SRX300 Line of Firewalls for the Branch Datasheet

The SRX300 line of firewalls consists of secure SD-WAN routers that bring high performance and proven deployment capabilities to enterprises that need to build a worldwide network of thousands of remote sites. WAN or Internet connectivity and Wi-Fi module options include:

• Ethernet, T1/E1, ADSL2/2+, and VDSL
• 3G/4G LTE wireless
• 802.11ac Wave 2 Wi-Fi

The SRX300 line offers a comprehensive suite of application security services, threat defenses and intelligence services. The services include intrusion prevention system (IPS), application security user role-based firewall controls, and cloud-based antivirus, anti-spam, and enhanced Web filtering, protecting networks from the latest content-borne threats. Integrated threat intelligence via Juniper Networks SecIntel offering adaptive threat protection against Command and Control (C&C)-related botnets and policy enforcement based on GeoIP. Customers can also leverage their custom and third-party feeds to protect their networks from advanced malware and other threats. Integrating the Juniper Networks Advanced Threat Protection solution, the SRX300 line detects and enforces automated protection against known malware and zero-day threats with a very high degree of accuracy.

As Juniper's simple and seamless management experience, Security Director Cloud is delivered in a single UI to connect customers' current deployments with their future architectural rollouts. Management is at the center of the Juniper Connected Security strategy and helps organizations secure every point of connection on their network to safeguard users, applications, and infrastructure.

Security Director Cloud enables organizations to secure their architecture with consistent security policies across any environment—on-premises, cloud-based, cloud-delivered, and hybrid—and expands zero trust to all parts of the network from the edge into the data center and to the applications and microservices. With Security Director Cloud, organizations have unbroken visibility, policy configuration, administration, and collective threat intelligence all in one place.

Juniper meets customers where they are on their journey, helps them leverage their existing investments, and empowers them to transition to their preferred architecture at the best pace for business by automating their transition with Security Director Cloud.

Secure the remote workforce anywhere with the fast, reliable, and secure access they need. Juniper Secure Edge delivers full-stack Security Service Edge (SSE) capabilities, including FWaaS, SWG, CASB with DLP, ZTNA, and advanced threat protection. It helps organizations protect access to web, SaaS, and on-premises applications and keep users secure wherever they are located.

Juniper Secure Edge, managed by Security Director Cloud, uses a single policy framework that enables security policies to be created once and applied anywhere and follows users, devices, and applications wherever they go. Customers don't have to start from scratch when adopting cloud-delivered security. With our three-click wizard, customers can easily leverage existing campus edge policies and translate them into an SSE policy. Because it uses a single policy framework regardless of the deployment model, Secure Edge migrates existing security policies from traditional deployments to its cloud-delivered model in clicks, reducing misconfigurations and risk. 

Whether securing remote users, campus and branch locations, private cloud, public cloud, or hybrid cloud data centers, Juniper provides unified management and unbroken visibility across all architectures. This makes it easy for ops teams to easily and effectively bridge their current investments with their future architectural goals, including SASE. 

Juniper has been consistently validated by multiple third-party tests as the most effective security technology on the market for the past three years, with 100% security efficacy across all use cases.

Mist WAN Assurance is a cloud service that brings AI-powered automation and service levels to Juniper SRX Series Firewalls, complementing the Juniper Secure SD-WAN solution. Mist WAN Assurance transforms IT operations from reactive troubleshooting to proactive remediation, turning insights into actions and delivering operational simplicity with seamless integration into existing deployments.

• SRX Series firewalls, deployed as secure SD-WAN edge devices, deliver the rich Junos streaming telemetry that provides the insights needed for WAN health metrics and anomaly detection. This data is leveraged within the Mist Cloud and AI engine, driving simpler operations, reducing mean time to repair (MTTR) and providing greater visibility into end-user experiences.
• Insights derived from SRX Series SD-WAN gateway telemetry data allows WAN Assurance to compute unique “User Minutes” that indicate whether users are having a good experience.
• The Marvis assistant for WAN allows you to ask direct questions like “Why is my Zoom call bad?” and provides complete insights, correlation, and actions.
• Marvis Actions identifies and summarizes issues such as application latency conditions, congested WAN circuits, or negotiation mismatches.

The SRX300 line delivers fully automated SD-WAN to both enterprises and service providers.

• A Zero-Touch Provisioning (ZTP) feature simplifies branch network connectivity for initial deployment and ongoing management.
• SRX300 firewalls offer best-in-class secure connectivity.
• The SRX300 firewalls efficiently utilize multiple links and load balance traffic across the enterprise WAN, blending traditional MPLS with other connectivity options such as broadband internet, leased lines, 4G/LTE, and more.
• Policy- and application-based forwarding capabilities enforce business rules created by the enterprise to steer application traffic towards a preferred path.

SRX300 Firewalls run the Junos operating system, a proven, carrier-hardened OS that powers the world's top 100 service provider networks.

The rigorously tested, carrier-class, rich routing features such as IPv4/IPv6, OSPF, BGP, and multicast have been proven over 15 years of worldwide deployments.

The SRX300 line also enables agile SecOps through automation capabilities that support Zero Touch Deployment, Python scripts for orchestration, and event scripting for operational management.

• IPv4, IPv6, ISO, Connectionless Network Service (CLNS)
• Static routes
• RIP v1/v2
• OSPF/OSPF v3
• BGP with Route Reflector
• IS-IS
• Multicast: Internet Group Management Protocol (IGMP) v1/v2, Protocol Independent Multicast (PIM) sparse mode (SM)/dense mode (DM)/source-specific multicast (SSM), Session Description Protocol (SDP), Distance Vector Multicast Routing Protocol (DVMRP), Multicast Source Discovery Protocol (MSDP), Reverse Path Forwarding (RPF)
• Encapsulation: VLAN, Point-to-Point Protocol (PPP), Frame Relay, High-Level Data Link Control (HDLC), serial, Multilink Point-to-Point Protocol (MLPPP), Multilink Frame Relay (MLFR), and Point-to-Point Protocol over Ethernet (PPPoE)
• Virtual routers
• Policy-based routing, source-based routing
• Equal-cost multipath (ECMP)

• Support for 802.1p, DiffServ code point (DSCP), EXP
• Classification based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multifield filters
• Marking, policing, and shaping
• Classification and scheduling
• Weighted random early detection (WRED)
• Guaranteed and maximum bandwidth
• Ingress traffic policing
• Virtual channels
• Hierarchical shaping and policing

• ASIC-based Layer 2 Forwarding
• MAC address learning
• VLAN addressing and integrated routing and bridging (IRB) support
• Link aggregation and LACP
• LLDP and LLDP-MED
• STP, RSTP, MSTP
• MVRP
• 802.1X authentication

• Stateful and stateless firewall
• Zone-based firewall
• Screens and distributed denial of service (DDoS) protection
• Protection from protocol and traffic anomaly
• Integration with Pulse Unified Access Control (UAC)
• Integration with Aruba Clear Pass Policy Manager
• User role-based firewall
• SSL Inspection (Forward-proxy)

• Source NAT with Port Address Translation (PAT)
• Bidirectional 1:1 static NAT
• Destination NAT with PAT
• Persistent NAT
• IPv6 address translation

• Tunnels: Site-to-Site, Hub and Spoke, Dynamic Endpoint, AutoVPN, ADVPN, Group VPN (IPv4/ IPv6/ Dual Stack)
• Juniper Secure Connect: Remote access / SSL VPN
• Configuration payload: Yes
• IKE Encryption algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, SuiteB
• IKE authentication algorithms: MD5, SHA-1, SHA-128, SHA-256, SHA-384
• Authentication: Pre-shared key and public key infrastructure (PKI) (X.509)
• IPsec (Internet Protocol Security): Authentication Header (AH) / Encapsulating Security Payload (ESP) protocol
• IPsec Authentication Algorithms: hmac-md5, hmac-sha-196, hmac-sha-256
• IPsec Encryption Algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, SuiteB
• Perfect forward secrecy, anti-reply
• Internet Key Exchange: IKEv1, IKEv2
• Monitoring: Standard-based dead peer detection (DPD) support, VPN monitoring
• VPNs GRE, IP-in-IP, and MPLS

• Dynamic Host Configuration Protocol (DHCP) client/server/relay
• Domain Name System (DNS) proxy, dynamic DNS (DDNS)
• Juniper real-time performance monitoring (RPM) and IP-monitoring
• Juniper flow monitoring (J-Flow)¹
• Bidirectional Forwarding Detection (BFD)
• Two-Way Active Measurement Protocol (TWAMP)
• IEEE 802.3ah Link Fault Management (LFM)
• IEEE 802.1ag Connectivity Fault Management (CFM)

• Virtual Router Redundancy Protocol (VRRP)
• Stateful high availability
• Dual box clustering
• Active/passive
• Active/active
• Configuration synchronization
• Firewall session synchronization
• Device/link detection
• In-Band Cluster Upgrade (ICU)
• Dial on-demand backup interfaces
• IP monitoring with route and interface failover

• SSH, Telnet, SNMP
• Smart image download
• Juniper CLI and Web UI
• Mist AI
  • Simplified management
  • WAN Assurance
• Security Director
• Security Director Cloud
• Juniper Secure Edge
• Python
• Junos OS event, commit, and OP script
• Application and bandwidth usage reporting
• Auto installation
• Debug and troubleshooting tools
• Zero-Touch Provisioning with Contrail Service Orchestration
  
  

• Packet mode
• MPLS (RSVP, LDP)
• Circuit cross-connect (CCC), translational cross-connect (TCC)
• L2/L3 MPLS VPN, pseudowires
• Virtual private LAN service (VPLS), next-generation multicast VPN (NG-MVPN)
• MPLS traffic engineering and MPLS fast reroute

• Application visibility and control
• Application-based advanced policy-based routing
• Application-based advanced policy-based routing (APBR)
• Application-based link monitoring and switchover with Application quality of experience (AppQoE)

• Intrusion prevention
• Antivirus
• Antispam
• Category/reputation-based URL filtering
• Protection from botnets (command and control)
• Adaptive enforcement based on GeoIP
• Juniper Advanced Threat Prevention to detect and block zero-day attacks
• Adaptive Threat Profiling
• Encrypted Traffic Insights
• SecIntel to provide threat intelligence

Juniper Networks is the leader in performance-enabling services that are designed to accelerate, extend, and optimize your high-performance network. Our services allow you to maximize operational efficiency while reducing costs and minimizing risk, achieving a faster time to value for your network. Juniper Networks ensures operational excellence by optimizing the network to maintain required levels of performance, reliability, and availability. For more details, please visit https://www.juniper.net/us/en/products.html.

To order Juniper Networks SRX Series Firewalls, and to access software licensing information, please visit the How to Buy page at https://www.juniper.net/us/en/how-to-buy/form.html

At Juniper Networks, we are dedicated to dramatically simplifying network operations and driving superior experiences for end users. Our solutions deliver industry-leading insight, automation, security and AI to drive real business results. We believe that powering connections will bring us closer together while empowering us all to solve the world's greatest challenges of well-being, sustainability and equality. 

1000550 - 029 - EN JUNE 2023