Junos 11.4R1
10 Gbps
2 Gbps
2.5 Gbps
.5 million
40,000
40,000
Unrestricted
1 (front slot)
- GE Base System
6 10/100/1000 RJ45 + 4 1000Base-X SFP + 2 1000Base-X SFP shared as data or clustering control - XGE Base System
3 10GBase-X SFP plus + 6 10/100/1000 RJ45 + 1 1000Base-X SFP + 2 1000Base-X SFP shared as data or clustering control
N/A
N/A
Junos Space Security Design
- 16 x 10/100/1000 RJ45
- 16 x 1000Base-X SFP
- 2 x 10GBase-X XFP
- Active/Passive, Active/Active
- Low impact chassis cluster
- Interface aggregation groups across chassis cluster
- Application Identification: yes
- Application Denial of Service Protection (AppDoS): yes
- AppTrack: yes
- AppQoS: yes
- AppFW: yes
- Dimensions (W x H x D: 17.5 x 5.25 x 13.8 in (44.5 x 13.3 x 35.05 cm)
- Weight: Base Chassis: 29.3 lb (13.3 kg)
Fully configured chassis: 42.5 lb (19.3 kg) - Power supply (AC): 100 to 127 VAC, 60 Hz, 13.0 A
- Maximum power draw: 485W (AC/DC power)
- Power supply redundancy: 1 + 1
- Network attack detection: Yes
- DoS and DDoS protection: Yes
- TCP reassembly for fragmented packet protection: Yes
- Brute force attack mitigation: Yes
- SYN cookie protection: Yes
- Zone-based IP spoofing: Yes
- Malformed packet protection: Yes
- GPRS stateful inspection: Yes
- Stateful protocol signatures: Yes
- Attack detection mechanisms: Stateful signatures, protocol anomaly detection (zero-day coverage), application identification
- Attack response mechanisms: Drop connection, close connection, session packet log, session summary, email, custom session
- Attack notification mechanisms: Structured syslog
- Worm protection: Yes
- SSL encrypted traffic inspection: Yes
- Simplified installation through recommended policies: Yes
- Trojan protection: Yes
- Spyware/adware/keylogger protection: Yes
- Other malware protection: Yes
- Protection against attack proliferation from infected systems: Yes
- Reconnaissance protection: Yes
- Request and response side attack protection: Yes
- Compound attacks — combines stateful signatures and protocol anomalies: Yes
- Create custom attack signatures: Yes
- Access contexts for customization: 500+
- Attack editing (port range, other): Yes
- Stream signatures: Yes
- Protocol thresholds: Yes
- Stateful protocol signatures: Yes
- Approximate number of attacks covered: 6,000+
- Detailed threat descriptions and remediation/patch info: Yes
- Create and enforce appropriate application-usage policies: Yes
- Attacker and target audit trail and reporting: Yes
- Deployment modes: Inline or TAP
Network and Services Processing Cards
Customers have the option to install a new NSPC card or use a combination of 2 existing modules that are interchangeable and interoperable with both the SRX3000 line and the SRX1400.
Option 1 - SRX1400 NSPC
The NSPC combines in one new card, all of the services and network multi-core processing the SRX1400 needs to implement the Juniper dynamic services architecture.
Option 2 - Combination of SRX3000 NPC, SRX3000 SPC and double-wide carrier tray
The SRX1400 provides the flexibility to use SRX3000 line NPC and SPC cards in place of the SRX1400 NSPC. SRX3000 NPC and SRX3000 SPC cards must be mounted on a new double-wide carrier tray which is then installed in the top slot of the SRX1400 base system. The ability to use interoperable cards interchangeably in both SRX3000 and SRX1400 can simplify sparing logistics and reduce TCO.
Route Engine (RE)
The SRX data center series separates the control plane from the data plane, providing superior DoS/DDoS protection and maximizing management availability of the appliance under severe operating conditions, such as DoS attack or policy install. The SRX1400 features a new discrete RE card on the control plane to manage route tables, calculate routes for network traffic, provide overall device management, and facilitate communications with systems administrators.
System I/O Card (SYSIO)
There are two base systems available for the SRX1400:
- The GE base system comes with a GE SYSIO card installed. The GE version has 12 ports of 1Gb Ethernet built in. The built-in1GbE ports are a combination of six 10/100/1000 RJ45 and six 1000Base-X that accommodate SFP transceivers.
- The XGE base system comes with a XGE SYSIO card installed. The XGE version has 9 ports of 1Gb Ethernet and 3 ports of 10Gb Ethernet built in. The built-in1GbE ports are a combination of six 10/100/1000 RJ45 and three 1000Base-X that accommodate SFP transceivers. The built-in10GbE ports accommodate SFP+ optic transceivers. Two of the 1000Base-X ports in both base systems are shared ports that can be used either as data ports if clustering is not enabled, or as HA cluster control if clustering is enabled.
Input/Output Cards (IOC)
The SRX1400 has one expansion slot for additional IOCs or for next generation hardware containing Juniper's next generation silicon. The SRX1400 uses the same IOCs as the SRX3000 line - which provides for interoperability and interchangeability of IOCs between the SRX1400 and SRX3000 lines. In addition to the excellent high port density that is built-in to the base systems, three versions of SRX3000 line IOCs are available for the SRX1400:
- 16 x 10/100/1000 RJ45
- 16 x 1000Base-X SFP
- 2 x 10GBase-X XFP
Power Supplies
The SRX1400 uses new high-efficiency power supplies for a low environmental footprint. The SRX1400 base systems come with one AC power supply installed. A second, redundant AC power supply is available as an option for increased availability.
635 KB ]
|
| Model Number | Description |
|---|---|
| Base System | |
| SRX1400BASE-GE-AC |
SRX1400 chassis, fan, Routing Engine, GbE System I/O card, AC power supply, C13 power cord. (no SPC, no NPC, no NSPC, no IOC) |
| SRX1400BASE-XGE-AC |
SRX1400 chassis, fan, Routing Engine, 10 GbE System I/O card, AC power supply, C13 power cord. (no SPC, no NPC, no NSPC, no IOC) |
| SRX 1400 Line Components | |
| SRX1K-NPC-SPC-1-10-40 |
Network and Services Processing Card (NSPC) for SRX1400, single processor, 1 GHz, 4 GB memory/CPU |
| SRX1K-SYSIO-XGE |
XGE System I/O card with 3 x 10 GbE SFP+, 6x10/100/1000 copper and 3 x GE SFP for SRX1400 (included in XGE base system) |
| SRX3000 line processing cards interoperable with SRX1400 | |
| SRX3K-SPC-1-10-40 |
SPC for SRX1400 and SRX3000 line, single processor, 1 GHz processor, 4 GB memory/CPU |
| SRX3K-NPC |
NPC for SRX1400 and SRX3000 line |
| Tray for SRX3000 Processing Cards | |
| SRX1K3K-2CFM-TRAY |
Double wide tray holder for two single wide SRX3000 line modules |
| I/O Cards (IOCs) | |
| SRX3K-16GE-SFP |
16 x 1 GbE SFP I/O card for SRX1400 and SRX3000 line |
| SRX3K-16GE-TX |
16 x 10/100/1000 copper I/O card for SRX1400 and SRX3000 line |
| SRX3K-2XGE-XFP |
2 x 10 GbE XFP I/O card for SRX1400 and SRX3000 line |
| AppSecure Subscription | |
| SRX1400-APPSEC-A-1 |
One year subscription for Application Security and IPS updates for SRX1400 |
| SRX1400-APPSEC-A-3 |
Three year subscription for Application Security and IPS updates for SRX1400 |
| SRX1400-APPSEC-A-1-R |
One year subscription renewal for Application Security and IPS updates for SRX1400 |
| SRX1400-APPSEC-A-3-R |
Three year subscription renewal for Application Security and IPS updates for SRX1400 |
| Transceivers | |
| 1 GbE Transceiver and Optic Modules | |
| SRX-SFP-1GE-LH |
SFP 1000BASE-LH gigabit Ethernet optic module |
| SRX-SFP-1GE-LX |
SFP 1000BASE-LX gigabit Ethernet optic module |
| SRX-SFP-1GE-SX |
SFP 1000BASE-SX gigabit Ethernet optic module |
| SRX-SFP-1GE-T |
SFP 1000BASE-T gigabit Ethernet module (uses Cat 5 cable) |
| 10 GbE Optic Modules | |
| SRX-XFP-10GE-SR |
10 Gigabit Ethernet pluggable transceiver, short reach multimode |
| SRX-XFP-10GE-LR |
10 Gigabit Ethernet pluggable transceiver, 10 Km, single mode |
| SRX-XFP-10GE-ER |
10 Gigabit Ethernet pluggable transceiver, 40 Km, single mode |
| SRX3600 System Configuration Guidelines SFP+ Transceivers (for XGE Base System) |
|
| SRX-SFP-10GE-DAC-1M |
SFP+ 10 GbE direct attach copper (twinax copper cable) 1 m |
| SRX-SFP-10GE-DAC-3M |
SFP+ 10 GbE direct attach copper (twinax copper cable) 3 m |
| SRX-SFP-10GE-ER |
SFP+ 10 GbE ER optics, 1550 nm for 40 km transmission |
| SRX-SFP-10GE-LR |
SFP+ 10 GbE LR optics, 1310 nm for 10 km transmission |
| SRX-SFP-10GE-LRM |
SFP+ 10 GbE LRM optics, 1310 nm for 220 m transmission |
| SRX-SFP-10GE-SR |
SFP+ 10 GbE SR optics, 850 nm for up to 300 m transmission |
| SRX3600 System Configuration Guidelines XFP Transceivers (for 10 GbE IOC) |
|
| SRX-XFP-10GE-ER |
10 GbE 40 km single mode pluggable interface |
| SRX-XFP-10GE-LR |
10 GbE XFP pluggable transceiver; single mode 1310 nm 10 km reach |
| SRX-XFP-10GE-SR |
10 GbE short reach multimode pluggable interface |
| System Configuration Guidelines | |
|---|---|
|
The SRX1400 is available in a choice of base systems: a GE base system and an XGE base system. Each base system includes a chassis, fan tray assembly and door, RE, SYSIO card (either GE or XGE depending on selection of base system), one AC power supply and one power cord appropriate to destination region. Processing resources MUST be added to a base system to create a fully functional SRX1400. Either one NSPC or the combination of all three of the following must be installed in the top slot: One SRX3000 SPC, one SRX3000 NPC and one double-wide tray holder. An SRX1400 can accommodate one optional SRX3000 IOC and a second, redundant, AC power supply. Ethernet transceivers or optic modules are not included with SRX1400 base system or IOC. The AC power supplies are not compatible with any other SRX services gateway and can only be used with the SRX1400. |
Press Releases
Network Security
