Juniper SRX1500 Firewall

Firewall Services

• Stateful and stateless firewall
• Zone-based firewall
• Screens and distributed denial of service (DDoS) protection
• Protection from protocol and traffic anomalies
• Integration with Pulse Unified Access Control (UAC)
• Integration with Aruba Clear Pass Policy Manager
• User role-based firewall
• SSL Inspection

Network Address Translation (NAT)

• Source NAT with Port Address Translation (PAT)
• Bidirectional 1:1 static NAT
• Destination NAT with PAT
• Persistent NAT
• IPv6 address translation

VPN Features

• Tunnels: Site-to-Site, Hub and Spoke, Dynamic Endpoint, AutoVPN, ADVPN, Group VPN (IPv4/IPv6/Dual Stack)
• Juniper Secure Connect: Remote access/SSL VPN
• Configuration payload: Yes
• IKE Encryption algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, SuiteB
• IKE authentication algorithms: MD5, SHA-1, SHA-128, SHA-256, SHA-384
• Authentication: Pre-shared key and public key infrastructure (PKI) (X.509)
• IPsec (Internet Protocol Security): Authentication Header (AH)/Encapsulating Security Payload (ESP) protocol
• IPsec Authentication Algorithms: hmac-md5, hmac-sha-196
• IPsec Encryption Algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, SuiteB
• Perfect forward secrecy, anti-reply
• Internet Key Exchange: IKEv1, IKEv2
• Monitoring: Standard-based dead peer detection (DPD) support, VPN monitoring
• VPNs GRE, IP-in-IP, and MPLS

High Availability Features

• Virtual Router Redundancy Protocol (VRRP)
• Stateful high availability
  • Dual box clustering
  • Active/passive
  • Active/active
  • Configuration synchronization
  • Firewall session synchronization
  • Device/link detection
  • In-Service Software Upgrade (ISSU)
• IP monitoring with route and interface failover

Application Security Services

• Application visibility and control
• Application-based firewall
• Application QoS
• Advanced/application policy-based routing (APBR)
• Application Quality of Experience (AppQoE)
• Application-based multipath routing

Threat Defense and Intelligence Services

• Intrusion prevention
• Antivirus
• Antispam
• Category/reputation-based URL filtering
• Protection from botnets (command and control)
• Adaptive enforcement based on GeoIP
• Juniper Advanced Threat Prevention, a cloud-based SaaS offering, to detect and block zero-day attacks
• Juniper ATP Appliance, a distributed, on-premises advanced threat prevention solution to detect and block zero-day attacks
• Adaptive Threat Profiling
• Encrypted Traffic Insights
• SecIntel to provide threat intelligence

 Routing Protocols

• IPv4, IPv6
• Static routes
• RIP v1/v2
• OSPF/OSPF v3
• BGP with Route Reflector
• IS-IS
• Multicast: Internet Group Management Protocol (IGMP) v1/v2; Protocol Independent Multicast (PIM) sparse mode (SM)/dense mode (DM)/source-specific multicast (SSM); Session Description Protocol (SDP); Distance Vector Multicast Routing Protocol (DVMRP); Multicast Source Discovery Protocol (MSDP); Reverse Path Forwarding (RPF)
• Encapsulation: VLAN, Point-to-Point Protocol over Ethernet (PPPoE)
• Virtual routers
• Policy-based routing, source-based routing
• Equal-cost multipath (ECMP)

QoS Features

• Support for 802.1p, DiffServ code point (DSCP), EXP
• Classification based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multifield filters
• Marking, policing, and shaping
• Classification and scheduling
• Weighted random early detection (WRED)
• Guaranteed and maximum bandwidth
• Ingress traffic policing
• Virtual channels
• Hierarchical shaping and policing

Switching Features

• ASIC-based Layer 2 forwarding
• MAC address learning
• VLAN addressing and integrated routing and bridging (IRB) support
• Link aggregation and LACP
• LLDP and LLDP-MED
• STP, RSTP, MSTP
• MVRP
• 1X authentication

Network Services

• Dynamic Host Configuration Protocol (DHCP) client/server/relay
• Domain Name System (DNS) proxy, dynamic DNS (DDNS)
• Juniper real-time performance monitoring (RPM) and IP monitoring
• Juniper flow monitoring (J-Flow)
• Bidirectional Forwarding Detection (BFD)
• Two-Way Active Measurement Protocol (TWAMP)
• IEEE 802.3ah Link Fault Management (LFM)
• IEEE 802.1ag Connectivity Fault Management (CFM)

Advanced Routing Services

• Packet mode
• MPLS (RSVP, LDP)
• Circuit cross-connect (CCC), translational cross-connect (TCC)
• L2/L2 MPLS VPN, pseudo-wires
• Virtual private LAN service (VPLS), next-generation multicast VPN (NG-MVPN)
• MPLS traffic engineering and MPLS fast reroute

Management, Automation, Logging, and Reporting

• SSH, Telnet, SNMP
• Smart image download
• Juniper CLI and Web UI
• Juniper Networks Junos Space and Security Director
• Python
• Junos OS event, commit and OP scripts
• Application and bandwidth usage reporting
• Auto installation
• Debug and troubleshooting tools

Hardware Specifications