SRX SERIES SERVICES GATEWAYS FOR THE BRANCH Product Overview SRX Series Services Gateways for the branch are next-generation security gateways that provide essential capabilities that connect, secure, and manage workforce locations sized from handfuls to hundreds of users. By consolidating fast, highly available switching, routing, security, and next generation firewall capabilities in a single device, enterprises can protect their resources as well as economically deliver new services, safe connectivity, and a satisfying end-user experience. All SRX Series Services Gateways, including products scaled for Enterprise branch, Enterprise edge, and Data Center applications, are powered by Junos OS—the proven operating system that provides unmatched consistency, better performance with services, and superior infrastructure protection at a lower total cost of ownership. Product Description The Juniper Networks® SRX Series Services Gateways for the branch combine next generation firewall and unified threat management (UTM) services with routing and switching in a single, high-performance, cost-effective network device. • SRX Series for the branch runs Juniper Networks Junos® operating system, the proven OS that is used by core Internet routers in all of the top 100 service providers around the world. The rigorously tested carrier-class routing features of IPv4/IPv6, OSPF, BGP, and multicast have been proven in over 15 years of worldwide deployments. • SRX Series for the branch provides perimeter security, content security, application visibility, tracking and policy enforcement, user role-based control, and network-wide threat visibility and control. Using zones and policies, network administrators can configure and deploy branch SRX Series gateways quickly and securely. Policy-based VPNs support more complex security architectures that require dynamic addressing and split tunneling. The SRX Series also includes wizards for firewall, IPsec VPN, Network Address Translation (NAT), and initial setup to simplify configurations out of the box. • For content security, SRX Series for the branch offers a complete suite of next generation firewall and unified threat management (UTM) services consisting of: intrusion prevention system (IPS), application security (AppSecure), user role-based firewall controls, on-box and cloud-based antivirus, antispam, and enhanced Web filtering to protect your network from the latest content-borne threats. The branch SRX Series integrates with other Juniper security products to deliver enterprise-wide unified access control (UAC) and adaptive threat management. • SRX Series for the branch are secure routers that bring high performance and proven deployment capabilities to enterprises that need to build a worldwide network of thousands of sites. The wide variety of options allow configuration of performance, functionality, and price scaled to support from a handful to thousands of users. Ethernet, serial, T1/E1, DS3/E3, xDSL, Wi-Fi, and 3G/4G LTE wireless are all available options for WAN or Internet connectivity to securely link your sites. Multiple form factors allow you to make cost-effective choices for mission-critical deployments. Managing the network is easy using the proven Junos OS command-line interface (CLI), scripting capabilities, a simple-to-use Web-based GUI, or Juniper Networks Junos® Space Security Director for centralized management.

Architecture and Key Components Key Hardware Features of the Branch SRX Series Products Product Eight 10/100 Ethernet LAN ports and 1 USB port (support for 3G USB) Full UTM1; antivirus1, antispam1, enhanced Web filtering1, and content filtering Intrusion prevention system1, AppSecure1 2 GB DRAM, 2 GB flash default VDSL/ADSL2+ and Ethernet WAN interfaces Eight 10/100 Ethernet LAN ports and two USB port (support for 3G USB) Full UTM1; antivirus1, antispam1, enhanced Web filtering1, intrusion prevention system1, AppSecure1 Unified Access Control (UAC) and content filtering 2 GB DRAM, 2 GB CF default...

Secure Routing Next Generation Firewall SRX Series Services Gateways deliver next generation firewall protection with application awareness and extensive user rolebased control options plus best“Untrust” Zone of-breed UTM to protect and control your business assets. Next generation firewalls are able to INTERNET perform full packet inspection and can apply security policies based on layer 7 information. This means you can create security policies based on the application running across your network, the “Trust” Zone user who is receiving or sending network traffic or the content that is traveling...

Session-Based Forwarding Without the Performance Hit In order to optimize the throughput and latency of the combined router and firewall, Junos OS implements session-based forwarding, an innovation that combines the session state information of a traditional firewall and the next-hop forwarding of a classic router into a single operation. With Junos OS, a session that is permitted by the forwarding policy is added to the forwarding table along with a pointer to the next-hop route. Established sessions have a single table lookup to verify that the session has been permitted and to find the next...

Specifications Protocols • IPv4, IPv6, ISO Connectionless Network Service (CLNS) Routing and Multicast • Static routes • RIPv2 +v1 • OSPF/OSPFv3 • BGP • BGP Router Reflector2 • IS-IS • Multicast (Internet Group Management Protocol (IGMPv1/2/3), PIM-SM/DM/SSM, Session Description Protocol (SDP), Distance Vector Multicast Routing Protocol (DVMRP), source-specific, Multicast inside IPsec tunnel), MSDP L2 Switching • 802.1D, RSTP, MSTP, 802.3ad (LACP) • 802.1x, LLDP, 802.1ad (Q-in-Q), IGMP Snooping • Layer 2 switching with high availability Traffic Management Quality of Service (QoS) • 802.1p, DSCP,...

Specifications (continued) UTM1 (continued) • Customer signatures creation • Daily and emergency updates • Session synchronization for firewall and VPN2 -- AppTrack (application visibility and tracking) • Session failover for routing change2 -- AppFirewall (policy enforcement by application name) -- Custom signatures -- AppQoS (network traffic prioritization and bandwidth management) • IP Monitoring with route and interface failover -- Dynamic signature updates -- User-based application policy enforcement • Antivirus -- Express AV (stream-based AV, not available on SRX100 and SRX110) -- File-based...