| Specifications |
SRX4100-SYS-JE-DC |
| System memory (RAM) |
64 GB |
| Secondary storage (SSD) |
240 GB with 1+1 RAID |
| Firewall throughput |
40 Gbps |
| Firewall throughput—IMIX |
22 Gbps |
| Firewall throughput with application security |
19.9 Gbps |
| IPsec VPN throughput-IMIX |
14.8 Gbps |
| Intrusion prevention |
13.9 Gbps |
| NGFW throughput |
9 Gbps |
| Secure Web Access throughput |
6.7 Gbps |
| Connections per second |
250,000 |
| Maximum session |
5 million |
| Routing/firewall (IMIX packet size) throughput Gbps |
22.5 |
| Routing/firewall (1,518 B packet size) throughput Gbps |
40 |
| IPsec VPN (IMIX packet size) Gbps |
14.8 |
| Application visibility and control in Gbps |
19.9 |
| Recommended IPS in Gbps |
13.9 |
| Next-generation firewall in Gbps |
9 |
| Secure Web Access firewall in Gbps |
6.7 |
| Connections per second (CPS) |
250,000 |
| Maximum security policies |
60,000 |
| Maximum concurrent sessions (IPv4 or IPv6) |
5 million |
| Route table size (RIB/FIB) (IPv4) |
2 million/1.2 million |
| IPsec tunnels |
7500 |
| Number of remote access/SSL VPN (concurrent) users |
7500 |
| Multitenancy (LSYS/TSYS) |
32/200 |
| Software Specifications |
| Routing Protocols |
IPv4, IPv6, static routes, RIP v1/v2
OSPF/OSPF v3
BGP with route reflector
IS-IS
Multicast: Internet Group Management Protocol (IGMP) v1/v2; Protocol Independent Multicast (PIM) sparse mode (SM)/source-specific multicast (SSM); Session Description Protocol (SDP); Distance Vector Multicast Routing Protocol (DVMRP); Multicast Source Discovery Protocol (MSDP); reverse path forwarding (RPF)
Encapsulation: VLAN, Point-to-Point Protocol over Ethernet (PPPoE)
Virtual routers
Policy-based routing, source-based routing
Equal-cost multipath (ECMP) |
| QoS Features |
Support for 802.1p, DiffServ code point (DSCP), EXP
Classification based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multifield filters
Marking, policing, and shaping
Classification and scheduling
Weighted random early detection (WRED)
Guaranteed and maximum bandwidth
Ingress traffic policing
Virtual channels |
| Firewall Services |
Stateful and stateless firewall
Zone-based firewall
Screens and distributed denial of service (DDoS) protection
Protection from protocol and traffic anomalies
Unified Access Control (UAC) |
| Network Address Translation (NAT) |
Source NAT with Port Address Translation (PAT)
Bidirectional 1:1 static NAT
Destination NAT with PAT
Persistent NAT
IPv6 address translation |
| VPN Features |
Tunnels: Site-to-site, hub and spoke, dynamic endpoint, AutoVPN, ADVPN, Group VPN (IPv4/ IPv6/Dual Stack)
Juniper Secure Connect: Remote access/SSL VPN
Configuration payload: Yes
IKE Encryption algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite B
IKE authentication algorithms: MD5, SHA-1, SHA-128, SHA-256, SHA-384
Authentication: Pre-shared key and public key infrastructure (PKI) (X.509)
IPsec (Internet Protocol Security): Authentication Header (AH) / Encapsulating Security Payload (ESP) protocol
IPsec Authentication Algorithms: hmac-md5, hmac-sha-196, hmac-sha-256
IPsec Encryption Algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite B
Perfect forward secrecy, anti-reply
Internet Key Exchange: IKEv1, IKEv2
Monitoring: Standard-based dead peer detection (DPD) support, VPN monitoring
VPNs GRE, IP-in-IP, and MPLS |
| Network Services |
Dynamic Host Configuration Protocol (DHCP) client/server/relay
Domain Name System (DNS) proxy, dynamic DNS (DDNS)
Juniper real-time performance monitoring (RPM) and IP monitoring
Juniper flow monitoring (J-Flow) |
| High Availability Features |
Virtual Router Redundancy Protocol (VRRP) – IPv4 and IPv6
Stateful high availability:
-Dual box clustering
-Active/passive
-Active/active
-Configuration synchronization
-Firewall session synchronization
-Device/link detection
-In-Service Software Upgrade (ISSU)
IP monitoring with route and interface failover |
| Management, Automation, Logging, and Reporting |
SSH, Telnet, SNMP
Smart image download
Juniper CLI and Web UI
Juniper Networks Junos Space Security Director
Python
Junos events, commit and OP scripts
Application and bandwidth usage reporting
Debug and troubleshooting tools |
| Advanced Routing Services |
Packet Mode
MPLS (RSVP, LDP)
Circuit cross-connect (CCC), translational cross-connect (TCC)
L2/L2 MPLS VPN, pseudo-wires
Virtual private LAN service (VPLS), next-generation multicast VPN (NG-MVPN)
MPLS traffic engineering and MPLS fast re-route |
| Application Security Services |
Application visibility and control
Application-based firewall
Application QoS
Advanced/application policy-based routing (APBR)
Application Quality of Experience (AppQoE)
Application-based multipath routing
User-based firewall |
| Threat Defense and Intelligence Services |
Intrusion prevention system
Antivirus
Antispam
Category/reputation-based URL filtering
SSL proxy/inspection
Protection from botnets (command and control)
Adaptive enforcement based on GeoIP
Juniper Advanced Threat Prevention, a cloud-based SaaS offering, to detect and block zero-day attacks
Adaptive Threat Profiling
Encrypted Traffic Insights
SecIntel to provide threat intelligence
Juniper ATP Appliance, a distributed, on-premises advanced threat prevention solution to detect and block zero-day attacks |
| Operating temperature |
32° to 104° F (0° to 40° C) |
| Operating humidity |
5% to 90% noncondensing |
| Meantime between failures (MTBF) |
221,729 hours (about 25.3 years) |
| FCC classification |
Class A |
| RoHS compliance |
RoHS 2 |
