SRX345 Firewall Overview

The SRX345 Firewall consolidates security, routing, switching, and WAN interfaces for midsize distributed enterprises. With advanced threat mitigation capabilities, the services gateway provides cost-effective and secure connectivity across distributed enterprises. The services gateway simplifies network complexity, protects and prioritizes network resources, and improves user and application experience.

The SRX345 Firewall has a capacity of 5 gigabits per second (Gbps) and is 1 rack unit (U) tall. The services gateway has eight 1 G Ethernet ports, eight 1 G SFP ports, one management port, 4 GB of DRAM memory, 8 GB of flash memory, and four Mini-Physical Interface Module (Mini-PIM) slots. The chassis installs in standard 800–mm (or larger) enclosed cabinets, 19 in. equipment racks, or telecommunications open-frame racks.

Figure 1 shows the SRX345 Firewall.

Figure 1: SRX345 Firewall

The SRX345 Firewall runs the Junos operating system (Junos OS). The following are a few of the features supported:

• Firewall support with key features such as VPN

• Intrusion Detection and Prevention (IDP), AppSecure, and Content Security

• High availability

• QoS

• MPLS

• Juniper ATP Cloud

• MACsec support on all the ports (starting in Junos OS Release 15.1X49-D100)

• LTE support (starting in Junos OS Release 15.1X49-D100)

• Zero Touch Provisioning (starting in Junos OS Release 15.1X49-D100)

For more information about the features supported on SRX345 Services Gateways, see Feature Explorer.

You can manage the SRX345 Firewall by using the same interfaces that you use for managing other devices that run Junos OS—the CLI, the J-Web graphical interface, and Junos Space.

The SRX345 Firewall is available with a single AC power supply (Junos OS Release 15.1X49-D35 and later), dual AC power supplies (Junos OS Release 15.1X49-D110 and later), or a single DC power supply (Junos OS Release 17.4R1 and later).

Field-replaceable units (FRUs) are components that you can replace at your site. The Mini-Physical Interface Module (MPIM) is the only FRU on the SRX345 Firewall.

The Mini-PIMs are not hot-swappable. You must power off the services gateway before removing or installing Mini-PIMs.

• High performance—The SRX345 supports up to 5-Gbps firewall and 800-Mbps IPsec VPN, and is suited for midsize to large distributed enterprise branch office deployments.

• Simplified deployment with minimal manual intervention—The Zero Touch Provisioning (ZTP) feature enables you to provision and configure the SRX300 line automatically, thereby reducing operational complexity and simplifying the provisioning of new sites.

• Multiple WAN connectivity options—The SRX345 supports multiple options such as Ethernet, serial, T1/E1, VDSL2, and 3G/4G LTE wireless for WAN or Internet connectivity to link sites.

• Threat protection—The SRX300 line supports IPsec VPN, Media Access Control Security (MACsec), Juniper Juniper Advanced Threat Prevention Cloud, and Trusted Platform Module (TPM) to protect against potential vulnerabilities.