SRX2300-AC Firewall

Product Description

Lub Juniper Networks^®SRX2300 firewall yog ib qho kev ua haujlwm siab -kev ua tau zoo, tom ntej- tiam firewall (NGFW) tsim los muab kev tiv thaiv kev ruaj ntseg rau koj lub lag luam hauv tsev kawm ntawv ntug thiab cov ntaub ntawv chaw ntug. Nws kuj tseem txhawb nqa roaming, SD-WAN ceg loj, thiab SD-WAN ruaj ntseg hub siv rooj plaub. Kev sib txuas cov neeg nqa khoom-qib kev coj mus rau lub xeev- ntawm-- kev hloov pauv kev kos duab, lub platform no muab kev ruaj ntseg ruaj khov, muaj txiaj ntsig zoo nrhiav kev hem thawj, thiab muaj peev xwm ua kom muaj peev xwm ua tau zoo thiab txo qis.

Daim duab 1: Juniper SRX Series firewalls tau ua tiav cov qhab nia siab tshaj plaws hauv kev ruaj ntseg zoo los ntawm CyberRatings thiab NetSecOpen

 

SRX2300 firewall muab NGFW cov yam ntxwv uas txhawb cov kev hloov pauv ntawm huab - qhib kev lag luam network thiab cov chaw khaws ntaub ntawv. Txawm hais tias dov tawm cov kev pabcuam tshiab hauv lub tsev kawm ntawv kev lag luam, txuas rau huab seamlessly, ua raws li cov qauv kev lag luam, lossis ua tiav kev ua haujlwm tau zoo, SRX2300 txhawb cov koom haum los ua haujlwm Zero Trust cov ntsiab lus ntawm qhov ntsuas thaum paub txog lawv lub hom phiaj kev lag luam. SRX2300 tiv thaiv cov cuab yeej tseem ceeb hauv tuam txhab nrog kev tiv thaiv kev nkag mus (IPS), ua raws li-- tus neeg siv thiab ua raws-- cov cai nkag mus rau hauv daim ntawv thov, thiab Juniper's AI-Kev Tiv Thaiv Kev Nyab Xeeb Kev Nyab Xeeb. Tsis tas li ntawd, SRX2300 ua haujlwm nrog Juniper huab kev ruaj ntseg cov kev daws teeb meem kom ruaj ntseg hybrid huab ib puag ncig nrog kev pom thoob plaws lub network thiab kev tswj hwm, muab kev ruaj ntseg tsis tu ncua ntawm - thaj chaw thiab huab ib puag ncig.

 

Raws li kev sib koom ua ke hauv network tau dhau los ua kev faib tawm thiab kev faib tawm, Juniper Networks SRX Series firewalls ua kom muaj kev sib txuam nrog lwm cov Juniper thiab thib peb - tog sib tham platforms. Nyob rau tib lub sijhawm, NGFWs pab txhawb kev hloov pauv vaj tsev, coj cov koom haum los ntawm thaj chaw mus rau hybrid huab ib puag ncig seamlessly thiab raug nqi. SRX Series firewalls yog thawj zaug siv kev lag luam-tus qauv Ethernet VPN (EVPN) Hom 5 thiab Virtual Extensible LAN (VXLAN) cov txheej txheem nyob rau hauv cov ntaub ntawv chaw ib puag ncig, ua rau SRX2300 ua kom muaj kev ruaj ntseg, ntaub-paub nplooj nyob rau hauv cov ntaub ntawv chaw nruab nrab-nplooj nplooj.

 

SRX2300 koom nrog hauv kev lag luam-Thawj Txuas Txuas Kev Ruaj Ntseg Distributed Services Architecture, ua rau cov koom haum tuaj yeem ntsuas kab rov tav thiab elastically thiab yooj yim rau kev tswj xyuas kev ua haujlwm ntawm cov loj- nplai firewall networks. Nrog rau qhov kev tsim qauv no, ntau lub platform SRX2300 tuaj yeem ua haujlwm ua ke ua ib lub laj thawj loj loj los muab kev ua tau zoo dua thiab kev nyab xeeb.

 

Lub SRX2300 yog siv los ntawm Juniper txoj kev lag luam- coj Junos^®kev khiav hauj lwm qhov system uas txhawb nqa thiab pab kom ruaj ntseg lub ntiaj teb lub hom phiaj loj tshaj plaws -cov lag luam tseem ceeb thiab cov chaw muab kev pab cuam network. Nws yog tswj hwm los ntawm Juniper Security Director Cloud, Juniper txoj kev tswj hwm kev sib koom ua ke uas txuas lub koom haum cov kev xa tawm tam sim no nrog rau kev tsim vaj tsev yav tom ntej. Tus Thawj Saib Xyuas Kev Ruaj Ntseg Huab siv ib txoj cai tswjfwm, ua kom muaj kev ruaj ntseg raws li txoj cai thoob plaws ib puag ncig thiab nthuav dav Zero Trust rau txhua qhov chaw ntawm lub network-los ntawm ntug mus rau hauv cov ntaub ntawv chaw. Qhov no muab qhov tsis pom kev tsis pom kev, kev teeb tsa txoj cai, kev tswj hwm, thiab kev txawj ntse kev hem thawj tag nrho hauv ib qho chaw.

 

Architecture thiab cov ntsiab lus tseem ceeb

SRX2300 kho vajtse thiab software architecture muab nqi-zoo kev ruaj ntseg nyob rau hauv ib tug compact, scalable 1U daim ntawv zoo. Lub hom phiaj tsim los tiv thaiv ib puag ncig network, SRX2300 suav nrog ntau yam kev pabcuam kev nyab xeeb thiab kev sib koom tes ua haujlwm nyob rau saum Junos OS, muab kev tiv thaiv kev hem thawj, kev siv hluav taws xob, thiab kev sib koom ua ke. Qhov zoo tshaj plaws-hauv-chav kawm kev ruaj ntseg muaj peev xwm zoo tshaj plaws ntawm SRX2300 muaj nyob rau hauv cov ntaub ntawv chaw, chaw ua haujlwm hauv tsev kawm ntawv, thiab chaw ua haujlwm hauv cheeb tsam xa mus nrog IMIX cov qauv tsheb.

Ua tau -In Zero Trust

Txhawm rau kom muaj kev ntseeg siab thiab ua kom yooj yim rau kev ua haujlwm, SRX2300 nta ntau yam ua tau los ntawm -hauv Zero Trust cov cuab yeej muaj peev xwm, suav nrog kev teeb tsa Trusted Platform Module (TPM) 2.0 thiab tus lej cim kos npe ntaus ntawv. SRX2300 txhawb nqa RFC-raws li kev ruaj ntseg Zero-Kov Kev Pabcuam (sZTP) kom ua tau zoo, tsim nyog, thiab nyob deb ntawm kev xa khoom hauv koj lub network. Tsis tas li ntawd, SRX2300 txhawb nqa MACsec ntawm cov xov hlau ceev, ua kom cov ntaub ntawv ncaj ncees thiab tsis pub leej twg paub.

 

Connected Security Distributed Services Architecture

SRX2300 firewall yog ib feem ntawm Juniper's Connected Security Distributed Services Architecture, revolutionizing data center security. Nrog Juniper's Connected Security Distributed Services Architecture, firewall kev ua tau zoo tuaj yeem ntsuas kab rov tav los ntawm kev sib txuas cov tsheb thauj mus los thiab kev pabcuam kev nyab xeeb thoob plaws ntau qhov chaw. Juniper kev daws teeb meem kuj tseem muab kev ua haujlwm tsis siv neeg ua haujlwm thiab thaub qab ntawm cov khoom xa mus thiab tshuaj xyuas. Ntxiv rau qhov rov ua dua thiab kev sib npaug, Juniper's Connected Security Distributed Services Architecture ua kom yooj yim npaum li cas - teev cov ntaub ntawv chaw taws teeb hluav taws xob tau tswj hwm thiab ua haujlwm. Txawm hais tias muaj pes tsawg lub tshuab hluav taws xob ntxiv thoob plaws ntau yam qauv (lub cev, virtual, ntim khoom) tau ntxiv, lawv txhua tus tuaj yeem tswj hwm raws li ib qho kev xav tau. Qhov kev tswj hwm hauv nruab nrab no tshem tawm qhov nyuaj uas tau ua rau tsis muaj qhov tshwm sim ntawm ib txwm teev - tawm mus kom ze.

 

Software Specifications

Firewall Services

Cov kev pab cuam firewall

Zone-raws li firewall

Cov ntxaij vab tshaus thiab faib tsis lees paub kev pabcuam (DDoS) kev tiv thaiv

Kev tiv thaiv los ntawm cov txheej txheem thiab kev khiav tsheb tsis zoo

Unified Access Control (UAC)

Kev sib xyaw nrog Juniper Mist^™Access Assurance

 

Carrier-Grade Network Address Translation (CGNAT)

Carrier -qib Network Chaw Txhais Lus (Lav -scale NAT)

IPv4 thiab IPv6 chaw nyob txhais lus NAT44, NAPT44, NAT66, NAPT66, NAT64, NAT46

Static thiab dynamic 1-1 txhais lus

Tau qhov twg los NAT nrog Chaw Nyob Txhais Lus (PAT)

Destination NAT nrog Chaw Nyob Txhais Lus (PAT)

Persistent NAT (EIM/EIF)

Chaw nres nkoj Thaiv Allocation (PBA)

Deterministic NAT (DetNAT)

Chaw nres nkoj overload

Ob zaug -NAT44

DS-lite thiab Chaw nres nkoj Tswj raws tu qauv (PCP)

 

VPN nta

Tunnels: Site-rau-site, hub thiab hais lus, dynamic endpoint, AutoVPN, ADVPN, Group VPN (IPv4/ IPv6/Dual Stack)

Juniper Secure Connect: Chaw taws teeb nkag IPsec/SSL VPN

Configuration payload: Yog

IKE encryption algorithms: Prime, 3DES-CBC, AEC-CBC, AES-GCM, Suite B

Authentication: Ua ntej-shared key thiab public key infrastructure (PKI) (X.509)

IPsec: Authentication Header (AH) / Encapsulating Security Payload (ESP) raws tu qauv

IPsec authentication algorithms: hmac-md5, hmac-sha-196, hmac-sha-256

IPsec encryption algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, Suite B

Zoo meej rau pem hauv ntej secrecy, tiv thaiv -replay

Internet Key Exchange: IKEv1, IKEv2

Kev saib xyuas: Tus qauv -raws li kev kuaj pom neeg tuag (DPD), kev saib xyuas VPN

VPNs GRE, IP-hauv-IP, thiab MPLS

 

Muaj Cov Nta Zoo Tshaj Plaws

Virtual Router Redundancy Protocol (VRRP)–IPv4 thiab IPv6

Stateful siab muaj: Dual box clustering

Active/passive

Active / nquag

Configuration synchronization

Firewall kev sib ntsib synchronization

Device/link detection

Hauv -Service Software Upgrade (ISSU)

IP saib xyuas nrog txoj hauv kev thiab kev cuam tshuam tsis ua haujlwm

Kev saib xyuas BFD

Chassis cluster HA thiab Multinode HA (MNHA)

 

Daim Ntawv Thov Kev Pabcuam Kev Ruaj Ntseg (muab raws li daim ntawv tso npe kev ruaj ntseg siab tshaj)

Application visibility thiab tswj

Application QoS

Advanced/application policy-raws li routing (APBR)

Daim Ntawv Thov Kev Ua Haujlwm Zoo (AppQoE)

Daim ntawv thov -raws li multipath routing

Tus neeg siv -raws li firewall

 

Kev Tiv Thaiv Kev Nyab Xeeb thiab Kev Txawj Ntse (muab raws li daim ntawv tso cai kev ruaj ntseg siab tshaj)

Intrusion tiv thaiv system

AI-Kev Tiv Thaiv Kev Nyuaj Siab

Antivirus

Antispam

Qeb/reputation-raws li URL filtering

SSL npe / tshuaj xyuas

Kev tiv thaiv los ntawm botnets (hais kom ua thiab tswj)

Adaptive tswj raws li GeoIP

Juniper Advanced Threat Prevention, huab -raws li SaaS muab los ntes thiab thaiv xoom- hnub tawm tsam

Adaptive Threat Profileing

Encrypted Traffic Insights

SecIntel hem kev txawj ntse

Juniper ATP cov cuab yeej siv virtual, kev faib tawm, nyob rau hauv qhov chaw siab tshaj kev tiv thaiv kev tiv thaiv kev tiv thaiv kom pom thiab thaiv kev tawm tsam zero-hnub

 

Kev Routing Protocols

IPv4, IPv6, txoj kev zoo li qub, RIP v1/v2

OSPF/OSPF v3

BGP nrog txoj kev reflector

YOG-IS

Multicast: Internet Group Management Protocol (IGMP) v1/v2, Protocol Independent Multicast (PIM) sparse mode (SM)/source-specific multicast (SSM), Session Description Protocol (SDP), Distance Vector Multicast Routing Protocol (DVMRP), Multicast Source Discovery Protocol (MSDP), rov qab txoj kev

Encapsulation: VLAN, Point-rau-Point Protocol hla Ethernet (PPPoE)

Virtual routers

EVPN-VXLAN (EVPN Hom 5 txoj hauv kev)

Txoj cai-raws li txoj kev, qhov chaw- raws txoj kev

Sib npaug -tus nqi multipath (ECMP)

 

QoS Features

Kev them nyiaj yug rau 802.1p, DiffServ code point (DSCP), EXP

Kev faib tawm raws li VLAN, cov ntaub ntawv- txuas txuas tus cim (DLCI), interface, pob khoom, lossis cov lim dej ntau

Marking, tub ceev xwm, thiab shaping

Classification thiab teem caij

Weighted Random Early Detection (WRED)

Guaranteed thiab siab tshaj bandwidth

Ingress tsheb tub ceev xwm

Virtual channels

 

Network Services

Dynamic Host Configuration Protocol (DHCP) client/server/relay

Domain Name System (DNS) npe, dynamic DNS (DDNS)

Juniper tiag tiag-kev saib xyuas lub sijhawm ua haujlwm (RPM) thiab kev saib xyuas IP

Juniper flow monitoring (J-Flow)

 

Advanced Routing Services

MPLS (RSVP, LDP)

Circuit cross-connect (CCC), translational cross-connect (TCC)

L2/L2 MPLS VPN, pseudo-wires

Virtual private LAN service (VPLS), tom ntej no -tiam multicast

VPN (NG-MVPN)

MPLS tsheb engineering thiab MPLS ceev rov- txoj kev

 

Kev tswj hwm, automation, txiav, thiab tshaj tawm

SSH, Telnet, SNMP-MIBs, Traps

Ntse duab download

Juniper CLI, Web UI, NetCONF, XML APIs, RMON

Juniper Networks Security Director Huab

Python

Junos OS txheej xwm, cog lus thiab OP scripts

Daim ntawv thov thiab kev siv bandwidth qhia

Debug thiab teeb meem cov cuab yeej

 

Cim npe nrov: srx2300-ac firewall, lwm tus neeg, lag luam wholesale, pheej yig, nqe