D15 Junos OS 12.1X44-D15 Junos OS 11.4R5 Junos OS 12.1 Junos OS 11.4R5 Firewall performance (large packets) 700 Mbps 700 Mbps 850 Mbps 950 Mbps 1.8 Gbps 5.5 Gbps 7 Gbps Firewall performance (IMIX) 200 Mbps 200 Mbps 250 Mbps 300 Mbps 600 Mbps 1.7 Gbps 2.5 Gbps Firewall + routing PPS (64 Byte) 70 Kpps 70 Kpps 95 Kpps 125 Kpps 200 Kpps 700 Kpps 850 Kpps Firewall performance 3 (HTTP) 100 Mbps 100 Mbps 290 Mbps 350 Mbps 830 Mbps 1.5 Gbps 2 Gbps IPsec VPN throughput (large packets) 65 Mbps 65 Mbps 85 Mbps 100 Mbps 300 Mbps 1.0 Gbps 1.5 Gbps IPsec VPN tunnels ,000 2,000 3,000 AppSecure firewall throughput 3 90 Mbps 90 Mbps 250 Mbps 300 Mbps 750 Mbps 1.5 Gbps 1.9 Gbps IPS (intrusion prevention system) 75 Mbps 75 Mbps 65 Mbps 80 Mbps 230 Mbps 800 Mbps 1 Gbps Antivirus 25 Mbps (Sophos AV) 25 Mbps (Sophos AV) 30 Mbps (Sophos AV) 35 Mbps (Sophos AV) 85 Mbps (Sophos AV) 300 Mbps (Sophos AV) 350 Mbps (Sophos AV) Connections per second 1,800 1,800 2,200 2,800 8,500 27,000 35,000 Maximum concurrent sessions 32 K 1 32 K 1 64 K 1 96 K K K 512 K DRAM options 2 GB DRAM 2 GB DRAM 2 GB DRAM 2 GB DRAM 2 GB DRAM 2 GB DRAM 2 GB DRAM Maximum security policies ,048 4,096 7,256 8,192 Maximum users supported Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Network Connectivity Fixed I/O 8 x 10/100 8 x 10/100 VDSL/ADSL2+ WAN (Annex A or B) 2 x 10/100/1000 BASE-T + 6 x 10/100 8 x 10/100/1000 BASE-T 16 x 10/100/1000 BASE-T 6 x 4 x 10/100/ /100/1000 BASE-T + 4 SFP BASE-T I/O slots N/A N/A 1 x SRX Series Mini-PIM 2 x SRX Series Mini-PIM 4 x SRX Series Mini-PIM 2 x SRX Series Mini-PIM, 6 x GPIM or multiple GPIM and XPIM combinations 8 x GPIM or multiple GPIM and XPIM combinations Services and Routing Engine slots No No No No No No 2 2 ExpressCard slot (3G WAN) No No Yes No No No No WAN/LAN interface options N/A N/A See ordering information See ordering information See ordering information See ordering information See ordering information Maximum number of PoE ports (PoE optional on some SRX Series models) N/A N/A Up to 4 ports of 802.3af with Up to 8 ports of 802.3af/at maximum 50 W with maximum 120 W Up to 16 ports of 802.3af/at with maximum 150 W Up to 40 ports of 802.3af/at with maximum 247 W Up to 48 ports of 802.3af/at with maximum 247 W USB per SRE 1 Based on 2 GbE memory models, which require Junos OS 12.1X44-D15 (exception: Junos OS 11.4r5 for only). 2 SRX650 supports a single Services and Routing Engine (SRE) as of software release Throughput numbers based on HTTP traffic with 44 kilobyte transaction size. 7

8 제품비교 ( 계속 ) SRX100 SRX110 SRX210 SRX220 SRX550 SRX650 Routing Routing (Packet Mode) PPS 100Kpps 100Kpps 150Kpps 200Kpps 300Kpps 1000Kpps 1000Kpps BGP instances BGP peers BGP routes 8 K 8 K 16 K 32 K 600 K 712 K 800 K OSPF instances OSPF routes 8 K 8 K 16 K 32 K 200 K 712 K 800 K RIP v1 / v2 instances RIP v2 routes 8 K 8 K 16 K 32 K 200 K 712 K 800 K Static routes 8 K 8 K 16 K 32 K 256 K 712 K 800 K Source-based routing Yes Yes Yes Yes Yes Yes Yes Policy-based routing Yes Yes Yes Yes Yes Yes Yes Equal-cost multipath (ECMP) Yes Yes Yes Yes Yes Yes Yes Reverse path forwarding (RPF) Yes Yes Yes Yes Yes Yes Yes IPsec VPN Concurrent VPN tunnels ,000 2,000 3,000 Tunnel interfaces DES (56-bit), 3DES (168-bit) and AES (256-bit) MD-5, SHA-1 and SHA-2 authentication Manual key, Internet Key Exchange (IKE v1+v2), public key infrastructure (PKI) (X.509) Perfect forward secrecy (DH Groups) Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 1, 2, 5 Prevent replay attack Yes Yes Yes Yes Yes Yes Yes Dynamic remote access VPN Yes Yes Yes Yes Yes Yes Yes IPsec NAT traversal Yes Yes Yes Yes Yes Yes Yes Redundant VPN gateways Yes Yes Yes Yes Yes Yes Yes Number of remote access users 25 users 25 users 50 users 150 users 250 users 500 users 500 users User Authentication and Access Control Third-party user authentication RADIUS, RSA SecureID, LDAP RADIUS, RSA SecureID, LDAP RADIUS, RSA SecureID, LDAP RADIUS, RSA SecureID, LDAP RADIUS, RSA SecureID, LDAP RADIUS, RSA SecureID, LDAP RADIUS accounting Yes Yes Yes Yes Yes Yes Yes RADIUS, RSA SecureID, LDAP XAUTH VPN, Web-based, 802.X authentication PKI certificate requests (PKCS 7 and PKCS 10) Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Certificate Authorities supported Yes Yes Yes Yes Yes Yes Yes Virtualization Maximum number of security zones Maximum number of virtual routers Maximum number of VLANs ,000 3,967 3,967 8

9 제품비교 ( 계속 ) SRX100 SRX110 SRX210 SRX220 SRX550 SRX650 Encapsulations PPP/MLPPP N/A N/A Yes Yes Yes Yes Yes PPPoE Yes Yes Yes Yes Yes Yes Yes PPPoA N/A Yes Yes Yes Yes Yes Yes MLPPP maximum physical interfaces N/A N/A Frame Relay N/A N/A Yes Yes Yes Yes Yes MLFR (FRF.15, FRF.16) N/A N/A Yes Yes Yes Yes Yes MLFR maximum physical interfaces N/A N/A HDLC N/A N/A Yes Yes Yes Yes Yes Wireless CX111 3G /4G LTE Bridge support Yes Yes Yes Yes Yes Yes Yes Junos/SRX Series management of CX111 Internal 3G ExpressCard slot support Yes Yes Yes Yes Yes Yes Yes No No Yes No No No No USB 3G support Yes Yes Yes No No No No Max WLAN access points supported with AX WLA Series access points and WLC Series controllers supported Flash and Memory > 4 > 4 > 4 > 4 > 4 > 4 > 4 Memory (DRAM) 2 GB 2 GB 2 GB 2 GB 2 GB 2 GB 2 GB Memory slots Fixed memory Fixed memory Fixed memory Fixed memory Fixed memory 2 DIMM 4 DIMM Flash memory 2 GB 2 GB CF, externally accessible 2 GB 2 GB CF, externally accessible 2 GB 2 GB CF internal 2 GB CF internal on SRE, external slot empty, up to 2 GB CF supported USB port for external storage Yes Yes Yes Yes Yes Yes Yes Dimensions and Power Dimensions (W x H x D) 8.5 x 1.4 x 5.8 in (21.6 x 3.6 x 14.7 cm) x 1.72 x in (28 x 4.37 x 21.3 cm) Weight (device and power supply) 2.5 lb (1.1 kg) 6.7 lb (3.06 kg) x 1.73 x 7.12 in (28.0 x 4.4 x 18.1 cm) x 1.73 x 7.11 in (36.3 x 4.4 x 18.1 cm) 3.3 lb (1.5 kg) 3.43 lb non-poe / 4.4 lb (1.56 kg) (2 kg) PoE non-poe No interface No interface modules modules 17.5 x 1.75 x 15.1 in (44.4 x 4.4 x 38.5 cm) For LM and HM-AC: 11.2 lb (5.1 kg) For HM - DC: lb (5.7 kg) / 12.3 lb (5.6 kg) PoE No interface modules 17.5 x 3.5 x 18.2 in (44.4 x 8.8 x 46.2 cm) lb (9.96 kg) No interface modules 1 power supply 17.5 x 3.5 x 18.2 in (44.4 x 8.8 x 46.2 cm) 24.9 lb (11.3 kg) No interface modules 1 power supply Rack-mountable Yes, 1 RU Yes, 1 RU Yes, 1 RU Yes, 1 RU Yes, 1 RU Yes, 2 RU Yes, 2 RU Power supply (AC) VAC, 30 W VAC, 60 W VAC, 60 W non-poe/ 150 W PoE VAC, 150 W for LM 60 W non-poe / and HM 200 W PoE 190 W for HM with DC 360 W for PoE VAC, single 645 W or dual 645 W Maximum PoE power N/A N/A 50 W 120 W 150 W 247 W redundant, or 494 W nonredundant VAC, single 645 W or dual 645 W 247 W redundant, or 494 W nonredundant 9

10 제품비교 ( 계속 ) Dimensions and Power (continued) SRX100 SRX110 SRX210 SRX220 SRX550 SRX650 Average power consumption 10 W 24 W 27 W (LM), 28 W (HM), 84 W (PoE) 28 W (LM) B - 71 W H - 74 W H-DC - 72 W H-PoE- 86 W 85 W 122 W Input frequency Hz Hz Hz Hz Hz Hz Hz Maximum current consumption VAC VAC VAC (LM), VAC (HM), VAC (PoE) Maximum inrush current 60 A 70 A 80 A for LM/HM, 60 A for PoE Average heat dissipation 35 BTU/hr 81 BTU/hr 92 BTU/hr (SRX210BE) 95 BTU/hr (SRX210HE) 116 BTU/hr (SRX210HE- PoE) Maximum heat dissipation 80 BTU/hr 99 BTU/hr 1,120 BTU/hr (SRX210BE) Redundant power supply (hot swappable) Acoustic noise level (Per ISO 7779 Standard) Environment Operational temperature 126 BTU/hr (SRX210HE) 157 BTU/hr (SRX210HE- PoE) VAC (HM) VAC (LM), VAC (HM), VAC (PoE) 80 A for HM 40 A for LM/HM, 45 A for PoE 126 BTU/hour (SRX220H) 126 BTU/hour (SRX220H) 242 BTU/hr (B) 253 BTU/hr (H) 246 BTU/hr (H-DC 294 BTU/hr (SRX40H- PoE) 396 BTU/hr (B) 427 BTU/hr (H) 409 BTU/hr (H-DC) 560 BTU/hr (H- PoE) VAC with single PSU with PoE, VAC with dual PSU with PoE No No No No No Yes (up to maximum capacity of single PSU) VAC with single PSU with PoE, VAC with dual PSU with PoE 45 A for ½ cycle 45 A for ½ cycle 238 BTU/hr 319 BTU/hr 1,449 BTU/hr 699 BTU/hr Yes (up to maximum capacity of single PSU) 0 db (fanless) 0 db (fanless) 29.1 db 51.1 db 70.0 db 51.8 db 60.9 db 32 to 104 F (0 to 40 C) 32 to 104 F (0 to 40 C) 32 to 104 F (0 to 40 C) 32 to 104 F (0 to 40 C) 32 to 104 F (0 to 40 C) 32 to 104 F (0 to 40 C) 32 to 104 F (0 to 40 C) Nonoperational temperature 4 to 158 F, (-20 to 70 C) 4 to 158 F, (-20 to 70 C) 4 to 158 F, (-20 to 70 C) 4 to 158 F, (-20 to 70 C) -40 to 158 F, (-40 to 70 C) 4 to 158 F, (-20 to 70 C) 4 to 158 F, (-20 to 70 C) Humidity (operating) 10% to 90% 10% to 90% 10% to 90% 10% to 90% 10% to 90% 10% to 90% 10% to 90% Humidity (nonoperating) 5% to 95% 5% to 95% 5% to 95% 5% to 95% 5% to 95% 5% to 95% 5% to 95% Mean time between failures (Telcordia model) 24.8 years (SRX100B) 24.8 years (SRX100H) 24.8 years years (SRX210HE) years (SRX210HE- PoE) years (SRX220H) years (SRX220H- PoE) years (B) years (H) 9.92 years (H- PoE) 9.6 years with redundant power 9.6 years with redundant power *There are several models available for the SRX210 and including the enhanced version. Please contact your Juniper or partner account representative for more information. 10

11 제품비교 ( 계속 ) Certifications and Network Homologation USA SRX100 SRX110 SRX210 SRX220 SRX550 SRX650 Safety certifications UL UL UL UL UL UL UL EMC certifications FCC Class B FCC Class B FCC Class B 1 FCC Class A FCC Class A FCC Class A FCC Class A Network homologation TIA-968 TIA-968 TIA-968 TIA-968 TIA-968 TIA-966 TIA-966 Canada Safety certifications CSA CSA CSA CSA CSA CSA CSA EMC certifications ICES class B ICES class B ICES class B 1 ICES Class A ICES class A ICES class A ICES class A Network homologation CS-03 CS-03 CS-03 CS-03 CS-03 CS-03 CS-03 Australia Safety certifications EMC certifications Network homologation New Zealand Safety certifications EMC certifications Network homologation Japan Safety certifications CISPR22 Class B AS / ACIF S 002, S 016, S 043.1, S043.2 CISPR22 Class B PTC 217, PTC 273 CISPR22 Class B AS / ACIF S 002, S 016, S 043.1, S043.2 CISPR22 Class B PTC 217, PTC 273 CISPR22 Class B 1 AS / ACIF S 002, S 016, S 043.1, S043.2 CISPR22 Class B 1 PTC 217, PTC 273 CISPR22 Class A CISPR22 Class A AS / ACIF S 002, S 016, S 043.1, S043.2 AS / ACIF S 002, S 016, S 043.1, S043.2 CISPR22 Class A CISPR22 Class A PTC 217, PTC 273 PTC 217, PTC 273 Comply safety certifications (UL/CUL/CSA) by CB Scheme CISPR22 Class A CISPR22 Class A AS / ACIF S 016 AS / ACIF S 016 CISPR22 Class A CISPR22 Class A PTC 217 PTC 217 EMC certifications VCCI Class B VCCI Class B VCCI Class B 1 VCCI Class A VCCI Class A VCCI Class A VCCI Class A European Union Safety certifications EN EN EN EN EN EN EN EMC certifications EN Class B, EN Network homologation Software Certifications CTR 12/13, CTR 21, DoC EN Class B, EN CTR 12/13, CTR 21, DoC EN Class B 1, EN CTR 12/13, CTR 21, DoC EN Class A, EN CTR 12/13, CTR 21, DoC EN Class A, EN CTR 12/13, CTR 21, DoC EN Class A, EN CTR 12/13, DoC NIST FIPS Level 2 Yes Yes Yes Yes Yes In Progress Yes ISO Common Criteria NDPP+TFFW EP Yes Yes Yes Yes Yes Yes Yes ICSA Network Firewall Yes Yes Yes Yes Yes Yes Yes ICSA IPsec Yes Yes Yes Yes Yes Yes Yes USGv6 Yes Yes Yes Yes Yes Yes Yes 주니퍼네트웍스서비스및지원 EN Class A, EN CTR 12/13, DoC 주니퍼는하이퍼포먼스네트워크를가속화, 확장, 최적화시키는 Performance-Enabling 서비스를제공합니다. 이러한서비스를통해고객이운영효율성극대화, 비용절감, 리스크최소화와동시에더욱신속하게네트워크가치를실현할수있도록지원합니다. 주니퍼네트웍스는또한네트워크최적화를통해고객이적절한수준의성능, 안정성, 가 용성을유지할수있도록보장합니다. 자세한정보는 에서확인할수있습니다. *There are several models available for the SRX210 and including the enhanced version. Please contact your Juniper or partner account representative for more information. 1 SRX210H-POE is class A. 11

12 인터페이스모듈호환성메트릭스 구성요소설명 SRX100 SRX110 SRX210 SRX220 SRX550 SRX650 SRX-GP-16GE SRX-GP-16GE-POE 16-port 10/100/1000BASE-T XPIM 16-port 10/100/1000BASE-T PoE XPIM X X X X X X X X X X SRX-GP-2XE-SFPPTX 2-port 10GbE SFP+/10GbE BASE-T Copper XPIM X X X X X SRX-GP-24GE SRX-GP-24GE-POE SRX-GP-8SFP 24-port 10/100/1000BASE-T XPIM, includes 4 SFP slots 24-port 10/100/1000BASE-T PoE XPIM, includes 4 SFP slots 8-port GbE copper, fiber SFP XPIM X X X X X X X X X X X X X X X SRX-GP-DUAL-T1-E1 Dual T1/E1 GPIM X X X X X SRX-GP-QUAD-T1-E1 Quad T1/E1 GPIM X X X X X SRX-GP-1DS3-E3 1-port clear channel DS3/E3 GPIM single GPIM slot X X X X X SRX-GP-8SERIAL Eight-port Sync Serial GPIM X X X X X SRX-MP-1SERIAL SRX-MP-1ADSL2-A SRX-MP-1ADSL2-B SRX-MP-1VDSL2-A SRX-MP-8GSHDSL 1-port Sync Serial Mini-PIM 1-port ADSL2+ Mini-PIM supporting ADSL/ADSL2/ ADSL2+ Annex A 1-port ADSL2+ Mini-PIM supporting ADSL/ADSL2/ ADSL2+ Annex B 1-port VDSL2 Mini-PIM supporting Annex A, with fallback to ADSL2/ADSL2+ 8-wire (4-pair) G.SHDSL Mini-PIM X X X X X X X X X X X X X X X SRX-MP-1SFP-GE 1-port SFP Mini-PIM X X X SRX-MP-1T1E1 1-port T1 or E1 Mini-PIM X X X 12

13 주문정보 SRX650 Base System SRX650-BASE-SRE6-645AP SRX650-BASE-SRE6-645DP SRX650B-SRE6-645AP-TAA SRX650 Services Gateway with SRE 6, 645 W AC PoE PSU; includes 4 onboard 10/100/1000BASE-T ports, 2 GB DRAM, 2 GB CF, 247 W PoE power, fan tray, power cord and rackmount kit SRX650 Services Gateway with SRE 6, 645 W DC PoE PSU; includes 4 onboard 10/100/1000BASE-T ports, 2 GB DRAM, 2 GB CF, 247 W PoE power, fan tray, power cord and rackmount kit Trade Agreement Act-compliant SRX650 Services Gateway with SRE 6, 645 W AC PoE PSU; includes 4 onboard 10/100/1000BASE-T ports, 2 GB DRAM, 2 GB CF, 247 W PoE power, fan tray, power cord and rack-mount kit SRX650 Power Supplies and Accessories SRX600-PWR-645AC- POE SRX600-PWR-645DC- POE SRX600-SRE6H SRX650-CHAS SRX650-FAN-01 SRX650-FILT-01 Spare 645 W AC PoE power supply unit for SRX650, SRX550 systems one is included in SRX650, SRX550 base system (SRX650-BASE- SRE6-645AP, SRX AP) 645 W DC source power supply for SRX550 and SRX650; provides 397 W system 12 V and 248 W PoE 50 VDC; works with VDC input no power cord Spare SRE6-H for SRX650 one is included in SRX650 base system (SRX650-BASE-SRE6-645AP) SRX650 chassis including fan tray no system processor (SRE) and no power supply unit Spare SRX650 fan tray, one is included in SRX650 chassis spare (SRX650-CHAS), and included in SRX650 base system (SRX650-BASE-SRE6-645AP) Not included in SRX650 chassis spare (SRX650- CHAS), and not included in SRX650 base system (SRX650-BASE-SRE6-645AP) optional, as this is not required for normal operations, but recommended for dusty environments SRX650 Additional Software Feature Licenses SRX650-K-AV SRX650-S-AV SRX650-IDP SRX650-S2-AS SRX650-W-WF SRX650-SMB4-CS SRX650-S-SMB4-CS SRX650-K-AV-3 SRX650-S-AV-3 SRX650-IDP-3 One year subscription for Juniper-Kaspersky antivirus updates on SRX650 One year subscription for Juniper-Sophos antivirus updates on SRX650 One year subscription for IDP updates on SRX650 One year subscription for Juniper-Sophos antispam updates on SRX650 One year subscription for Juniper-Websense Web filtering updates on SRX650 AppSecure and IDP on SRX650 AppSecure and IDP on SRX650 Three year subscription for Juniper-Kaspersky AV updates on SRX650 Three year subscription for Juniper-Sophos AV updates on SRX650 Three year subscription for IDP updates on SRX650 SRX650-S2-AS-3 SRX650-W-WF-3 SRX650-SMB4-CS-3 SRX650-S-SMB4-CS-3 SRX-BGP-ADV-LTU SRX650-K-AV-5 SRX650-S-AV-5 SRX650-IDP-5 SRX650-W-WF-5 SRX650-SMB4-CS-5 Three year subscription for Juniper-Sophos antispam updates on SRX650 Three year subscription for Juniper-Websense Web filtering updates on SRX650 Three year security subscription for enterprise AppSecure and IDP on SRX650 Three year security subscription for enterprise AppSecure and IDP on SRX650 Advanced BGP License for SRX550 and SRX650 only Five year subscription for Juniper-Kaspersky AV updates on SRX650 Five year subscription for Juniper-Sophos AV updates on SRX650 Five year license for IDP updates for SRX650 Five year subscription for Juniper-Websense Web filtering updates on SRX650 AppSecure and IDP on SRX650 SRX650-S-SMB4-CS-5 AppSecure and IDP on SRX650 SRX-RAC-5-LTU SRX-RAC-10-LTU SRX-RAC-25-LTU SRX-RAC-50-LTU SRX-RAC-100-LTU SRX-RAC-150-LTU SRX-RAC-250-LTU SRX-RAC-500-LTU SRX650-APPSEC-A-1 SRX650-APPSEC-A-3 SRX650-APPSEC-A-5 Dynamic VPN Client: 5 simultaneous users for Dynamic VPN Client: 10 simultaneous users for Dynamic VPN Client: 25 simultaneous users for Dynamic VPN Client: 50 simultaneous users for SRX210, SRX220,, only Dynamic VPN Client: 100 simultaneous users for SRX220,, only Dynamic VPN Client: 150 simultaneous users for SRX220,, only Dynamic VPN Client: 250 simultaneous users for, only Dynamic VPN Client: 500 simultaneous users for SRX550 and SRX650 only One year subscription for Application Security and IPS updates for SRX650 Three year subscription for Application Security and IPS updates for SRX650 Five year subscription for Application Security and IPS updates for SRX650 13

14 주문정보 ( 계속 ) SRX550 Base System SRX AP SRX DP SRX550 Services Gateway, 2 RU height, 6 GPIM slots, 2 Mini-PIM slots, 6 10/100/1000BASE-T ports, 4 GbE SFP ports, dual PS slots, fans; ships with one 645 watt AC power supply with 247 W PoE power (power cord and rack-mount kit included) SRX550 Services Gateway, 2 RU height, 6 GPIM slots, 2 Mini-PIM slots, 6 10/100/1000BASE-T ports, 4 GbE SFP ports, dual PS slots, fans; ships with one 645 watt DC power supply with 247 W PoE power (no power cord and rack-mount kit Included) SRX550 Power Supplies and Accessories SRX600-PWR-645AC- POE SRX600-PWR-645DC- POE SRX550-CHAS SRX550-FILT-01 Spare 645 W AC PoE power supply unit for SRX550 and SRX650 systems one is included in SRX550 and SRX650 base systems (SRX650- BASE-SRE6-645AP, SRX AC) 645 W DC source power supply for SRX550, SRX650 provides 397 W system 12 V and 248 W PoE 50 VDC; works with VDC input no power cord SRX550 Services Gateway, 2 RU height, 6 GPIM slots, 2 Mini-PIM slots, 6 10/100/1000BASE-T ports, 4 GbE SFP ports, dual PS slots, fans (power supply not included) Not included in SRX550 systems, optional, as this is not required for normal operations, but recommended for dusty environments SRX550 Additional Software Feature Licenses SRX550-K-AV SRX550-S-AV SRX550-IDP SRX550-S2-AS SRX550-W-WF SRX550-SMB4-CS SRX550-S-SMB4-CS SRX550-K-AV-3 SRX550-S-AV-3 SRX550-IDP-3 SRX550-S2-AS-3 SRX550-W-WF-3 SRX550-SMB4-CS-3 SRX550-S-SMB4-CS-3 One year subscription for Juniper-Kaspersky antivirus updates on SRX550 One year subscription for Juniper-Sophos antivirus updates on SRX550 One year subscription for IDP updates on SRX550 One year subscription for Juniper-Sophos antispam updates on SRX550 One year subscription for Juniper-Websense Web filtering updates on SRX550 AppSecure and IDP on SRX550 AppSecure and IDP on SRX550 Three year subscription for Juniper-Kaspersky AV updates on SRX550 Three year subscription for Juniper-Sophos AV updates on SRX550 Three year subscription for IDP updates on SRX550 Three year subscription for Juniper-Sophos antispam updates on SRX550 Three year subscription for Juniper-Websense Web filtering updates on SRX550 Three year security subscription for enterprise AppSecure and IDP on SRX550 Three year security subscription for enterprise AppSecure and IDP on SRX550 SRX-BGP-ADV-LTU SRX550-K-AV-5 SRX550-S-AV-5 SRX550-IDP-5 SRX550-W-WF-5 SRX550-SMB4-CS-5 SRX550-S-SMB4-CS-5 SRX-RAC-5-LTU SRX-RAC-10-LTU SRX-RAC-25-LTU SRX-RAC-50-LTU SRX-RAC-100-LTU SRX-RAC-150-LTU SRX-RAC-250-LTU SRX-RAC-500-LTU SRX550-APPSEC-A-1 SRX550-APPSEC-A-3 SRX550-APPSEC-A-5 Base System H2 H2-POE H2-DC B2 Advanced BGP License for SRX550 and SRX650 only Five year subscription for Juniper-Kaspersky AV updates on SRX550 Five year subscription for Juniper-Sophos AV updates on SRX550 Five year license for IDP updates for SRX550 Five year subscription for Juniper-Websense Web filtering updates on SRX550 AppSecure and IDP on SRX550 AppSecure and IDP on SRX550 Dynamic VPN Client: 5 simultaneous users for Dynamic VPN Client: 10 simultaneous users for Dynamic VPN Client: 25 simultaneous users for Dynamic VPN Client: 50 simultaneous users for SRX210, SRX220,, only Dynamic VPN Client: 100 simultaneous users for SRX220,, only Dynamic VPN Client: 150 simultaneous users for SRX220,, only Dynamic VPN Client: 250 simultaneous users for, only Dynamic VPN Client: 500 simultaneous users for SRX550 and SRX650 only One year subscription for Application Security and IPS updates for SRX550 Three year subscription for Application Security and IPS updates for SRX550 Five year subscription for Application Security and IPS updates for SRX550 Services Gateway with 16 x GbE ports, 4x mini-pim slots, and high memory (2 GB DRAM, 2 GB Flash); integrated power supply with power cord, and 19 rack mount kit included Services Gateway with 16 x GbE ports, 4x mini-pim slots, and high memory (2 GB RAM, 2 GB Flash), with 16 ports PoE (150 W); integrated power supply with power cord, and 19 rack mount kit included Services Gateway with 16 x GbE ports, 4x mini-pim slots, and high memory (2 GB RAM, 2 GB Flash); integrated -48 V DC power supply with 19 rack mount kit included Services Gateway with 16 x GbE ports, 4x mini-pim slots, and base memory (1 GB DRAM, 2 GB Flash); integrated power supply with power cord, and 19 rack mount kit included (No UTM, AppSecure, or IDP support) 14

15 주문정보 ( 계속 ) Base Systems (continued) -RMK H-TAA H-POE-TAA B H H-POE H-DC rack-mount kit for 19 in rack (holds one unit) Trade Agreement Act-compliant Services Gateway with 16 GbE ports, 4 Mini-PIM slots, and high memory (1 GB RAM, 1 GB Flash) Trade Agreement Act-compliant Services Gateway with 16 GbE ports, 4 Mini-PIM slots, and high memory (1 GB RAM, 1 GB Flash), with 16 ports PoE (150 W) Services Gateway with 16 GbE ports, 4 Mini-PIM slots, and base memory (512 MB RAM, 1 GB Flash) Services Gateway with 16 GbE ports, 4 Mini-PIM slots, and high memory (1 GB RAM, 1 GB Flash) Services Gateway with 16 GbE ports, 4 Mini-PIM slots, and high memory (1 GB RAM, 1 GB Flash), with 16 ports PoE (150 W) Services Gateway with 16 GbE ports, 4 Mini-PIM slots, and high memory (1 GB RAM, 1 GB Flash) Additional Software Feature Licenses -K-AV -S-AV -IDP -S2-AS -W-WF -SMB4-CS -S-SMB4-CS -K-AV-3 -S-AV-3 -IDP-3 -S2-AS-3 -W-WF-3 -SMB4-CS-3 One year subscription for Juniper-Kaspersky antivirus updates on One year subscription for Juniper-Sophos antivirus updates on One year subscription for IDP updates on One year subscription for Juniper-Sophos antispam updates on One year subscription for Juniper-Websense Web filtering updates on AppSecure and IDP on AppSecure and IDP on Three year subscription for Juniper-Kaspersky antivirus updates on Three year subscription for Juniper-Sophos antivirus updates on Three year subscription for IDP updates on Three year subscription for Juniper-Sophos antispam updates on Three year subscription for Juniper-Websense Web filtering updates on Three year security subscription for enterprise AppSecure and IDP on -S-SMB4-CS-3 Three year security subscription for enterprise AppSecure and IDP on -K-AV-5 -S-AV-5 -IDP-5 Five year subscription for Juniper-Kaspersky antivirus updates on Five year subscription for Juniper-Sophos antivirus updates on Five year subscription for IDP updates on -S2-AS-5 -W-WF-5 -SMB4-CS-5 Five year subscription for Juniper-Sophos antispam updates on Five year subscription for Juniper-Websense Web filtering updates on AppSecure and IDP on -S-SMB4-CS-5 AppSecure and IDP on -S2-AS-5 -W-WF-5 -SMB2-CS-5 -S-SMB-CS-5 SRX-RAC-5-LTU SRX-RAC-10-LTU SRX-RAC-25-LTU SRX-RAC-50-LTU SRX-RAC-100-LTU SRX-RAC-150-LTU SRX-RAC-250-LTU -APPSEC-A-1 -APPSEC-A-3 -APPSEC-A-5 SRX220 Base System Five year subscription for Juniper-Sophos antispam updates on Five year subscription for Juniper-Websense Web filtering updates on includes Kaspersky antivirus, Web filtering, Sophos antispam, and IDP on includes Sophos antivirus, Web filtering, Sophos antispam and IPS on Dynamic VPN Client: 5 simultaneous users for Dynamic VPN Client: 10 simultaneous users for Dynamic VPN Client: 25 simultaneous users for Dynamic VPN Client: 50 simultaneous users for SRX210, SRX22,, SRX550 and SRX650 only Dynamic VPN Client: 100 simultaneous users for SRX220,, only Dynamic VPN Client: 150 simultaneous users for SRX220,, only Dynamic VPN Client: 250 simultaneous users for, only One year subscription for Application Security and IPS updates for Three year subscription for Application Security and IPS updates for Five year subscription for Application Security and IPS updates for SRX220H2 SRX220 Services Gateway with 8 GbE ports, 2 Mini-PIM slots, and high memory (2 GB RAM, 2 GB Flash) external power supply and cord included SRX220H2-POE SRX220 Services Gateway with 8 GbE ports, 2 Mini-PIM slots, and high memory (2 GB RAM, 2 GB Flash), with 8 ports PoE (120 W)* SRX220-RMK SRX220-WALL-KIT SRX220-PWR-60W* SRX220 rack-mount kit for 19 in rack (holds one unit) SRX220 wall mount kit (holds one unit) Spare SRX220 switching power supply, 60 W (non-poe) *See price list for country-specific power cord model numbers. 15

16 주문정보 ( 계속 ) SRX220 Base System (continued) SRX220H SRX220 Services Gateway with 8 GbE ports, 2 Mini-PIM slots, and high memory (1 GB RAM, 1 GB Flash) external power supply and cord included SRX220H-POE SRX220 Services Gateway with 8 GbE ports, 2 Mini-PIM slots, and high memory (1 GB RAM, 1 GB Flash), with 8 ports PoE (120 W)* SRX220 Additional Software Feature Licenses SRX220-K-AV SRX220-S-AV SRX220-IDP SRX220-S2-AS SRX220-W-WF SRX220-SMB4-CS SRX220-S-SMB4-CS SRX220-K-AV-3 SRX220-S-AV-3 SRX220-IDP-3 SRX220-S2-AS-3 SRX220-W-WF-3 SRX220-SMB4-CS-3 One year subscription for Juniper-Kaspersky antivirus updates on SRX220 One year subscription for Juniper-Sophos antivirus updates on SRX220 One year subscription for IDP updates on SRX220 One year subscription for Juniper-Sophos antispam updates on SRX220 One year subscription for Juniper-Websense Web filtering updates on SRX220 AppSecure and IDP on SRX220 AppSecure and IDP on SRX220 Three year subscription for Juniper-Kaspersky antivirus updates on SRX220 Three year subscription for Juniper-Sophos antivirus updates on SRX220 Three year subscription for IDP updates on SRX220 Three year subscription for Juniper-Sophos antispam updates on SRX220 Three year subscription for Juniper-Websense Web filtering updates on SRX220 Three year security subscription for enterprise AppSecure and IDP on SRX220 SRX220-S-SMB4-CS-3 Three year security subscription for enterprise AppSecure and IDP on SRX220 SRX220-K-AV-5 SRX220-S-AV-5 SRX220-IDP-5 SRX220-W-WF-5 SRX220-SMB4-CS-5 SRX220-S-SMB4-CS-5 SRX-RAC-5-LTU SRX-RAC-10-LTU Five year subscription for Juniper-Kaspersky antivirus updates on SRX220 Five year subscription for Juniper-Sophos antivirus updates on SRX220 Five year subscription for IDP updates on SRX220 Five year subscription for Juniper-Websense Web filtering updates on SRX220 AppSecure and IDP on SRX220 AppSecure and IDP on SRX220 Dynamic VPN Client: 5 simultaneous users for Dynamic VPN Client: 10 simultaneous users for SRX-RAC-25-LTU SRX-RAC-50-LTU SRX-RAC-100-LTU SRX-RAC-150-LTU SRX220-APPSEC-A-1 SRX220-APPSEC-A-3 SRX220-APPSEC-A-5 SRX210 Base System SRX210HE2 SRX210HE2-POE SRX210BE SRX210HE SRX210HE-POE SRX210 Additional Hardware SRX210-DESK-STAND SRX210-RMK SRX210-WALL-KIT SRX210-PWR-60W-* SRX210-PWR-150W-* Dynamic VPN Client: 25 simultaneous users for Dynamic VPN Client: 50 simultaneous users for SRX210, SRX220,, Dynamic VPN Client: 100 simultaneous users for SRX220,, Dynamic VPN Client: 150 simultaneous users for SRX220,, One year subscription for Application Security and IPS updates for SRX220 Three year subscription for Application Security and IPS updates for SRX220 Five year subscription for Application Security and IPS updates for SRX220 SRX210 Services Gateway with 2 GbE+ 6 Fast Ethernet ports, 1 Mini-PIM slot, 1 ExpressCard slot and high memory (2 GB RAM, 2 GB Flash) SRX210 Services Gateway with 2 GbE + 6 Fast Ethernet ports, 1 Mini-PIM slot, 1 ExpressCard slot and high memory (2 GB RAM, 2 GB Flash), with 4 ports PoE (50 W) SRX210 Services Gateway with 2 GbE + 6 Fast Ethernet ports, 1 Mini-PIM slot, 1 ExpressCard slot and base memory (512 MB RAM, 1 GB Flash) SRX210 Services Gateway with 2 GbE+ 6 Fast Ethernet ports, 1 Mini-PIM slot, 1 ExpressCard slot and high memory (1 GB RAM, 1 GB Flash) SRX210 Services Gateway with 2 GbE + 6 Fast Ethernet ports, 1 Mini-PIM slot, 1 ExpressCard slot and high memory (1 GB RAM, 1 GB Flash), with 4 ports PoE (50 W) SRX210 desk top stand (holds one unit) SRX210 rack-mount kit for 19 in rack (holds one unit) SRX210 wall mount kit (holds one unit) Spare SRX210 switching power supply, 60 W (non-poe) Spare SRX210 switching power supply, 150 W (PoE) SRX210 Additional Software Feature Licenses SRX210-K-AV SRX210-S-AV SRX210-IDP SRX210-S2-AS SRX210-W-WF SRX210-SMB4-CS SRX210-S-SMB4-CS One year subscription for Juniper-Kaspersky antivirus updates on SRX210 One year subscription for Juniper-Sophos antivirus updates on SRX210 One year subscription for IDP updates on SRX210 One year subscription for Juniper-Sophos antispam updates on SRX210 One year subscription for Juniper-Websense Web filtering updates on SRX210 AppSecure and IDP on SRX210 AppSecure and IDP on SRX210 *See price list for country-specific power cord model numbers. 16

17 주문정보 ( 계속 ) SRX210 Additional Software Feature Licenses (continued) SRX210-K-AV-3 SRX210-S-AV-3 SRX210-IDP-3 SRX210-S2-AS-3 SRX210-W-WF-3 SRX210-SMB4-CS-3 SRX210-S-SMB4-CS-3 SRX210-K-AV-5 SRX210-S-AV-5 SRX210-IDP-5 SRX210-S2-AS-5 SRX210-W-WF-5 SRX210-SMB4-CS-5 SRX210-S-SMB4-CS-5 SRX-RAC-5-LTU SRX-RAC-10-LTU SRX-RAC-25-LTU SRX-RAC-50-LTU SRX210-APPSEC-A-1 SRX210-APPSEC-A-3 SRX210-APPSEC-A-5 Three year subscription for Juniper-Kaspersky antivirus updates on SRX210 Three year subscription for Juniper-Sophos antivirus updates on SRX210 Three year subscription for IDP updates on SRX210 Three year subscription for Juniper-Sophos antispam updates on SRX210 Three year subscription for Juniper-Websense Web filtering updates on SRX210 Three year security subscription for enterprise AppSecure and IDP on SRX210 Three year security subscription for enterprise AppSecure and IDP on SRX210 Five year subscription for Juniper-Kaspersky antivirus updates on SRX210 Five year subscription for Juniper-Sophos antivirus updates on SRX210 Five year subscription for IDP updates on SRX210 Five year subscription for Juniper-Sophos antispam updates on SRX210 Five year subscription for Juniper-Websense Web filtering updates on SRX210 AppSecure and IDP on SRX210 AppSecure and IDP on SRX210 Dynamic VPN Client: 5 simultaneous users for Dynamic VPN Client: 10 simultaneous users for Dynamic VPN Client: 25 simultaneous users for Dynamic VPN Client: 50 simultaneous users for SRX210, SRX220,, only One year subscription for Application Security and IPS updates for SRX210 Three year subscription for Application Security and IPS updates for SRX210 Five year subscription for Application Security and IPS updates for SRX210 Small Form Factor Pluggable (SFP) Transceivers SRX-SFP-1GE-LH SRX-SFP-1GE-LX SRX-SFP-1GE-SX SRX-SFP-1GE-T SRX-SFP-FE-FX SRX-MP-1SFP-GE SRX-GP-8SFP SRX110 Base System SFP 1000BASE-LH Optical Transceiver SFP 1000BASE-LX Optical Transceiver SFP 1000BASE-SX Optical Transceiver SFP 1000BASE-T Copper Transceiver SFP 100BASE-FX Optical Transceiver Single-port SFP Mini-PIM 8-port GbE copper, fiber SFP XPIM SRX110H2-VA SRX110 Services Gateway with 8xFE ports, 2 GB RAM and Flash, 1-port VDSL2/ADSL2+ over POTS, USB port for cellular modem connectivity, and external PS and cord included SRX110H2-VB SRX110 Services Gateway with 8xFE ports, 2 GB RAM and Flash, 1-port VDSL2/ADSL2+ over ISDN BRI, USB port for cellular modem connectivity, and external PS and cord included SRX110H-VA SRX110 Services Gateway with 8xFE ports, 1 GB RAM and Flash, 1-port VDSL2/ADSL2+ over POTS, USB port for cellular modem connectivity, and external PS and cord included SRX110H-VB SRX110 Additional Hardware SRX110-DESK-STAND SRX110-RMK SRX110-WALL-KIT SRX100 Base System SRX100H2 SRX100B SRX100H SRX110 Services Gateway with 8xFE ports, 1 GB RAM and Flash, 1-port VDSL2/ADSL2+ over ISDN BRI, USB port for cellular modem connectivity, and external PS and cord SRX110 desktop stand; holds one unit SRX110 rack-mount kit; holds one unit SRX110 wall mount kit; holds one unit SRX100 Additional Hardware SRX100-PWR-30W-* SRX-100-RMK SRX100-WALL-KIT SRX100-DESK-STAND SRX100 Services Gateway with 8xFE ports and high memory (2 GB RAM, 2 GB Flash) SRX100 Services Gateway with 8xFE ports and base memory (On-board 1 GB RAM w/ 512 MB accessible, 1 GB Flash) SRX100 Services Gateway with 8xFE ports and high memory (1 GB RAM, 1 GB Flash) Spare SRX100 switching power supply, 30 W (non-poe) SRX rack-mount kit (holds two units) SRX100 wall mount kit (holds one unit) SRX100 desk stand (holds one unit) *See price list for country-specific power cord model numbers. ** The additional software feature licenses apply to both the SRX100 and the SRX

18 주문정보 ( 계속 ) SRX100/SRX110 Dynamic VPN Client SRX-RAC-5-LTU SRX-RAC-10-LTU SRX-RAC-25-LTU 5 simultaneous users for SRX100, SRX110, SRX210, SRX220,, 10 simultaneous users for SRX100, SRX110, SRX210, SRX220,, 25 simultaneous users for SRX100, SRX110, SRX210, SRX220,, SRX100/SRX110 Additional Software Feature Licenses ** SRX1XX-K-AV SRX1XX-K-AV-3 SRX1XX-K-AV-5 SRX1XX-S-AV SRX1XX-S-AV-3 SRX1XX-S-AV-5 SRX1XX-S2-AS SRX1XX-S2-AS-3 SRX1XX-S2-AS-5 SRX1XX-W-EWF SRX1XX-W-EWF-3 SRX1XX-W-EWF-5 SRX1XX-SMB4-CS SRX1XX-SMB4-CS-3 SRX1XX-SMB4-CS-5 SRX1XX-S-SMB4-CS SRX1XX-S-SMB4-CS-3 SRX1XX-S-SMB4-CS-5 SRX1XX-IDP SRX1XX-IDP-3 SRX1XX-IDP-5 SRX1XX-K-AV-3-R One year subscription for Juniper-Kaspersky AV updates Three year subscription for Juniper-Kaspersky AV updates Five year subscription for Juniper-Kaspersky AV updates One year subscription for Juniper-Sophos AV updates Three year subscription for Juniper-Sophos AV updates Five year subscription for Juniper-Sophos AV updates One year subscription for Juniper-Sophos antispam updates Three year subscription for Juniper-Sophos antispam updates Five year subscription for Juniper-Sophos antispam updates One year subscription for Juniper-Websense enhanced Web filtering updates Three year subscription for Juniper-Websense enhanced Web filtering updates Five year subscription for Juniper-Websense enhanced Web filtering updates AppSecure and IDP Three year security subscription for Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP AppSecure and IDP AppSecure, AppSecure and IDP Three year security subscription for enterprise AppSecure and IDP AppSecure and IDP One year license for IDP updates Three year license for IDP updates Five year license for IDP updates Three year renewal subscription for Juniper- Kaspersky AV updates SRX100/SRX110 Additional Software Feature Licenses ** (continued) SRX1XX-K-AV-5-R SRX1XX-K-AV-R SRX1XX-S-AV-3-R SRX1XX-S-AV-5-R SRX1XX-S-AV-R SRX1XX-S2-AS-3-R SRX1XX-S2-AS-5-R SRX1XX-S2-AS-R SRX1XX-W-EWF-3-R SRX1XX-W-EWF-5-R SRX1XX-W-EWF-R SRX1XX-SMB4-CS-R SRX1XX-SMB4-CS-3-R SRX1XX-SMB4-CS-5-R SRX1XX-S-SMB4-CS-R SRX1XX-S-SMB4-CS- 3-R SRX1XX-S-SMB4-CS- 5-R SRX1XX-IDP-R SRX1XX-IDP-3-R SRX1XX-IDP-5-R SRX100-APPSEC-A-1 SRX100-APPSEC-A-3 SRX100-APPSEC-A-5 Five year renewal subscription for Juniper- Kaspersky AV updates One year renewal subscription for Juniper- Kaspersky AV updates Three year renewal subscription for Juniper- Sophos AV updates Five year renewal subscription for Juniper-Sophos AV updates One year renewal subscription for Juniper- Sophos AV updates Three year renewal subscription for Juniper- Sophos antispam updates Five year renewal subscription for Juniper-Sophos antispam updates One year renewal subscription for Juniper- Sophos antispam updates Three year renewal subscription for Juniperenhanced Websense enhanced Web filtering updates Five year renewal subscription for Juniperenhanced Websense enhanced Web filtering updates One year renewal subscription for Juniperenhanced Websense enhanced Web filtering updates One year renewal security subscription for enterprise includes Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP Three year renewal security subscription for enterprise includes Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP Five year renewal security subscription for enterprise includes Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP One year renewal security subscription for enterprise includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP Three year renewal security subscription for enterprise includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP Five year renewal security subscription for enterprise includes Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP One year renewal subscription for IDP Signature service Three year renewal subscription for IDP Signature service Five year renewal subscription for IDP Signature service One year subscription for Application Security and IPS updates for SRX100 Three year subscription for Application Security and IPS updates for SRX100 Five year subscription for Application Security and IPS updates for SRX100 ** The additional software feature licenses apply to both the SRX100 and the SRX