Catalogs >
Juniper Networks >
SRX1500 FIREWALL DATASHEET

SRX1500 FIREWALL DATASHEET
6Pages

Catalog excerpts

SRX1500 FIREWALL DATASHEET Next-Generation Firewall For The Distributed Enterprise Product Description Product Overview The SRX1500 is a nextgeneration firewall and security services gateway offering outstanding protection, performance, scalability, availability, and security service integration. Designed for port density, a high-performance security services architecture, and seamless integration of networking and security in a single platform, the SRX1500 is best suited for client protection in enterprise campuses, regional headquarters, or cloud-based security solutions with a focus on application visibility and control, intrusion prevention, and advanced threat prevention. The SRX1500, powered by Junos OS, is the industry-leading operating system that keeps the world's largest and most mission-critical enterprise networks secure. The Juniper Networks® SRX1500 is a high-performance next-generation firewall and security services gateway that protects mission-critical networks at campuses, regional headquarters, and large branch offices. The SRX1500 provides best-in-class security, threat detection, and mitigation capabilities, integrating carrier-class routing and feature-rich switching in a single platform. The SRX1500 delivers a next-generation security solution that supports the changing needs of cloud-enabled enterprise networks. Whether rolling out new services in an enterprise campus, connecting to the cloud, complying with industry standards, or achieving operational efficiency, the SRX1500 helps organizations realize their business objectives while providing scalable, easy-to-manage, secure connectivity and advanced threat detection and mitigation capabilities. The SRX1500 protects critical corporate assets as a next-generation firewall, acts as an enforcement point for cloud-based security solutions, and provides application visibility and control to improve the user and application experience. Hardware and software architectures on the SRX1500 provide significant performance improvements to a small 1 U form factor. The key to the SRX1500 hardware is the security flow accelerator and a robust x86-based security compute engine for advanced security services like application visibility, intrusion prevention, and threat mitigation capabilities. The SRX1500 software architecture leverages these hardware components and virtualization to deliver high-speed firewall performance, application visibility, and intrusion prevention while lowering the total cost of ownership (TCO). The SRX1500 is purpose-built to protect 10GbE network environments, consolidating multiple security services and networking functions in a highly available appliance. SRX1500 Highlights The SRX1500 fully complements next-generation firewall capabilities that help secure your network with an integrated solution that combines best-in-class application, content, and threat classification with SD-WAN, local switching, and easy policy management. Advanced application identification and classification enable greater visibility, enforcement, control, and protection over the network as they are tied to users regardless of location or device. It provides a detailed analysis of application volume and usage and fine-grained application control policies to allow or deny traffic based on dynamic application names or group names, and prioritization of traffic based on application information and context to reduce complexity across traditional, cloud, and hybrid IT networks. By combining perimeter defenses with segmentation, the SRX1500 firewall provides a comprehensive suite of application security, threat defenses, and intelligence services to protect networks from content-borne threats. Integrated threat intelligence via Juniper Networks Advanced Threat Prevention (ATP) Cloud offers adaptive threat protection against command and control (C&C) solutions that leverage automated protection. This

Open the catalog to page 1

integration helps detect and enforce against known exploits, spyware, malware, and zero-day threats with an extremely high degree of accuracy using advanced AI techniques developed in conjunction with Juniper Threat Labs. The SRX1500 enables agile SecOps through automation capabilities that support Zero Touch Deployment, Python scripts for orchestration, and event scripting for operational management. The SRX1500 delivers fully automated SD-WAN to both enterprises and service providers. A Zero Touch Provisioning (ZTP) capability simplifies branch network connectivity for initial deployment...

Open the catalog to page 2

Features and Benefits Business Requirement High performance High-performance firewall SRX1500 Advantages • Best suited for enterprise large branch and campus deployments • Addresses future needs for scale and feature capacity High-quality end user experience Application visibility and control • Continuous application updates provided by Juniper Threat Labs • Controls and prioritizes traffic based on application and user role • Inspects and detects applications inside the SSL-encrypted traffic Threat protection IPS, antivirus, antispam, enhanced web filtering, Juniper Advanced Threat...

Open the catalog to page 3

• Authentication: Pre-shared key and public key infrastructure (PKI) (X.509) • IPsec (Internet Protocol Security): Authentication Header (AH)/ Encapsulating Security Payload (ESP) protocol • IPsec Authentication Algorithms: hmac-md5, hmac-sha-196 • IPsec Encryption Algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, SuiteB • Perfect forward secrecy, anti-reply • Internet Key Exchange: IKEv1, IKEv2 • Monitoring: Standard-based dead peer detection (DPD) support, VPN monitoring • VPNs GRE, IP-in-IP, and MPLS High Availability Features • Virtual Router Redundancy Protocol (VRRP) • Stateful...

Open the catalog to page 4

Network Services • Dynamic Host Configuration Protocol (DHCP) client/server/ relay • Domain Name System (DNS) proxy, dynamic DNS (DDNS) Power supply AC/DC (external) Average power consumption Average heat dissipation Packet mode MPLS (RSVP, LDP) Circuit cross-connect (CCC), translational cross-connect (TCC) L2/L2 MPLS VPN, pseudo-wires Virtual private LAN service (VPLS), next-generation multicast Maximum current consumption Maximum inrush current Acoustic noise level Operating temperature Nonoperating temperature Operating humidity Nonoperating humidity Meantime between failures (MTBF) RoHS...

Open the catalog to page 5