SRX550M Firewall Datasheet

At the perimeter, the SRX550M Firewall offers a comprehensive suite of application security services, threat defenses, and intelligence services. Next-generation firewall capabilities consist of intrusion prevention systems (IPS), application security user role-based firewall controls, and cloud-based antivirus, antispam, and enhanced Web filtering, protecting enterprise edge and branch locations from the latest content-borne threats. Integrated threat intelligence via Juniper Networks Security Intelligence offers GeoIP-based policy enforcement and adaptive threat protection against C&C-related botnets. Customers can also leverage their custom and third-party feeds to protect the network from advanced malware and other threats.

Integrating with the Juniper Advanced Threat Prevention solution, the SRX550M Firewall detects and enforces automated protection against known malware and zero-day threats with high accuracy.

As Juniper's simple and seamless management experience, Security Director Cloud is delivered in a single UI to connect customers' current deployments with their future architectural rollouts. Management is at the center of the Juniper Connected Security strategy and helps organizations secure every point of connection on their network to safeguard users, data, and infrastructure.

Security Director Cloud enables organizations to secure their architecture with consistent security policies across any environment—on-premises, cloud-based, cloud-delivered, and hybrid—and expands zero trust to all parts of the network from the edge into the data center and to the applications and microservices. With Security Director Cloud, organizations have unbroken visibility, policy configuration, administration, and collective threat intelligence all in one place.

Juniper meets customers where they are on their journey, helps them leverage their existing investments, and empowers them to transition to their preferred architecture at the best pace for business by automating their transition with Security Director Cloud.

Secure the remote workforce anywhere with the fast, reliable, and secure access they need. Juniper Secure Edge delivers full-stack Security Service Edge (SSE) capabilities, including Firewall as a Service (FWaaS), Secure Web Gateway (SWG), Cloud Access Security Broker (CASB) with Data Loss Prevention (DLP), Zero Trust Network Access (ZTNA), and advanced threat protection. It helps organizations protect access to Web, SaaS, and on-premises applications and keep users secure wherever they are located.

Juniper Secure Edge, managed by Security Director Cloud, uses a single policy framework that enables security policies to be created once and applied anywhere. Policies follow users, devices, and applications wherever they go, and customers don't have to start from scratch when adopting cloud-delivered security. With our three-click wizard, customers can easily leverage existing campus edge policies and translate them into an SSE policy. Because it uses a single policy framework regardless of the deployment model, Secure Edge migrates existing security policies from traditional deployments to its cloud-delivered model in clicks, reducing misconfigurations and risk.

Whether securing remote users, campus and branch locations, private cloud, public cloud, or hybrid cloud data centers, Juniper provides unified management and unbroken visibility across all architectures. This makes it easy for ops teams to effectively bridge their current investments with future architectural goals, including SASE.

Juniper Mist^™ WAN Assurance is a cloud service that brings AI-powered automation and service levels to Juniper Networks SRX Series Firewalls, complementing the Juniper Secure SD-WAN solution. Mist WAN Assurance transforms IT operations from reactive troubleshooting to proactive remediation, turning insights into actions and delivering operational simplicity with seamless integration into existing deployments.

• SRX Series Firewalls, deployed as secure SD-WAN edge devices, deliver the rich Junos streaming telemetry that provides insights needed for WAN health metrics and anomaly detection. This data is leveraged within the Mist Cloud and AI engine, driving simpler operations, reducing mean time to repair (MTTR), and providing greater visibility into end-user experiences.
• Insights derived from SRX Series SD-WAN gateway telemetry data allow WAN Assurance to compute unique “User Minutes” that indicate whether users are having a good experience.
• The Marvis™ Virtual Network Assistant for WAN allows you to ask direct questions like “Why is my Zoom call bad?” and provides complete insights, correlation, and actions.
• Marvis Actions identifies and summarizes issues such as application latency conditions, congested WAN circuits, or negotiation mismatches.
  
  

The SRX550M line delivers fully automated SD-WAN to enterprises and service providers.

• A Zero-Touch Provisioning (ZTP) feature simplifies branch network connectivity for initial deployment and ongoing management.
• SRX550M Firewalls offer best-in-class secure connectivity
• The SRX550M Firewall efficiently utilizes multiple links and load balances traffic across the enterprise WAN, blending traditional MPLS with other connectivity options such as broadband Internet, leased lines, 4G/LTE, and more
• Policy- and application-based forwarding capabilities enforce business rules created by the enterprise to steer application traffic toward a preferred path

SRX550M Firewalls run on the Junos operating system, a proven, carrier-hardened OS that powers the world's top 100 service provider networks.

The rigorously tested, carrier-class, rich routing features such as IPv4/IPv6, OSPF, BGP, and multicast have been proven over 15 years of worldwide deployments.

The SRX550M Firewall enables agile SecOps through automation capabilities that support Zero Touch Deployment, Python scripts for orchestration, and event scripting for operational management.

• IPv4, IPv6, ISO, Connectionless Network Service (CLNS)
• Static routes
• RIP v1/v2
• OSPF/OSPF v3
• BGP with route reflector
• IS-IS
• Multicast: Internet Group Management Protocol (IGMP) v1/v2, Protocol Independent Multicast (PIM) sparse mode (SM)/dense mode (DM)/source-specific multicast (SSM), Session Description Protocol (SDP), Distance Vector Multicast Routing Protocol (DVMRP), Multicast Source Discovery Protocol (MSDP), Reverse Path Forwarding (RPF)
• Encapsulation: VLAN, Point-to-Point Protocol (PPP), Frame Relay, High-Level Data Link Control (HDLC), serial, Multilink Point-to-Point Protocol (MLPPP), Multilink Frame Relay (MLFR), and Point-to-Point Protocol over Ethernet (PPPoE)
• Virtual routers
• Policy-based routing, source-based routing
• Equal-cost multipath (ECMP)

• Support for 802.1p, DiffServ code point (DSCP), EXP
• Classification based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multifield filters
• Marking, policing, and shaping
• Classification and scheduling
• Weighted random early detection (WRED)
• Guaranteed and maximum bandwidth
• Ingress traffic policing
• Virtual channels
• Hierarchical shaping and policing

• ASIC-based Layer 2 forwarding
• MAC address learning
• VLAN addressing and integrated routing and bridging (IRB) support
• Link aggregation and LACP
• Link Layer Discovery Protocol (LLDP) and Link Layer Discovery Protocol–Media Endpoint Discovery (LLDP–MED)
• Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), Multiple Spanning Tree Protocol (MSTP)
• Multiple VLAN Registration Protocol (MVRP)
• 802.1X authentication

• Stateful and stateless firewall 
• Zone-based firewall
• Screens and distributed denial of service (DDoS) 
• Protection from protocol and traffic anomalies
• Integration with Pulse Unified Access Control (UAC)
• Integration with Aruba ClearPass Policy Manager 
• User role-based firewall
• SSL inspection (forward proxy)

• Source NAT with Port Address Translation (PAT)
• Bidirectional 1:1 static NAT
• Destination NAT with PAT
• Persistent NAT
• IPv6 address translation

• Tunnels: Site-to-site, hub and spoke, dynamic endpoint, AutoVPN, ADVPN, Group VPN (IPv4/IPv6/dual stack)
• Juniper Secure Connect: Remote access/SSL VPN
• Configuration payload: Yes
• IKE encryption algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite B 
• IKE authentication algorithms: MD5, SHA-1, SHA-128, SHA-256, SHA-384
• Authentication: Pre-shared key and public key infrastructure (PKI) (X.509)
• IPsec (Internet Protocol Security): Authentication Header (AH)/Encapsulating Security Payload (ESP) protocol
• IPsec authentication algorithms: hmac-md5, hmac-sha-196, hmac-sha-256
• IPsec encryption algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite B Perfect Forward Secrecy, anti-reply
• Internet Key Exchange: IKEv1, IKEv2
• Monitoring: Standard-based dead peer detection (DPD) support, VPN monitoring
• VPNs, GRE, IP-in-IP, and MPLS

• Dynamic Host Configuration Protocol (DHCP) client/server/relay
• Domain Name System (DNS) proxy, dynamic DNS (DDNS)
• Juniper real-time performance monitoring (RPM) and IP monitoring
• Juniper flow monitoring (J-Flow)
• Bidirectional Forwarding Detection (BFD)
• Two-Way Active Measurement Protocol (TWAMP)
• IEEE 802.3ah Link Fault Management (LFM)
• IEEE 802.1ag Connectivity Fault Management (CFM)

• Virtual Router Redundancy Protocol (VRRP)
• Stateful high availability
• Dual box clustering
• Active/passive
• Active/active
• Configuration synchronization
• Firewall session synchronization
• Device/link detection
• In-Band Cluster Upgrade (ICU)
• Dial on-demand backup interfaces
• IP monitoring with route and interface failover

• SSH, Telnet, SNMP
• Smart image download
• Juniper CLI and Web UI
• Mist AI
  • Simplified management
  • WAN Assurance
• Junos Space^® Security Director and Security Director Cloud
• Python, Junos PyEZ, and Ansible modules
• Junos OS event, commit, and OP scripts
• Application and bandwidth usage reporting
• Auto installation
• Debug and troubleshooting tools
• ZTP with Contrail^® Service Orchestration

• Packet mode
• MPLS (RSVP, LDP)
• Circuit cross-connect (CCC), translational cross-connect (TCC)
• L2/L3 MPLS VPN, pseudowires
• Virtual private LAN service (VPLS), next-generation multicast VPN (NG-MVPN)
• MPLS traffic engineering and MPLS fast reroute

• Application visibility and control
• Application-based firewall
• Application QoS

• Application-based advanced policy-based routing (APBR)
• Application quality of experience (AppQoE)
• Application-based link monitoring and switchover with AppQoE

• Intrusion prevention system (IPS)
• Antivirus
• Antispam
• Category/reputation-based URL filtering
• Protection from botnets (Command & Control)
• Adaptive enforcement based on GeoIP
• Juniper Advanced Threat Prevention to detect and block zero-day attacks
• Adaptive Threat Profiling
• Encrypted Traffic Insights
• Juniper SecIntel to provide threat intelligence

• Fixed I/O: 6 x 10/100/1000 BASE-T + 4 small form-factor pluggable transceivers (SFP transceivers)
• I/O slots: 2 x SRX Series Mini-PIM, 6 x Gigabit-Backplane Physical Interface Module (GPIM), or multiple GPIM and XPIM combinations
• Services and Routing Engine slots: No
• WAN/LAN interface options: See ordering information
• Maximum number of power-over-Ethernet (PoE) ports (PoE optional on some SRX Series models): Up to 40 ports of 802.3af/at with a maximum of 247 W
• USB: 2

• Memory (DRAM): 4 GB
• Memory slots: 2 DIMM
• Flash memory: 8 GB, CF internal
• USB port for external storage: Yes

• Dimensions (W x H x D): 17.5 x 3.5 x 18.2 in (44.4 x 8.8 x 46.2 cm)
• Weight (device and power supply): 21.96 lbs. (9.96 kg) (no interface modules, 1 power supply)
• Rack-mountable: Yes, 2 U
• Power supply (AC): 100–240 VAC, single 645 W or dual 645 W 
• Maximum PoE power: 247 W redundant or 494 W non-redundant 
• Average power consumption: 85 W
• Input frequency: 50–60 Hz
• Maximum current consumption: 7.5 A @ 100 VAC with single PSU with PoE, 10.5 A @ 100 VAC with dual PSU with PoE
• Maximum inrush current: 45 A for half-cycle
• Average heat dissipation: 238 BTU/hr. 
• Maximum heat dissipation: 1449 BTU/hr.
• Redundant power supply (hot swappable): Yes (up to a maximum capacity of a single PSU)
• Acoustic noise level (per ISO 7779 Standard): 51.8 dB

• Operational temperature: 32° to 104° F (0° to 40° C)
• Nonoperational temperature: 4° to 158° F, (–20° to 70° C)
• Humidity (operating): 10–90 percent noncondensing
• Humidity (nonoperating): 5–95 percent noncondensing
• Mean time between failures (Telcordia model): 9.6 years with redundant power
• FCC classification: Class A
• RoHS compliance: Yes

• Firewall performance (large packets)²: 7 Gbps 
• Firewall performance (IMIX)²: 2 Gbps 
• Firewall + routing pps (64 Byte)²: 700 Kpps 
• Firewall performance (HTTP)³: 2 Gbps
• IPsec VPN throughput (large packets): 1.0 Gbps 
• IPsec VPN tunnels: 2,000
• Application firewall: 2.0 Gbps
• Intrusion prevention system (IPS)³: 800 Mbps 
• Antivirus: 300 Mbps (Sophos antivirus) 
• Connections per second: 27,000
• Maximum concurrent sessions: 375,000 
• Maximum security policies: 8,000 
• Maximum users supported: Unrestricted
• Route table size (RIB/FIB) (IPv4 or IPv6): 1.5 million/750,000 
• NAT rules: 6,144
• MAC table size: 15,000
• Number of remote access/SSL VPN (concurrent) users: 500 
• GRE tunnels: 1,500
• Maximum number of security zones: 96
• Maximum number of virtual routers: 128
• Maximum number of VLANs: 3967
• AppID sessions: 65,000
• IPS sessions: 64,000
• URL filtering (URLF) sessions: 64,000

Juniper Networks is the leader in performance-enabling services that are designed to accelerate, extend, and optimize your high-performance network. Our services allow you to maximize operational efficiency while reducing costs and minimizing risk, achieving a faster time to value for your network. Juniper Networks ensures operational excellence by optimizing the network to maintain required levels of performance, reliability, and availability. For more details, please visit our Products page.

To order Juniper Networks SRX Series Firewalls and to access software licensing information, please visit our How to Buy page.

At Juniper Networks, we are dedicated to dramatically simplifying network operations and driving superior experiences for end users. Our solutions deliver industry-leading insight, automation, security, and AI to drive real business results. We believe that powering connections will bring us closer together while empowering us all to solve the world’s greatest challenges of well-being, sustainability, and equality.

1000669 - 009 - EN JULY 2023