Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Frequently Asked Questions

This topic provides commonly asked questions about SRX400 firewall series with their answers.

  • Q1: Are SRX400 firewall series integrated with customers' multifactor authentication (MFA) solution for second-factor authentication (OTP through mobile app and SMS)?

    A1: The SRX firewalls, including the SRX400 firewall series, can be integrated with various authentication solutions, including MFA for second-factor authentication. However, the specific integration details for OTP through mobile app, SMS or both would depend on the chosen MFA solution and its compatibility with the SRX series.

  • Q2: Does SRX400 firewall series support high availability?

    A2: Yes. SRX400 firewall series support Multinode High Availability (MNHA). MNHA provides high availability for active/backup deployments, including routing, hybrid, default gateway, and IPsec VPN use cases.

    See Multinode High Availability.

  • Q3: Can we terminate IPsec tunnels and support different operational modes (tunnel, dialup) in SRX400 firewall series?

    A3: Yes, the SRX400 firewall series can terminate IPsec tunnels and support different operational modes, including tunnel and dial-up modes. The SRX firewalls, including the SRX400 firewall series, are designed to handle various IPsec VPN configurations and operational modes. See IPsec VPN User Guide.

  • Q4: What are the key features supported on SRX400 firewall series?

    A4: See Feature Explorer.

  • Q5: What interfaces does the SRX400 firewall series support?

    A5: See Port Speed on SRX400, SRX440, and SRX440-2AC Firewalls.

  • Q6: Does SRX400 firewall series support Carrier-Grade NAT (CGNAT)?

    A6: Yes, CGNAT is supported. See NAT Overview.

  • Q7: Does SRX400 firewall series support Request System Information (RSI)?

    A7: No, SRX400 firewall series does not support RSI. Instead Debug Collector is invoked from the CLI to generate a file containing all the relevant debug outputs.

  • Q8: What is the redundancy protocol used for MNHA for active/active traffic processing?

    A8: MNHA uses a TCP based protocol called Inter Chassis Link (ICL) to synchronise sessions and IPsec Security Associations between the MNHA nodes. This ICL can also be transported over IPsec for securing sensitive information (for example, IPsec SA).

  • Q9: Does the SRX400 firewall series support on Fab/Control links?

    A9: SRX400 firewall series does not need any dedicated cluster for MNHA can use any revenue port for ICL communication.

  • Q10: Does the SRX400 support encrypted cluster link?

    A10: Yes, ICL can be encrypted by IPsec natively.

  • Q11: What is the minimum required version of Junos OS Evolved for SRX400 firewall series?

    A11: 25.4X300-D10EVO.

  • Q12: What Network Management systems does the SRX400 firewall series support?

    A12: HPE Mist and HPE Networking Security Director can be used to manage these SRX firewalls.

  • Q13: What operating system does the SRX400 firewall series support?

    A13: The SRX400 firewall series runs the Junos Evolved Software.

  • Q14: Does the SRX400 firewall series have a Console port?

    A14: Yes, it has a USB Type-C console port and an RJ-45 Ethernet management port.

  • Q15: What are the features that need a license for the feature to be enabled on the SRX400 firewall?

    A15: See Licensing and Junos OS Evolved Upgrade.

  • Q16: Does the SRX440 have a redundant power supply?

    A16: Yes, there are 2 variants of the SRX440 and the SRX440-2AC is the one with Redundant power supply.