Call a Specialist Today! 888-785-4380
Free Shipping! Free Shipping!

Juniper Networks SRX4200 Services Gateway
Defending the Enterprise Campus, Data Center Edge, and Data Center Core


Juniper Networks SRX4200 Services Gateway

Juniper Networks Products
SRX Series Services Gateways
USA: FREE Ground ShippingSRX4200 with Two AC PSU, RMK (Hardware Only)
Require SRX4200-JSB software to complete system
#SRX4200-AC
List Price: $40,000.00
Our Price: $32,200.00
USA: FREE Ground ShippingSRX4200 with Two DC PSU, RMK (Hardware Only)
Require SRX4200-JSB software to complete system
#SRX4200-DC
List Price: $40,000.00
Our Price: $32,200.00

More pricing below, click here!

SRX4200 Overview:

The SRX4100 and SRX4200 Services Gateways offer outstanding protection, performance, scalability, availability, and integrated security services. Designed for high-performance security services architectures and seamless integration of networking and security in a single platform, the SRX4100 and SRX4200 are best suited for enterprise data centers, campuses, and regional headquarters, with a focus on application visibility and control, intrusion prevention, advanced threat protection, autnentication, confidentiality of information, and integrated cloud-based security. Both devices are powered by Junos OS, the industry-leading operating system that keeps the world’s largest mission-critical enterprise networks secure.

Product Description

The Juniper Networks SRX4100 and SRX4200 Services Gateways are high-performance, next-generation firewalls and hardware-accelerated security services gateways that protect mission-critical data center networks, enterprise campuses, and regional headquarters. The SRX4100 and SRX4200 not only provide best-in-class security and advanced threat mitigation capabilities, they also integrate carrier-class routing in the same platform.

The SRX4100 and SRX4200 deliver a next-generation security solution that supports the changing needs of cloud-enabled enterprise networks. Whether rolling out new services in an enterprise data center or campus, connecting to the cloud, complying with industry standards, or achieving operational efficiency, the SRX4100 and SRX4200 help organizations realize their business objectives while providing scalability, ease of management, secure connectivity, and advanced threat mitigation capabilities. The SRX4100 and SRX4200 protect key corporate assets as next-generation firewalls, act as enforcement points for cloud-based security solutions, and provide application visibility and control to improve the user and application experience.

Architecture and Key Components:

The SRX4100 and SRX4200 hardware and software architecture provides cost-effective security performance in a small 1 U form factor. Purpose-built to protect up to 40 Gbps Internet Mix (IMIX) firewall throughput network environments, the SRX4100 and SRX4200 incorporate multiple security services and networking functions on top of the industryleading Juniper Networks Junos operating system. The SRX4100 supports up to 20 Gbps (IMIX) of firewall performance, 7 Gbps of next-generation firewall (application security, intrusion prevention, enhanced URL filtering, and logging), and 5 Gbps of IPsec VPN in data center, enterprise campus, and regional headquarter deployments with IMIX traffic patterns. The SRX4200 supports up to 40 Gbps of firewall performance, 15 Gbps of nextgeneration firewall, and up to 9.6 Gbps of IPsec VPN in data center, enterprise campus, and regional headquarter deployments with IMIX traffic patterns.

Model: SRX4100 SRX4200
Statistics1
Firewall throughput 40 Gbps 80 Gbps
Firewall throughput—IMIX 20 Gbps 40 Gbps
Firewall throughput with application security 18 Gbps 35 Gbps
IPsec VPN throughput—IMIX 5 Gbps 9.6 Gbps
Intrusion prevention 10 Gbps 20 Gbps
NGFW2 throughput 7 Gbps 15 Gbps
Connections per second 175,000 350,000
Maximum session 5 million 10 million

The SRX4100 and SRX4200 recognize more than 3,500 applications and nested applications in plain-text or SSLencrypted transactions. The firewalls also integrate with Microsoft Active Directory and combine user information with application data to provide network-wide application and user visibility and control.

1 Performance, capacity and features listed are based on systems running Junos OS 15.1x49 and are measured under ideal testing conditions. Actual results may vary based on Junos OS releases and by deployments.
2 Next-generation firewall (NGFW) is a combination of advanced features such as application security, IPS, and URLF in addition to the foundational services such as logging and stateful firewall.

Features & Benefits:


Business Requirement Feature/Solution SRX4100/SRX4200 Advantages
High performance Up to 80 Gbps of firewall throughput (up to 40 Gbps of IMIX firewall throughput)
  • Best suited for enterprise campus and data center edge deployments
  • Ideal for secure router deployments at the head office
  • Addresses future needs for scale and feature capacity
High-quality end-user experience Application visibility and control
  • Detects 3,500+ L3-L7 applications, including Web 2.0
  • Controls and prioritizes traffic based on application and use role
  • Inspects and detects applications inside SSL-encrypted traffic
Advanced threat protection Intrusion prevention system (IPS), antivirus, antispam, Spotlight Secure, Sky Advanced Threat Prevention
  • Provides real-time updates to IPS signatures and protects against exploits
  • Implements industry-leading antivirus and URL filtering
  • Delivers open threat intelligence platform that integrates with thirdparty feeds
  • Protects against zero-day attacks
Professional-grade networking services Routing, secure wire
  • Supports carrier-class advanced routing and quality of service (QoS)
Highly secure IPsec VPN
  • Provides high-performance IPsec VPN with dedicated crypto engine
  • Offers diverse VPN options for various network designs, including remote access and dynamic site-to-site communications
  • Simplifies large VPN deployments with auto VPN
  • Includes hardware-based crypto acceleration
Highly reliable Chassis cluster, redundant power supplies
  • Provides stateful configuration and session synchronization
  • Supports active/active and active/backup deployment scenarios
  • Offers highly available hardware with dual power supply unit (PSU)
  • Delivers dedicated control and fabric link with seamless high availability
Easy to manage and scale On-box GUI, Security Director
  • Enables centralized management for auto-provisioning, firewall policy management, Network Address Translation (NAT), and IPsec VPN deployments
  • Includes simple, easy-to-use on-box GUI for local management
Low TCO Junos OS
  • Integrates routing and security in a single device
  • Reduces OpEx with Junos OS automation capabilities

Technical Specifications:


Model: SRX4100 SRX4200
Connectivity
Total onboard ports 8x1GbE/10GbE 8x1GbE/10GbE
Onboard small form-factor pluggable plus (SFP+) transceiver ports 8x1GbE/10GbE 8x1GbE/10GbE
Out-of-Band (OOB) management ports 1x1GbE 1x1GbE
Dedicated high availability (HA) ports 2x1GbE/10GbE (SFP/SFP+) 2x1GbE/10GbE (SFP/SFP+)
Console (RJ-45) 1 1
USB 2.0 ports (type A) 2 2
Memory and Storage
System memory (RAM) 64 GB 64 GB
Secondary storage (SSD) 240 GB with 1+1 RAID 240 GB with 1+1 RAID
Dimensions and Power SRX4100 SRX4200
Form factor 1 U 1 U
Size (WxHxD) 17.48 x 1.7.x.25 in
(44.39 x 4.31 x 63.5 cm)
17.48 x 1.7.x.25 in
(44.39 x 4.31 x 63.5 cm)
Weight (device and PSU) Chassis with two AC power supplies: 29 lb (13.15 kg)
Chassis with two DC power supplies: 28.9 lb (13.06 kg)
Chassis with package for shipping: 47.5 lb (21.54 kg)
Chassis with two AC power supplies: 29 lb (13.15 kg)
Chassis with two DC power supplies: 28.9 lb (13.06 kg)
Chassis with package for shipping: 47.5 lb (21.54 kg)
Redundant PSU 1+1 1+1
Power supply 2x 650 W redundant AC-DC/DC-DC PSU 2x 650 W redundant AC-DC/DC-DC PSU
Average power consumption 200 W 200 W
Average heat dissipation 685 BTU / hour 685 BTU / hour
Maximum current consumption 4A (for 110 V AC power)
2A (for 220 V AC power)
9A (for -48 V DC power)
4A (for 110 V AC power)
2A (for 220 V AC power)
9A (for -48 V DC power)
Maximum inrush current 50 A by 1 AC cycle 50 A by 1 AC cycle
Acoustic noise level 70 dBA 70 dBA
Airflow/cooling Front to back Front to back
Environmental, Compliance, and Safety Certification SRX4100 SRX4200
Operating temperature 32° to 104° F (0° to 40° C)
Operating humidity 5% to 90% noncondensing
Meantime between failures (MTBF) 12 years (105,120 hours) 12 years (105,120 hours)
FCC classification Class A Class A
RoHS compliance RoHS 2 RoHS 2
Performance and Scale SRX4100 SRX4200
Routing/firewall (64 B packet size) throughput Gbps1 5 10
Routing/firewall (IMIX packet size) throughput Gbps1 20 40
Routing/firewall (1,518 B packet size) throughput Gbps1 40 80
IPsec VPN (IMIX packet size) Gbps1 5 9.6
IPsec VPN (1,400 B packet size) Gbps1 10 20
Application visibility and control in Gbps2 18 35
Recommended IPS in Gbps2 10 20
Next-generation firewall in Gbps2 7 15
Connections per second (CPS) 175,000 300,000
Maximum security policies 60,000 60,000
Maximum concurrent sessions (IPv4 or IPv6) 5 million 10 million
Route table size (RIB/FIB) (IPv4 or IPv6) 2 million / 2 million 2 million / 2 million

Additional Specification Features:

Firewall Services

  • Stateful and stateless firewall
  • Zone-based firewall
  • Screens and distributed denial of service (DDoS) protection
  • Protection from protocol and traffic anomaly
  • Unified Access Control (UAC)

Network Address Translation (NAT)

  • Source NAT with Port Address Translation (PAT)
  • Bidirectional 1:1 static NAT
  • Destination NAT with PAT
  • Persistent NAT
  • IPv6 address translation

VPN Features

  • Tunnels: Generic routing encapsulation (GRE), IP-IP, IPsec
  • Site-site IPsec VPN, auto VPN, group VPN
  • IPsec crypto algorithms: Data Encryption Standard (DES), triple DES (3DES), Advanced Encryption Standard (AES-256)
    • IPsec authentication algorithms: MD5, SHA-1, SHA-128, SHA-256
    • Pre-shared key and public key infrastructure (PKI) (X.509)
    • Perfect forward secrecy, anti-reply
    • IPv4 and IPv6 IPsec VPN
    • Multi-proxy ID for site-site VPN
    • Internet Key Exchange (IKEv1, IKEv2), NAT-T
    • Virtual router and quality-of-service (QoS) aware
  • Standard-based dead peer detection (DPD) support

High Availability Features

  • Virtual Router Redundancy Protocol (VRRP) – IPv4 and IPv6
  • Stateful high availability
    • Dual box clustering
    • Active/passive
    • Active/active
    • Configuration synchronization
    • Firewall session synchronization
    • Device/link detection
    • In-Band Cluster Upgrade (ICU)
  • IP monitoring with route and interface failover

Application Security Services

  • Application visibility and control
  • Application-based firewall
  • Application QoS
  • Advanced/application policy-based routing feature (APBR)
  • User-based firewall
  • Intrusion prevention system
  • Antivirus
  • Antispam
  • Category/reputation-based URL filtering
  • SSL proxy/inspection

Threat Defense and Intelligence Services

  • Spotlight Secure threat intelligence
  • Protection from botnets (command and control)
  • Adaptive enforcement based on GeoIP
  • Sky Advanced Threat Prevention to detect and block zeroday attacks

Routing Protocols

  • IPv4, IPv6, static routes, RIP v1/v2
  • OSPF/OSPF v3
  • BGP with route reflector
  • IS-IS
  • Multicast: Internet Group Management Protocol (IGMP) v1/v2; Protocol Independent Multicast (PIM) sparse mode (SM)/dense mode (DM)/source-specific multicast (SSM); Session Description Protocol (SDP); Distance Vector Multicast Routing Protocol (DVMRP); Multicast Source Discovery Protocol (MSDP); reverse path forwarding (RPF)
  • Encapsulation: VLAN, Point-to-Point Protocol over Ethernet (PPPoE)
  • Virtual routers
  • Policy-based routing, source-based routing
  • Equal-cost multipath (ECMP)
QoS Features
  • Support for 802.1p, DiffServ code point (DSCP), EXP
  • Classification based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multifield filters
  • Marking, policing, and shaping
  • Classification and scheduling
  • Weighted random early detection (WRED)
  • Guaranteed and maximum bandwidth
  • Ingress traffic policing
  • Virtual channels

Network Services

  • Dynamic Host Configuration Protocol (DHCP) client/server/ relay
  • Domain Name System (DNS) proxy, dynamic DNS (DDNS)
  • Juniper real-time performance monitoring (RPM) and IP monitoring
  • Juniper flow monitoring (J-Flow)

Advanced Routing Services

  • Packet Mode
  • MPLS (RSVP, LDP)
  • Circuit cross-connect (CCC), translational cross-connect (TCC)
  • L2/L2 MPLS VPN, pseudowires
  • Virtual private LAN service (VPLS), next-generation multicast VPN (NG-MVPN)
  • MPLS traffic engineering and MPLS fast reroute

Management, Automation, Logging, and Reporting

  • SSH, Telnet, SNMP
  • Smart image download
  • Juniper CLI and Web UI
  • Juniper Networks Junos Space Security Director
  • Python
  • Junos events, commit and OP scripts
  • Application and bandwidth usage reporting
  • Debug and troubleshooting tools

1 Throughput numbers based on UDP packets and RFC2544 test methodology
2 Throughput numbers based on HTTP traffic with 44 KB transaction size and up to the numbers captured here

Views:


Top Front View
Top Front View

Front View
Front View
Rear View
Rear View
Left Angle View
Left Angle View
Right Angle View
Right Angle View

Pricing Notes:

SRX Series Services Gateways
USA: FREE Ground ShippingSRX4200 with Two AC PSU, RMK (Hardware Only)
Require SRX4200-JSB software to complete system
#SRX4200-AC
List Price: $40,000.00
Our Price: $32,200.00
USA: FREE Ground ShippingSRX4200 with Two DC PSU, RMK (Hardware Only)
Require SRX4200-JSB software to complete system
#SRX4200-DC
List Price: $40,000.00
Our Price: $32,200.00
Juniper Secure Edge Software
JunOS Base software for SRX4200
#SRX4200-JSB
List Price: $46,000.00
Our Price: $37,030.00
JunOS Enhanced Software for SRX4200
#SRX4200-JSE
List Price: $66,500.00
Our Price: $53,533.00
Sky Advanced Threat Protection
1 Year Subscription for Sky Advanced Threat Protection on SRX4200
#SRX4200-ATP-1
List Price: $28,300.00
Our Price: $22,782.00
3 Year Subscription for Sky Advanced Threat Protection on SRX4200
#SRX4200-ATP-3
List Price: $72,200.00
Our Price: $58,121.00
5 Year Subscription for Sky Advanced Threat Prevention on SRX4200
#SRX4200-ATP-5
List Price: $120,300.00
Our Price: $96,842.00
AppSecure, IPS (IDP), EWF, AV and SkyATP service
1 Year Subscription for AppSecure, IPS (IDP), EWF, AV and SkyATP service on SRX4200
#SRX4200-ATP-BUN-1
List Price: $62,200.00
Our Price: $50,071.00
3 Year Subscription for AppSecure, IPS (IDP), EWF, AV and SkyATP service on SRX4200
#SRX4200-ATP-BUN-3
List Price: $158,500.00
Our Price: $127,593.00
AppSecure, IDP, EWF, AV and Anti-spam service
1 Year Subscription for AppSecure, IDP, EWF, AV and Anti-spam service on SRX4200
#SRX4200-CS-BUN-1
List Price: $47,250.00
Our Price: $38,036.00
3 Year Subscription for AppSecure, IDP, EWF, AV and Anti-spam service on SRX4200
#SRX4200-CS-BUN-3
List Price: $120,500.00
Our Price: $97,003.00
Intrusion Prevention
1 Year Subscription for Intrusion Prevention (application security included) on SRX4200
#SRX4200-IPS-1
List Price: $22,750.00
Our Price: $18,314.00
3 Year Subscription for Intrusion Prevention (application security included) on SRX4200
#SRX4200-IPS-3
List Price: $58,000.00
Our Price: $46,690.00
Juniper-Sophos Anti-Spam Service
1 Year Subscription for Juniper-Sophos Anti-spam service on SRX4200
#SRX4200-S-AS-1
List Price: $17,200.00
Our Price: $13,846.00
3 Year Subscription for Juniper-Sophos Anti-spam service on SRX4200
#SRX4200-S-AS-3
List Price: $43,900.00
Our Price: $35,340.00
Juniper-Sophos AV Service
1 Year Subscription for Juniper-Sophos AV service on SRX4200
#SRX4200-S-AV-1
List Price: $17,200.00
Our Price: $13,846.00
3 Year Subscription for Juniper-Sophos AV service on SRX4200
#SRX4200-S-AV-3
List Price: $43,900.00
Our Price: $35,340.00
Sky ATP Threat Intelligence Feeds Only (no file processing)
1 Year Subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on SRX4200
#SRX4200-THRTFEED-1
List Price: $9,900.00
Our Price: $7,970.00
3 Year subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on SRX4200
#SRX4200-THRTFEED-3
List Price: $25,200.00
Our Price: $20,286.00
5 Year subscription to Sky ATP Threat Intelligence Feeds only (no file processing) on SRX4200
#SRX4200-THRTFEED-5
List Price: $42,100.00
Our Price: $33,891.00
Juniper-Websense Enhanced Web Filtering Service
1 Year Subscription for Juniper-Websense Enhanced Web Filtering service on SRX4200
#SRX4200-W-EWF-1
List Price: $21,500.00
Our Price: $17,308.00
3 Year Subscription for Juniper-Websense Enhanced Web Filtering service on SRX4200
#SRX4200-W-EWF-3
List Price: $54,800.00
Our Price: $44,114.00
Juniper Care
Juniper Care CorePlus Support for SRX4200-AC/SRX4200-DC
(SOFTWARE SUPPORT IS NOT INCLUDED, must be purchased separately)
#SVC-CP-SRX4200HW
List Price: $2,160.00
Our Price: $2,062.00
Juniper Care NextDay Onsite Support for SRX4200-AC/SRX4200-DC
(SOFTWARE SUPPORT IS NOT INCLUDED, must be purchased separately)
#SVC-NDCE-SRX4200HW
List Price: $3,360.00
Our Price: $3,207.00
Juniper Care NextDay Support for SRX4200-AC/SRX4200-DC
(SOFTWARE SUPPORT IS NOT INCLUDED, must be purchased separately)
#SVC-ND-SRX4200HW
List Price: $2,400.00
Our Price: $2,291.00
Juniper Care SameDay Onsite Support for SRX4200-AC/SRX4200-DC
(SOFTWARE SUPPORT IS NOT INCLUDED, must be purchased separately)
#SVC-SDCE-SRX4200HW
List Price: $6,000.00
Our Price: $5,727.00
Juniper Care SameDay Support for SRX4200-AC/SRX4200-DC
(SOFTWARE SUPPORT IS NOT INCLUDED, must be purchased separately)
#SVC-SD-SRX4200HW
List Price: $4,560.00
Our Price: $4,353.00
Accessories
Spare: SRX4100/SRX4200 rack mount kit with rails and mounting ears
#SRX4200-RMK
List Price: $350.00
Our Price: $282.00