Vology Data Systems in English  Vology Data Systems in English  Vology Data Systems in Spanish  Vology Data Systems in French  Vology Data Systems in German  Vology Data Systems in Italian 

Buy Online at Vology    search
Vology Video Tour
Request More Information
Sell to Us
Vology Data Sytems Twitter
Join Us on Google plus

SRX5600 Gateway | Juniper Networks SRX5600 Routers | Juniper SRX 5600 Firewalls

Get your Juniper Networks SRX5600 Routers with the Power of Vology.Juniper Networks SRX5600 firewall router Buy New Today! The SRX5600 is a Gateway that performs as a router and firewall!
 



The Juniper SRX5600 Services Gateways are designed for large enterprises and service provider networks. To be more specific, the SRX5600 is ideal for medium to large enterprise data centers, hosted or co-located data centers, larger server farms, secure cloud provider infrastructures, and mobile operators.

The best part about the SRX5600 router and the SRX product line is its functionality to act as a router and a firewall, cutting the cost and space of having two seperate devices. The SRX 5600 checks the validity of the traffic before its distributed in your network on a much larger scale compared to the branch SRX series.


As Juniper drives a more dynamic services architecture, the SRX5600 gateway can be populated with a flexible number of I/O cards (IOCs), network processing cards (NPCs) and service processing cards (SPCs). This allows the servicing system to be configured to support the ideal balance of performance and port density enabling each deployment of the Juniper Networks SRX Series Services Gateways to be tailored to specific network requirements.

 

SRX5600 Firewall Networking and Security Features

  • Purpose-built platform that provides unmatched performance and flexibility to protect high-speed network environments.
  • Scalable performance allows a simple and cost-effective solution to leverage new services with appropriate processing.
  • Network and system sesilience, having a carrier-class design, offers reliability constantly in-demand for any critical high-speednetwork deployments.
  • High availability can be set Active/passive and active/active HA configurations using dedicated HA-control interfaces. Highly important if one device fails.
  • Interface flexibility diegned for I/O options including on-board ports and modular CFM I/O cards which allows for scalability for required port densities.
  • Network segmentation provides security zones, VLANs, and virtual routers that allow admins to deploy security policies to isolate guests, regional servers or databases. This segmentation distributes unique security and networking policies for various internal, external, and DMZ subgroups.
  • Robust routing engine provides logical and physical separation to data and control planes. This ensures deployment of consolidated routing and security devices, as well as ensuring the security of routing infrastructure for all dedicated management environments.
  • Comprehensive threat protection is powered by services on Junos OS including multi-gigabit firewall, IPsec VPN, IPS, DoS, application security, and other networking and security services to ensure your are protected at every angle from attack.
  • Stateful GPRS inspection enables the SRX3000 line to provide stateful firewall capabilities for protecting key GPRS nodes within mobileoperator networks.
  • Role-based/identity-based access control enforcement secures access to data center resources via tight integration of Juniper Networks Unified Access Control and SRX3000 line.

 

SRX5600 Routing Traffic Inspection Methods

  • DoS detection provides protection against denial of service attacks including SYN flood, IP, ICMP, and application attacks.
  • IP spoofing detection validates IP addresses by checking allowed addresses inside and outside the network to permit only authentic traffic while blocking potentially harmful sources.
  • Traffic anomaly detection picks up patterns that will alert you in the possiblity of network attack.
  • Protocol anomaly detection is protocol usage against published RFCs is verified to detect any violations or abuse.

 

SRX5600 ISP Capabilities

  • Stateful signatures are applied only to relevant portions of the network traffic determined by the appropriate protocol context.
  • More than 65 protocol decodes are supported along with more than 500 contexts to enforce proper usage of protocols, which provides accuracy of signatures through precise contexts of protocols.
  • There are more than 6,000 signatures for identifying anomalies, attacks, spyware, and applications. This allows attacks to be quickly and accurately identified.
  • Active/active IP traffic monitoring supported.
  • Reassembly, normalization, and protocol decoding are provided.

 

SRX5600 Application Security

  • Stateful signatures are applied only to relevant portions of the network traffic determined by the appropriate protocol context.
  • With application identification and awareness, context, protocol information, and signatures are used to identify applications on any TCP or UDP port. Enable rules and policies based on application traffic rather than ports—protect or police standard applications on non-standard ports. (This also applies for applications that do not have protocol decoders.)
  • Inspection of HTTP traffic encrypted in SSL on any TCP/UDP port to protect from attacks.
  • Multi-stage detection methods used to identify and mitigate distributed denial of service attacks targeting applications.

SRX5600 Centralized Management

  • Job Manager view pending and completed jobs which simplies modifications to multiple devices.
  • The ability to schedule database backups
  • Object locking avoids incorrect configuration due to overwritten management settings.
  • Logical separation of devices, policies, reports, and other management activities are permitted for domains.
  • The ability to schedule security updates to the device automatically.
  • With role-based administration you can allow more than 100 different activities can be assigned as unique permissions for different administrators.

Your new Juniper SRX5600 router comes with a standard one-year manufacturer warranty. Contact Vology now to find out how we can help you power up with quality new Juniper SRX series routers.

 


 

Specifications

 

JUNOS Software Version Tested
  • JUNOS 10.1
Firewall Performance (MAX)
  • 60 Gbps
IPS performance (NSS 4.2.1)
  • 15 Gbps
AES256+SHA-1 / 3DES+SHA-1 VPN Performance
  • 15 Gbps
Maximum concurrent Sessions
  • 9 Million
New Sessions/Second (Sustained, TCP, 3-Way)
  • 350,000
Maximum Security Policies
  • 80,000
Maximum Users Supported
  • Unrestricted
Maximum Available Slots for IOCs
  • 5
Fixed I/O Ports
  • Not Available
CX111 3G Bridge Support
  • Not Available
Internal 3G Express Card Slot support
  • Not Available
 LAN Interface Options
  • 40 x 1 Gigabit Ethernet SFP
  • 4 x 10 Gigabit Ethernet (short reach (SR) or long reach (LR))
  • 16 x 10/100/1000 Ethernet FlexIOC
  • 4 x 10 Gigabit Ethernet (SR or LR) FlexIOC
High-availability Support
  • Active/Passive, Active/Active
  • Low impact chassis cluster
  • Interface aggregation groups across chassis cluster
Firewall Features
  • Network attack detection: Yes
  • DoS and DDoS protection: Yes
  • TCP reassembly for fragmented packet protection: Yes
  • Brute force attack mitigation: Yes
  • SYN cookie protection: Yes
  • Zone-based IP spoofing: Yes
  • Malformed packet protection: Yes
  • GPRS stateful inspection: Yes
Intrusion Detection and Prevention
  • Stateful protocol signatures: Yes
  • Attack detection mechanisms: Stateful signatures, protocol anomaly detection (zero-day coverage), application identification
  • Attack response mechanisms: Drop connection, close connection, session packet log, session summary, email, custom session
  • Attack notification mechanisms: Structured syslog
  • Worm protection: Yes
  • Application identification: Yes
  • Application Denial of Service protection: Yes
  • SSL encrypted traffic inspection: Yes
  • Simplified installation through recommended policies: Yes
  • Trojan protection: Yes
  • Spyware/adware/keylogger protection: Yes

  • Other malware protection: Yes
  • Protection against attack proliferation from infected systems: Yes
  • Reconnaissance protection: Yes
  • Request and response side attack protection: Yes
  • Compound attacks — combines stateful signatures and protocol anomalies: Yes
  • Create custom attack signatures: Yes
  • Access contexts for customization: 500+

  • Attack editing (port range, other): Yes
  • Stream signatures: Yes
  • Protocol thresholds: Yes
  • Stateful protocol signatures: Yes
  • Approximate number of attacks covered: 6,000+
  • Detailed threat descriptions and remediation/patch info: Yes
  • Create and enforce appropriate application-usage policies: Yes
  • Attacker and target audit trail and reporting: Yes
  • Deployment modes: Inline or TAP

 


 

Ordering by Part Numbers

 

Base System
SRX5600BASE-AC AC SRX 5600 chassis, includes RE, SCB, 2 AC power supplies
SRX5600BASE-DC DC SRX 5600 chassis, includes RE, SCB, 2 DC power supplies
SRX 5000 Components
SRX5K-SCB SCB SRX 5000 Switch Control Board
SRX5K-RE-13-20 SRX 5000 Routing Engine, 1.3 Ghz, 2 GB DRAM
SRX5K-SPC-2-10-40 SRX 5000 Service Processing Card
SRX5K-4XGE-XFP 4x10 Gigabit XFP Ethernet I/O Card for SRX 5000, no transceivers
SRX5K-40GE-SFP 40x1 Gigabit SFP Ethernet I/O Card for SRX 5000, no transceivers
SRX5K-FPC-IOC SRX5000 Flex IOC. Supports 2 pluggable port modules
SRX-IOC-16GE-TX SRX5000 Flex IOC 16 port 10/100/1000 Ethernet module
SRX-IOC-4XGE-XFP SRX5000 Flex IOC 4x10 Gigabit XFP Ethernet module, no transceivers
Transceivers
SRX-SFP-1GE-LH Small form factor pluggable 1000BASE-LH Gigabit Ethernet optic module
SRX-SFP-1GE-LX Small form factor pluggable 1000BASE-LX Gigabit Ethernet optic module
SRX-SFP-1GE-SX Small form factor pluggable 1000BASE-SX Gigabit Ethernet optic module
SRX-SFP-1GE-T Small form factor pluggable 1000BASE-T Gigabit Ethernet module
SRX-XFP-10GE-SR 10-Gigabit Ethernet pluggable transceiver, short reach multimode
SRX-XFP-10GE-LR 10-Gigabit Ethernet pluggable transceiver, 10 Km, single mode
SRX-XFP-10GE-ER 10-Gigabit Ethernet pluggable transceiver, 40 Km, single mode