The SRX4000 line sets a new benchmark for price and performance while enabling secure migration into hybrid clouds.

The SRX4000 line includes two models, each of which deliver market-leading performance, scalability, and security services in a compact, 1 U platform:

The SRX4100 supports up to 20 Gbps IMIX and 5 Gbps next-generation firewall performance.
The SRX4200 supports up to 40 Gbps IMIX and 10 Gbps next-generation firewall performance.
Both models also offer eight 10GbE small form-factor pluggable plus (SFP+) front-panel ports.

The SRX4100 and SRX4200 also support Juniper Networks Sky Advanced Threat Prevention, a cloud-based service that continuously adapts to an ever-changing threat landscape to provide a dynamic anti-malware solution.

To protect against command and control (C&C) related botnets and Web application threats, the SRX4000 line features integrated security intelligence and policy enforcement based on GeoIP data provided by Juniper feeds. Our commitment to open standards enables users to leverage custom and third-party feeds to defend against advanced malware and other threats.

The SRX5400 represents the most open, scalable security platform in the industry. Integrated threat intelligence offers adaptive, customized protection against command and control (C&C)-related botnets and malware, as well as dynamic policy enforcement based on GeoIP and threat data, with intelligence from Juniper-provided feeds. In companies that have their own threat collection capabilities, you can also leverage the SRX5400 as an enforcement point for custom and third-party feeds, protecting against advanced threats unique to your industry.

Superior price/performance and a small footprint make the SRX5400 ideal for securing enterprise edges and data centers, service provider infrastructures, and next-generation services and applications.

The SRX5400 supports firewall performance of up to 480 Gbps, with advanced anti-threat capabilities and an unprecedented 28 million concurrent user sessions on a highly reliable system, with six-nines availability. It offers 10GbE, 40GbE, and 100GbE connectivity options for maximum flexibility.

Based on an innovative architecture that provides outstanding performance, scalability, and service integration, the SRX5600 delivers the most open and scalable security platform in the industry. Integrated threat intelligence offers adaptive, customized threat protection against command and control (C&C)-related botnets and malware, as well as dynamic policy enforcement based on GeoIP and threat data, with intelligence from Juniper-provided feeds. In companies that have their own threat collection capabilities, you can also leverage the SRX5600 as an enforcement point for custom and third-party feeds, protecting against advanced threats unique to your industry.

Extraordinary scalability makes the SRX5600 Services Gateway particularly well suited for securing large enterprise data centers, service provider infrastructures, and next-generation services and applications, as well as enforcing unique per-zone security policies.

The SRX5600 supports firewall performance of up to 960 Gbps, advanced anti-threat capabilities, and an unprecedented 100 million concurrent user sessions on a highly reliable system, with six-nines availability.

It is a next-generation security platform that delivers market-leading performance, scalability, and service integration in a mid-sized form factor. SRX3600 supports up to 55 Gbps firewall, 15 Gbps firewall and IPS, or 15 Gbps of IPsec VPN, plus up to 175,000 new connections per second.

Integrated security intelligence offers adaptive threat protection against command and control (C&C) related botnets and Web application threats, as well as policy enforcement based on GeoIP data coming from Juniper provided feeds. Customers may also leverage their own custom and third-party feeds for protection from advanced malware and other threats.

Based on an innovative midplane design and Juniper’s dynamic services architecture, the SRX3000 line resets the bar in price/performance for enterprise and service provider environments

Ideally suited for service provider, large enterprise, and public sector networks, the SRX5800 supports 2 Tbps firewall, six nines carrier-grade reliability, more than 100 Gbps intrusion prevention system (IPS), and an industry record-breaking 100 million concurrent user sessions.

The SRX5800 delivers the industry’s most open and scalable threat intelligence platform. Integrated threat intelligence offers adaptive, customized protection against command and control (C&C)-related botnets and malware, as well as dynamic policy enforcement based on GeoIP and threat data, with intelligence from Juniper-provided feeds. In companies that have their own threat collection capabilities, you can also leverage the SRX5800 as an enforcement point for custom and third-party feeds, protecting against advanced threats unique to your industry.

Equipped with a full range of integrated security features, the massively scalable SRX5800 Services Gateway gives you an optimal solution for securing large enterprise data centers, hosted or colocated data centers, and service provider infrastructures.

The NFX250 embeds the industry’s most efficient and full-functioned virtualized security appliance—the vSRX virtual firewall—giving you access to feature-rich security services. The vSRX is easy to license, providing the perimeter security required in today’s threat-sensitive business environment. With the vSRX, the NFX250 virtualizes IP routing for site survivability to meet the stringent demands of always-on application availability.

The NFX250 provides the same high-performance functionality as a physical CPE device, with the added flexibility of dynamic service creation in an open environment. The result is a nearly instantaneous service-delivery experience, in a distributed or hybrid cloud model.

The SRX3400 is a next-generation security platform that delivers market-leading performance, scalability, and service integration in a mid-sized 3 U form factor. It supports up to 30 Gbps firewall, 8 Gbps firewall and IPS, or 8 Gbps of IPsec VPN, and up to 175,000 new connections per second.

Integrated security intelligence offers adaptive threat protection against command and control (C&C) related botnets and Web application threats, as well as policy enforcement based on GeoIP data coming from Juniper provided feeds. Customers may also leverage their own custom and third-party feeds for protection from advanced malware and other threats.

Based on an innovative midplane design and Juniper’s dynamic services architecture, the SRX3000 line resets the bar in price/performance for enterprise and service provider environments.

The cSRX container firewall, like other containers, differs from VMs in several important ways. It runs with no guest OS overhead, has a notably smaller footprint, and is easier to migrate or download. It uses less memory, and its spinup time measures in subseconds—all leading to higher density at a lower cost.

Junos Space Security Director improves policy configuration, management, and visibility for both physical and virtual assets through a common, centralized platform. Security Director provides a single pane of glass for managing firewall policies consistently across vSRX, cSRX, and SRX Series platforms.

For service providers and organizations that deploy service-oriented applications, the cSRX presents a portfolio of containerized security services. Included among these are: intrusion prevention system (IPS), AppSecure, and unified threat management (UTM). These cSRX capabilities support a variety of Network Functions Virtualization (NFV) use cases.

The cSRX is integrated with Juniper Contrail and OpenStack. Integration with third-party software-defined network (SDN) solutions is enabled through common management interfaces across the SRX family.

Businesses need a firewall that can keep pace with evolving threats while providing the agility, elasticity, and cost savings that virtualized and cloud environments demand—without sacrificing reliability, visibility, or control.

The vSRX offers the same features that are available in our physical SRX Series devices, delivering a complete and integrated virtual security solution that includes core firewall, robust networking, advanced security services at Layers 4-7, and automated lifecycle management capabilities.

Automated provisioning capabilities enabled through Junos Space Virtual Director let you quickly and efficiently deploy scalable firewall protection to meet the dynamic needs of virtualized and cloud environments. In addition, rich Junos APIs in the vSRX allow you to automate its management and orchestration, using tools such as Netconf, Ansible, or Vagrant.

By combining the provisioning capabilities in Virtual Director with the power of Junos Space Security Director, you can also improve policy configuration, management, and visibility for both physical and virtual assets through a common, centralized platform. Security Director provides a single pane of glass for managing firewall policies consistently across vSRX, cSRX, and SRX Series platforms.

For service providers and organizations that deploy service-oriented applications, the vSRX presents a portfolio of virtualized network and security services such as firewall, VPN, Network Address Translation (NAT), intrusion prevention system (IPS), AppSecure, and unified threat management (UTM), supporting a variety of Network Functions Virtualization (NFV) use cases. AppSecure, a suite of application security capabilities for the SRX Series firewalls, lets you identify applications for greater visibility, enforcement, and control to strengthen overall network protection. The versatility of the vSRX and AppSecure is highlighted in our Cloud CPE and Cloud-Enabled Branch.

The vSRX, available from Juniper, Juniper partners, and on the Amazon Marketplace, also supports Juniper Contrail, OpenContrail, and third-party SDN solutions, and can integrate with next-generation cloud orchestration tools such as OpenStack.

A high-performance security appliance, the SRX1500 protects distributed enterprise campus locations and serves as a perimeter firewall for small to medium-sized data centers.

The combination of hardware and software architectures on the SRX1500 delivers very high performance in a small, 1 U form factor. The SRX1500 performs ultra-fast, high-speed firewalling and intrusion protection that can extend to protect end-user devices. Firewall performance remains consistent across different application profiles and usage patterns. Unified threat management (UTM) and intrusion prevention system (IPS) capabilities make it easier to detect intrusions, enforce policies, and proactively mitigate threats to improve the user and application experience.

The SRX1500 Services Gateway is optimized for:

Securing the enterprise data center perimeter or distributed enterprise campus locations with up to 2,000 users.
Reducing traffic processing times for deterministic, latency-sensitive environments such as financial services networks. The SRX1500 also enables users to easily audit both the network and devices to ensure regulatory compliance.
The SRX1500 provides 12 1GbE RJ-45 ports, 4 1GbE SFP, and 4 10GbE SFP+ ports, plus 2 Physical Interface Module (PIM) slots for scalable, secure connectivity. Dedicated 1GbE ports are available for out-of-band management, high-availability control, and front-to-back airflow.

SRX1500 Services Gateways that are geographically dispersed can be centrally managed with the Junos® Space Security Director platform. A carrier-grade operating system such as Junos OS, fault-tolerant hardware, and interface speed diversity make the SRX1500 the best option for securing distributed enterprise networks, campuses, regional headquarters, and small to medium-sized data center networks.