SRX4600-AC
SRX4600 yog kev lag luam -}}}}}}} Nplooj Firewrise, huab, thiab cov kev pabcuam pabcuam. Cov SRX4600 yog qhov zoo tshaj rau cov koom haum ua rau tsom mus rau cov cim kev lag luam thiab kev tiv thaiv srx4600 sib txuas lus sib xyaw ua ke thiab kev nyab xeeb hauv ib qho platform. Nws yog tswj hwm los ntawm tus thawj coj ruaj ntseg huab, uas pab cov koom haum ua haujlwm xoom kev ntseeg siab thiab ua kom muaj kev sib txuas lus zoo los ntawm kev sib koom ua ke ntawm kev tswj hwm tswj hwm thiab txoj cai ib txwm ua haujlwm.
- Kev xa khoom sai
- Quality Assurance
- 24/7 Kev Pabcuam Cov Neeg Siv Khoom
Khoom Taw qhia
Khoom Piav Qhia
Tus Juniper tes hauj lwm®SRX4600 Firewall tiv thaiv lub hom phiaj - Cov ntaub ntawv tseem ceeb rau kev lag luam, cov chaw muab kev pabcuam, thiab cov chaw muab kev pab. Qhov no -}} Nplooj Firewall (NGFW) yog qhov tseem ceeb ntawm Juniper®Kev sib txuas lus lub moj khaum, uas txuas rau kev ruaj ntseg rau txhua kis ntawm lub network rau cov neeg siv SafeReguard cov neeg siv, cov ntaub ntawv, thiab cov txhab nyiaj los ntawm kev hem thawj. Lub SRX4600 firewall sib txuas lus sib txuas thiab kev nyab xeeb hauv ib qho platform sib zog los ua kev lag luam siab, cov khoom lag luam malware muaj zog, thiab cov kev tswj hwm kom ruaj khov rau cov network kom ntseeg tau.
Kev Thov Kev Sau Npe Qib Siab thiab cais tawm tuaj yeem pom ntau dua, kev tswj hwm, tswj hwm, thiab nkag mus tau, thiab siv cov ntaub ntawv. Lub firewall muab cov ncauj lus kom ntxaws ntxaws ntawm kev siv cov khoom ntim thiab siv thiab nplua} kev tswj cov cai tswjfwm los yog tsis lees txais cov npe ntawm dynamic. Tsheb khiav ua ntej raws li cov ntaub ntawv thov thiab cov ntsiab lus teb los txo qis kev thoob plaws ib txwm muaj, huab, thiab hybrid nws network.
Lub SRX4600 kuj tseem siv tau automated puv us- wan rau ob qho tib si qhauj thiab cov chaw muab kev pabcuam. Vim nws cov kev ua tau zoo thiab teev, SRX4600 ua raws li VPN HUB thiab xaus kev sib txuas VPN / Kev ruaj ntseg sib txuas rau hauv ntau yam sd-} kev sib txuas wan.
Lub firewall yog tswj hwm los ntawm Juniper Kev Ruaj Ntseg Cov huab, kev sib koom tes tswj hwm cov huab uas txuas lub koom haum cov khoom siv tam sim no nrog cov khoom vaj huam sib luag tam sim no. Cov Thawj Coj Ruaj Ntseg Cloud siv ib txoj cai tswjfwm kev ruaj ntseg, ua kom muaj kev ruaj ntseg kev ruaj ntseg thoob plaws ib puag ncig thiab tshaj xoom ntseeg siab rau txhua qhov ntawm lub network los ntawm ntug kev. Qhov no muab kev pom zoo, kev tswj hwm txoj cai, thiab kev sib cav sib ceg, muaj cov koom haum kom ntseeg tau tias yog cov kws ua haujlwm ruaj ntseg thiab kev paub.
Powering SRX4600 yog JUNOS®, kev lag luam kev lag luam ua haujlwm ua haujlwm lav pheeb zog rau kev ua kom lub ntiaj teb no tseem ceeb tshaj tawm {{0} Tus kws tshaj lij kev lag luam tseem ceeb thiab cov chaw pabcuam.
Architecture thiab cov khoom tseem ceeb
SRX4600 kho vajtse thiab software architecture muab cov nqi kho tau muab tus nqi - Kev ruaj ntseg zoo hauv ib qho kev ua tiav me me. Lub hom phiaj - built Firectall tiv thaiv cov koom haum network Zoo tshaj plaws - hauv- kev nyab xeeb kev ruaj ntseg ntawm SRX4600 muaj nrog cov qauv ntaub ntawv, chaw lag luam hauv cheeb tsam tsev kawm ntawv cov qauv siv hluav taws xob.
Nta thiab cov txiaj ntsig
Rooj 1. SRX4600 Nta thiab Cov Nyiaj Pab
| Xav Tau Kev Xav Ua Lag Luam | Nta / Tshuaj | SRX4600 Qhov Zoo |
| Kev ua tau zoo | Express Path + |
Muab cov khoom siv tsis zoo ntawm txhua tus tsim nyog ntws rau kab - tus nqi xa mus yam tsis muaj kev teeb tsa ntxiv Muab cov kev kuaj xyuas tag nrho rau txhua tus ntws tsis hais qhov loj me Xav tsis muaj kev ua lag luam - tawm ntawm kev ua tau zoo thiab kev nyab xeeb Ua tau raws li cov cai rau kev lag luam cov chaw ua haujlwm thiab cov ntaub ntawv chaw ntawm ntug kev thauj khoom Chaw Nyob Muaj Kev Nyab Xeeb Kev Xav Tau thiab cov nplai rau cov kws muab kev pabcuam |
| High - Zoo, kawg - Tus neeg siv kev paub | Daim Ntawv Thov Kev Pom Zoo thiab Tswj |
Cov ntawv thov txuas ntxiv hloov tshiab muab los ntawm Juniper Hem Kev tswj hwm thiab kev tswj hwm cov tsheb raws li kev thov thiab siv lub luag haujlwm Cov tshuaj ntsuam thiab kuaj cov ntawv thov hauv ssl -} encrypted tsheb |
| Kev tsim kev hawv tiv thaiv kev tiv thaiv dhau | IPS, Antivirus, Ehanced Web Lim, Juniper Admial Kev Tiv Thaiv, Engrrypted Tsheb Insensions, Secintion, thiab kev hem thawj kev txawj ntse pub |
Muab cov peev xwm IPS thiab tiag - Lub sij hawm hloov kho uas muaj txiaj ntsig zoo tshaj plaws hauv kev lag luam los ntawm ntau tus neeg sib koom tes sim cov tuam txhab uas muag Tiv thaiv malware thiab cov vev xaib ua phem Muab cov kev txem ua qhib kev hem thawj cov kev txawj ntse uas muab ib qho ntsiab lus rau txhua txoj haujlwm ua haujlwm pub Tiv thaiv cov xoom tshaj plaws -} hnub tawm tsam Nres rogue thiab cov cuab yeej ua haujlwm los ntawm cov malware tshaj tawm Rov qab pom kev pom kev vim muaj lub nra hnyav ntawm TLS / SSL Decryption |
| Xoom -} Hnub Tiv Thaiv | Ai -} Kev tiv thaiv kev ua ntej |
Kwv yees thiab tiv thaiv malware ntawm kab tus nqi los ntawm kev siv AI txhawm rau txheeb xyuas cov kev hem thawj los ntawm pob ntawv snippets kom zoo Tshem tawm tus neeg mob - xoom} xoom kab mob Muab kev tiv thaiv uas kav rau tag nrho tua lub neej {}}} Tsis muaj 24 teev {} Yog li lub network muaj kev nyab xeeb los ntawm kev tawm tsam tom ntej |
| Kev -} qeb network networking kev pab | Txoj kev coj, ruaj ntseg hlau |
Txhawb nqa cov cab kuj -}} {}} yog}} yog, rfd, ntau cov kev pabcuam kev pabcuam) thiab kev pabcuam zoo (qos) |
| Heev ruaj ntseg | Ipsec vpn, chaw taws teeb nkag / SSL VPN |
Muab cov siab siab - performanceမ်းtsec vpn nrog rau siab crypto cav Kev muaj ntau yam kev xaiv vpn rau ntau yam kev tsim tawm network, suav nrog cov chaw taws teeb nkag mus thiab siv cov chaw nyob {{{1} {1}-} Site Site Yooj yim rau VPN xa cov khoom siv nrog pib VPN Suav nrog kho vajtse -} Raws li cov crypto nrawm Kev ruaj ntseg thiab hloov chaw taws teeb nkag, IPSec thiab SSL VPN nrog Juniper sib txuas |
| Embedded Kev Ruaj Ntseg Hauv Cov Ntaub Ntawv Fabric Fabric | Evpn - vxlan hom 5 txoj kev |
Txhim kho kev kuaj xyuas rau vxlan encapsulated tsheb nrog txheej 4 rau txheej 7 Kev Pabcuam Kev Nyab Xeeb Eases cov haujlwm uas muaj hom 5 txhawb nqa los ntawm BGP Tsis tas yuav decapsulation ntawm evpn - vxlan tsheb |
| Zoo ntseeg tau | Chassis Cluster, Redundant Fais Fab Khoom Siv Hluav Taws Xob |
Muab kev teeb tsa kev teeb tsa thiab kev sib kho lub xeev synchronization Txhawb nqa cov nquag / nquag thiab nquag / thaub qab xa rov qab xa cov xwm txheej Muab cov khoom siv muaj zog muaj cov khoom siv hluav taws xob tsis muaj zog (PSU) thiab kiv cua |
| Yooj yim los tswj thiab nplai | Ntawm - box gui, Juniper Kev Ruaj Ntseg Tus Thawj Coj Huab, Tus Thawj Coj Ruaj Ntseg, muaj zog cli thiab cadation |
Enables Kev Tswj Xyuas Nruab Nrab Los Ntawm Juniper Cov Kev Koom Tes Saib Xyuas Kev Tswj Xyuas Kev Tswj Xyuas, xoom {{{{} Txoj Cai Siv Hluav Taws Xob, Kev Tswj Xyuas Cov Hluav Taws Xob Cov Tswv Yim Kev Tswj Xyuas Cov Hluav Taws Xob thiab Tale Txhawb Kev txhais lus Network chaw nyob (NAT) thiab IPSEC VPN xa cov khoom Xws li yooj yim, yooj yim - rau - box gui rau kev tswj hwm hauv zos |
| Tsawg tco | Junos OS |
Sib xyaw ua ke thiab ruaj ntseg hauv ib lub cuab yeej Txo OPEx nrog Junos OS Kev Siv Hluav Taws Xob Hluav Taws Xob |
Software specifications
Firewall Cov Kev Pab
Cov Kev Pab Hluav Taws Xob Hluav Taws Xob
Cheeb tsam -} rated firewall
Cov ntxaij vab tshaus thiab faib cov kev pab tsis kam lees (DDOs)
Kev tiv thaiv los ntawm kev sib tw thiab cov tsheb ua haujlwm Aomalies
Unified Kev Tswj Xyuas Kev Tswj (UAC)
Kev txhais lus network chaw haujlwm (NAT)
Tau qhov twg los nrog Kev txhais Lus Chaw Nyob (Pat)
Bidirectional 1: 1 lub siab
Lo lus uas peb tau ua nrog pat
Tsis tu ncua Nat
Kev txhais lus IPV6
Chaw nres nkoj thaiv faib txoj kev rau Carier - qib Nat
Kev txiav txim siab NAT
Chaw nres nkoj overloading, pas ua ke ua khub, nat44, nat66, nat66, nap} pt, Nat46, Nat64, Dual pawg ib pawg Lite
VPN Nta
Ntau: Site {{- --, iSovpn, ApvN, Apv4 / IPv6 / Dual Tshooj)
Juniper Kev Ruaj Ntseg Txuas: Chaw Taws Teeb / SSL VPN
Configuration payload: Yog
Ike encryption algorithms: Prime, Des - Cbc, AES {{} gcm, suite b
IKE lees paub Algorithms: MD5, Sha-1, Sha-12, Sha-256, SHA-384, SHA-512
Kev lees paub: Ua Ntej Ua Ntej - share} Cov Qauv Tseem Ceeb thiab PKKE) (X.509) (X.509) (X.509)
Ipsec: Kev lees paub header (AH) / encapsulating kev ruaj ntseg Payload (ESP) raws tu qauv
Ipsec authentication algorithms: Hma- md5, Hmab}}}} sha-256, hmoobo. Sha-56
Ipsec encryption algorithms: Prime, Des- Cbc, AES {{} gcm, suite b
Zoo meej pem hauv ntej zais ntshis, anti - teb
Diffie Hellmann pawg los ntawm pawg14 mus rau pawg24
Kev Txawj Ntshe Internet: iKev1, iKev2
Saib Xyuas: Tus Qauv -} Raws li tuag Peer Nrhiav tau (DPD) txhawb nqa, VPN saib xyuas
Vpns gre, IP {- hauv - ip thiab mpls
High muaj cov nta
Virtual Router Redundancy Qum Qum (VRRP) - i} ihv4 thiab ipv6
Qhia Txog Kev Tseem Ceeb Siab: Ha Clustering
Nquag / Nquag
Nquag / Passive
Dual macsec -}} Ha Tswj Ports (10Gbe)
Dual macsec -} Enabled Ha Npuag Ports (10Gbe)
Kev teeb tsa synchronization
Firewall Kev Kawm synchronization
Ntaus / Txuas Nrhiav Tau
Unified hauv - Kev Pab Cuam Software Software (Unified EciU)
Multi - Node HA (MNHA)
IP soj ntsuam nrog txoj hauv kev thiab cuam tshuam swb
Daim Ntawv Thov Kev Nyab Xeeb Kev Nyab Xeeb1
Daim Ntawv Thov Kev Pom Zoo thiab Tswj
Ntawv Thov Qos
Advanced / Daim Ntawv Thov Txoj Cai - Raws kev coj ua (APBR)
Daim Ntawv Thov Khoom Zoo (Appqe)
Daim Ntawv Thov -} Raws li kev sib tw
Tus neeg siv -} rated firewall
Kev hem thawj tiv thaiv thiab cov kev pabcuam ntse1
Tus ips
Tshuaj tiv thaiv
Tshuaj antispam
Qeb / Recutation -} Raws URL lim
SSL npe / tshuaj xyuas
Kev tiv thaiv los ntawm botnets (hais kom ua thiab tswj)
Kev yoog raws txoj cai raws geoip
Juniper ATP Huab, huab huab {{{- based saas muab, pom thiab blocks xoom {1} {hnub tawm tsam
Kev sib raug zoo tsim txom cov profiling
Encrypted tsheb pom kev
Kev Txom Nyem Kev Txom Nyem Kev Txawj Ntse
Juniper ATT Khoom Siv Virtual, faib, ntawm -}}}}}}}} {{1} {hnub tawm tsam
Ai -} Kev tiv thaiv kev ua ntej
1Muab raws li kev ruaj ntseg kev ruaj ntseg sau cia
Txoj Kev Raws Cai
Ipv4, ipv6, txoj kev zoo li qub, rip v1 / v2
Ospf / ospf v3
BGP nrog cov txheej txheem nrog txoj kev
BFD rau kev kuaj kom sai
Evpn - vxlan
Yog - yog
Multicast: Pab Pawg Tswj Internet rau Internet (IGMP) V1 / V2; Raws tu qauv multicast (Pim) hom (sm) / tsuav hom (dm) / setic-} Cov lus piav qhia kev sib kho (SDP); Deb vector multicast cov qauv kev cai (DVMRP); Multicast Tau Txais Kev XaivCov Txheej Txheem (MSDP); Rov Qab Pw Hauv Pw Xa Ntawv (RPF)
Tshaj Tawm: Vlan, Taw tes - -}}}}}} Tshaj Tawm Txog Ethernet (PPPoe)
Virtual routers
Txoj Cai - Raws kev coj ua, qhov chaw - raws kev coj ua
Sib npaug - tus nqi muaj ntau yam (ECMP)
QOS nta
Txhawb nqa rau 802.1p, cov ntsiab lus sib cav (DSCP)
Kev faib tawm raws li interface, bundles, lossis molifield lim
Npav, Policing, thiab Shaping
Kev faib tawm thiab teem sijhawm
Weighted Random thaum ntxov nrhiav tau (wred)
Lav thiab loj tshaj bandwidth
Kev Pabcuam Network
Dynamic Part Host Configuration Raws Cai (DHCP) Tus Neeg Siv / server / Relay
Sau Npe Lub Npe (DNS) Cov Ntawv Pov Thawj, Dynamic (DDNS)
Juniper tiag tiag - lub sij hawm kev soj ntsuam (RPM) thiab tus IP soj ntsuam
Juniper ntws saib xyuas (J - ntws)
Kev tswj hwm, Automation, kev txiav tawm, thiab tshaj tawm
SSH, Telnet, SNMP
SMART NAMILE
Juniper CLI thiab Web UI
Juniper kev ruaj ntseg huab
Lub lab
Junos OS cov txheej xwm, cog lus, thiab OP scripts
Daim ntawv thov thiab Bandwidth Cov Ntaub Ntawv Tshaj Tawm
GRPC Telemetry
Debug thiab cov cuab yeej daws teeb meem
Cov Khoom Siv Kho Vajtse
Rooj 2. SRX4600 Hardware Specifications
| Kev qhia tshwj xeeb | SRX4600 |
| Tag nrho onboard i / o ports | Txog 24x1Gbe / 10Gbe (SFP +) 4x40Gbe / 100GB (QSFP28) |
| Tawm - ntawm - band (OOB) Cov chaw nres nkoj tswj | RJ-45 (1 gbps) |
| DEDICATED qhov kev vam meej (HA) | 2x1gbe / 10Gbe (SFP +) tswj 2x1gbe / 10Gbe (SFP +) cov ntaub ntawv |
| Lub hauv paus | RJ-45 (RS232) |
| USB 2.0 chaw nres nkoj (ntaus a) | 1 |
| Nco thiab cia | |
| Lub cim xeeb (RAM) | 256 GB |
| Thib Ob Khaws Cia (SSD) | 2x 1 tb m.2 ssd |
| Qhov loj me thiab lub hwj chim | |
| Daim Ntawv Qhia Txog | 1 U |
| Qhov loj me (WxHXD) | 17.4 X 1.7 x 26.5 hauv (44.19 x 4.32 x 67.31 cm) Nrog AC Pems: 17.4 x 1.7 x 27.29 hauv (44.19 x 4.32 x 69.32 cm) Nrog DC Pems: 17.4 x 1.7 x 29.20 hauv (44.19 x 4.32 x 74.17 cm) |
| Qhov hnyav (system thiab 2 lub zog nkag modules) | Nrog ac Pems: 38 lb (17.24 kg) Shipping Luj: 45.47 lb (20.62 kg) Nrog DC Pems: 40 LB (18.14 kg) Shipping hnyav: 47.47 lb (21.53 kg) |
| Redundant PSU | 1+1 |
| Kev pab fais fab | 2x 1600 w ac - dc psu redundant 2x 1100 w dc - dc psu redundant |
| Kev siv hluav taws xob nruab nrab | 650 W |
| Nruab nrab kub dissipation | 2218 btu / teev |
| Qhov siab tshaj plaws tau noj | 12 a (rau 110 v AC fais fab) 6 a (rau 220 v AC fais fab) 24 a (rau -48 v DC zog) |
| Precision Lub Sij Hawm Raws Cai Txheej Txheem Ports | |
| Lub sijhawm ntawm hnub - Rs-232 (Eia-23) | 1XRJ-45 |
| Khoom moos | 1XRJ-48 |
| 10-MHz Timing Connector (GNSS) | 1xinput (coax) 1xoutput (coax) |
| Cov mem tes ib zaug txuas (1-pps) | 1xinput (coax) 1xoutput (coax) |
| Ib puag ncig thiab kev tswj xyuas | |
| Auingic suab nrov | 69 DBA ntawm cov kiv cua ib txwm ceev, 87 DBA ntawm Kev Kub Kawg |
| Airflow / cua txias | Pem hauv ntej rov qab |
| Kev khiav hauj lwm kub | 32 Qib Xaus rau 104 Degree F (0 Devree rau 40 Degree C) |
| Kev khiav hauj lwm vaum | 5% rau 90% tsis -} kev ua yeeb yam |
| Lub sijhawm ua tiav ntawm kev swb (MTBF) | 111,626 teev (12.75 xyoo) |
| FCC Kev Sib Tw | Chav Kawm A |
| RoHS Ua Raws | RoHS 2 |
| Nwg Ua Raws | Tsim rau Nuv Theem 3 |
| Ua yeeb yam | |
| Firewall (Imix) kev tawm tsam hauv Gbps2 | 400 |
| Firewall BRUTPUT (1518 B) hauv Gbps2 | 400 |
| Ipsec VPN kev swb (IMIX) hauv Gbps2 | 44 |
| Ipsec vpn kev tawm mus (1400 b) hauv Gbps2 | 71 |
| Daim Ntawv Thov Kev Nyab Xeeb Kev Ruaj Ntseg (TPS ## / CPS **) hauv GBPS3 | 92/41 |
| Tom ntej no -}} Nplooj Firewall (TPS ## / CPS **) hauv Gbps4 | 90/21 |
| Kev ruaj ntseg web nkag firewall (CPS **) hauv Gbps5 | 19 |
| Kev hem hem (CPS **) GBPS6 | 10.5 |
| Sib txuas rau ib ob (64B) | 570,000 |
| SSL kev sib txuas rau ib ob | 16,000 |
| Qhov ntau tshaj plaws concrentations (ipv4 lossis ipv6) | 60 lab |
| Route Rooj Loj (tav / Fib / FIB) (IPV4) | 4 lab / 1.2 lab |
| Ipsec vpn ntau | 7,500 |
Cim npe nrov: SRX4600-AC, cov chaw muag khoom, lag luam Wholesale, pheej yig, nqe
Tsis muaj
