Juniper Networks SRX-240 PoE Secure Services Gateway VPN Firewall SRX240H2-POE For Sale

The Juniper Networks SRX Series Services Gateways for the branch joins Juniper Networks SRX Series for the high end, EX Series Ethernet Switches, M Series Multiservice Edge Routers, MX Series Ethernet Services Routers, and T Series Core Routers to provide a single Juniper Networks JUNOS Software-based portfolio of unprecedented scale. With JUNOS, enterprises and service providers can lower deployment and operational costs across their entire distributed workforce.

SRX Series Services Gateways for the branch provide perimeter security, content security, access control, and network-wide threat visibility and control. Best-in-class firewall and VPN technologies secure the perimeter with minimal configuration and consistent performance. By using zones and policies, even new network administrators can configure and deploy an SRX Series for the branch quickly and securely. Policy-based VPNs support more complex security architectures that require dynamic addressing and split tunneling. For content security, SRX Series for the branch offers a complete suite of Unified Threat Management (UTM) services consisting of: intrusion prevention system (IPS), antivirus, anti-spam, Web filtering and data loss prevention via content filtering to protect your network from the latest content borne threats. The branch SRX Series integrates with other Juniper security products to deliver enterprise-wide unified access control and adaptive threat management. These capabilities give security professionals powerful tools in the fight against cybercrime and data loss.

SRX Series for the branch brings high-performance and proven deployment and capabilities to enterprises that need to build a worldwide network of thousands of sites. The wide variety of options allows configuration of performance, functionality, and price scaled to support from a handful to thousands of users. Ethernet, serial, T1/E1, xDSL, Metro Ethernet, and third generation (3G) cellular wireless are all available options for WAN or Internet connectivity to securely link your sites. Multiple form factors allow you to make cost-effective choices for mission-critical deployments. Managing the network is easy using the proven JUNOS command-line interface (CLI) and scripting capabilities, or a simple to use Web-based GUI.
SRX240 Maximum Layer 3 Performance and Capacity Junos OS version tested Junos OS 11.2R3 Firewall performance (large packets) 1.8 Gbps Firewall performance (IMIX) 600 Mbps Firewall + routing PPS (64 Byte) 200 Kpps Firewall performance5(HTTP) 830 Mbps IPsec VPN throughput (large packets) 300 Mbps IPsec VPN Tunnels 1,000 AppSecure firewall throughput5 750 Mbps IPS (intrusion prevention system) 230 Mbps Antivirus 85 Mbps (ExpressAV) Connections per second 8,500 Maximum concurrent sessions 64 K / 128 K1 DRAM options 512 MB3/ 1 GB DRAM Maximum security policies 4,096 Maximum users supported Unrestricted Network Connectivity Fixed I/O 16 x 10/100/ 1000 BASE-T I/O slots 4 x SRX Series Mini-PIM Services and Routing Engine slots No ExpressCard slot (3G WAN) No WAN/LAN interface options See ordering information Optional maximum number of PoE ports Up to 16 ports of 802.3af/at with maximum 150 W USB 2 Flash/Memory SRX240 Memory min and max(DRAM) 512 MB, 1 GB Memory slots Fixed memory Flash memory 1 GB USB port for external storage Yes Dimensions SRX240 Dimensions (W x H x D) 17.5 x 1.75 x 15.1 in (44.4 x 4.4 x 38.5 cm) Weight (device and power supply) 11.2 lb (5.1 kg) non-PoE / 12.3 lb (5.6 kg) PoE No interface modules Rack mountable Yes, 1 RU Power SRX240 Power supply (AC) 100–240 VAC, 150 W Non- PoE/ 350 W PoE Maximum PoE power 150 W Average power consumption 61 W (LM), 65 W (HM), 179 W (PoE) Input frequency 50-60 Hz Maximum current consumption 1.0 A @ 100 VAC (LM), 1.1 A @ 100 VAC (HM), 3.0 A @ 100 VAC (PoE) Maximum inrush current 40 A for LM/HM, 45 A for PoE Average heat dissipation 208 BTU/Hr (SRX240B), 222 BTU/Hr (SRX240H), 249 BTU/Hr (SRX240H-PoE) Maximum heat dissipation 344 BTU/Hr (SRX240B), 369 BTU/Hr (SRX240H), 413 BTU/Hr (SRX240H-PoE) Redundant power supply (hot swappable) No Acoustic noise level 54.1 dB (Per ISO 7779 Standard) Environment SRX240 Operational temperature 32° to 104° F (0° to 40° C) Nonoperational temperature 4° to 158° F, (-20° to 70° C) Humidity 5% to 95% noncondensing Mean time between failures 15.2 years (SRX240B) (Telcordia model) 14.3 years (SRX240H) 10.4 years (SRX240H-PoE) Additional Specification Features: Protocols IPv4, IPv6, ISO Connectionless Network Service (CLNS) Routing and Multicast Static routes RIPv2 +v1 OSPF/OSPFv3 BGP BGP Router Reflector2 IS-IS Multicast (Internet Group Management Protocol (IGMPv3), PIM, Session Description Protocol (SDP), Distance Vector Multicast Routing Protocol (DVMRP), source-specific), MSDP4 MPLS (RSVP, LDP) IP Address Management Static Dynamic Host Configuration Protocol (DHCP) (client and server) DHCP relay Address Translation Source NAT with Port Address Translation (PAT) Static NAT Destination NAT with PAT Persistent NAT, NAT64 Encapsulations Ethernet (MAC and tagged) Point-to-Point Protocol (PPP) (synchronous) Multilink Point-to-Point Protocol (MLPPP) Frame Relay Multilink Frame Relay (MLFR) (FRF.15, FRF.16) High-Level Data Link Control (HDLC) Serial (RS-232, RS-449, X.21, V.35, EIA-530) 802.1q VLAN support Point-to-Point Protocol over Ethernet (PPPoE) L2 Switching 802.1D, RSTP, MSTP, 802.3ad (LACP) 802.1x, LLDP, 802.1ad (Q-in-Q), IGMP Snooping Layer 2 switching with high availability Traffic Management Quality of Service (QoS) 802.1p, DSCP, EXP Marking, policing, and shaping Class-based queuing with prioritization Weighted random early detection (WRED) Queuing based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multi-field (MF) filters Guaranteed bandwidth Maximum bandwidth Ingress traffic policing Priority-bandwidth utilization DiffServ marking Virtual channels Security:Firewall Firewall, zones, screens, policies Stateful firewall, stateless filters Network attack detection Screens denial of service (DoS) and provides distributed denial of service (DDoS) protection (anomaly-based) Prevent replay attack; Anti-Replay Unified Access Control TCP reassembly for fragmented packet protection Brute force attack mitigation SYN cookie protection Zone-based IP spoofing Malformed packet protection Security: UTM1 Intrusion Prevention System (IPS) Protocol anomaly detection Stateful protocol signatures Intrusion prevention system (IPS) attack pattern obfuscation User role-based policies Customer signatures creation Daily and emergency updates AppSecure AppTrack (application visibility and tracking) AppFW (policy enforcement by application name) Custom signatures Dynamic signature updates User-based application policy enforcement Antivirus Express AV (stream-based AV, not available on SRX100 and SRX110) File-based antivirus ›› Signature database ›› Protocols scanned: POP3, HTTP, SMTP, IMAP, FTP ›› Antispyware ›› Anti-adware ›› Antikeylogger Cloud-based antivirus Antispam Integrated enhanced Web filtering Category granularity (90+ categories) Real time threat score Redirect Web filtering Content Security Accelerator in SRX210 high memory, SRX220, SRX240 high memory, SRX550, and SRX6501 ExpressAV option in SRX210 high memory, SRX220 high memory, SRX240 high memory, SRX550, and SRX6501 Content filtering Based on MIME type, file extension, and protocol commands