| Specifications |
SRX550-645AP-M-TAA |
| System memory (DRAM) |
4 GB |
| Memory slots |
2 DIMM |
| Flash Memory |
8 GB, CF internal |
| USB port for external storage |
Yes |
| Firewall performance (max) |
5.5 Gbps |
| AES256+SHA-1 / 3DES+SHA-1 VPN performance |
1.0 Gbps |
| New sessions/second (sustained, TCP, 3-way) |
27,000 |
| Firewall performance (large packets) |
7 Gbps |
| Firewall performance (IMIX) |
2 Gbps |
| Firewall + routing pps (64 Byte) |
700 Kpps |
| Firewall performance (HTTP) |
2 Gbps |
| IPsec VPN throughput (large packets) |
1 Gbps |
| IPsec VPN tunnels |
2000 |
| Application firewall |
2.0 Gbps |
| Intrusion prevention system (IPS) |
800 Mbps |
| Antivirus |
300 Mbps (Sophos antivirus) |
| Connections per second |
27,000 |
| Maximum concurrent sessions |
375,000 |
| Maximum security policies |
8000 |
| Maximum users supported |
Unrestricted |
| Route table size (RIB/FIB) (IPv4 or IPv6) |
1.5 million/750,000 |
| NAT rules |
6144 |
| MAC table size |
15,000 |
| Number of remote access/SSL VPN (concurrent) users |
500 |
| GRE tunnels |
1500 |
| Maximum number of security zones |
96 |
| Maximum number of virtual routers |
128 |
| Maximum number of VLANs |
3967 |
| AppID sessions |
65,000 |
| IPS sessions |
64,000 |
| URL filtering (URLF) sessions |
64,000 |
| Software Specifications |
| Routing Protocols |
IPv4, IPv6, ISO, Connectionless Network Service (CLNS)
Static routes
RIP v1/v2
OSPF/OSPF v3
BGP with route reflector
IS-IS
Multicast: Internet Group Management Protocol (IGMP) v1/v2, Protocol Independent Multicast (PIM) sparse mode (SM)/dense mode (DM)/source-specific multicast (SSM), Session Description Protocol (SDP), Distance Vector Multicast Routing Protocol (DVMRP), Multicast Source Discovery Protocol (MSDP), Reverse Path Forwarding (RPF)
Encapsulation: VLAN, Point-to-Point Protocol (PPP), Frame Relay, High-Level Data Link Control (HDLC), serial, Multilink Point-to-Point Protocol (MLPPP), Multilink Frame Relay (MLFR), and Point-to-Point Protocol over Ethernet (PPPoE)
Virtual routers
Policy-based routing, source-based routing
Equal-cost multipath (ECMP) |
| QoS Features |
Support for 802.1p, DiffServ code point (DSCP), EXP
Classification based on VLAN, data-link connection identifier (DLCI), interface, bundles, or multifield filters
Marking, policing, and shaping
Classification and scheduling
Weighted random early detection (WRED)
Guaranteed and maximum bandwidth
Ingress traffic policing
Virtual channels
Hierarchical shaping and policing |
| Switching Features |
ASIC-based Layer 2 forwarding
MAC address learning
VLAN addressing and integrated routing and bridging (IRB) support
Link aggregation and LACP
Link Layer Discovery Protocol (LLDP) and Link Layer Discovery Protocol–Media Endpoint Discovery (LLDP-MED)
Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), Multiple Spanning Tree Protocol (MSTP)
Multiple VLAN Registration Protocol (MVRP)
802.1X authentication |
| Firewall Services |
Stateful and stateless firewall
Zone-based firewall
Screens and distributed denial of service (DDoS) protection
Protection from protocol and traffic anomaly
Integration with Pulse Unified Access Control (UAC)
Integration with Aruba Clear Pass Policy Manager
User role-based firewall
SSL Inspection (forward-proxy) |
| Network Address Translation (NAT) |
Source NAT with Port Address Translation (PAT)
Bidirectional 1:1 static NAT
Destination NAT with PAT
Persistent NAT
IPv6 address translation |
| VPN Features |
Tunnels: Site-to-Site, Hub and Spoke, Dynamic Endpoint, AutoVPN, ADVPN, Group VPN (IPv4/IPv6/Dual Stack)
Juniper Secure Connect: Remote access/SSL VPN
Configuration payload: Yes
IKE Encryption algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, SuiteB
IKE authentication algorithms: MD5, SHA-1, SHA-128, SHA-256, SHA-384
Authentication: Pre-shared key and public key infrastructure (PKI) (X.509)
IPsec (Internet Protocol Security): Authentication Header (AH)/Encapsulating Security Payload (ESP) protocol
IPsec Authentication Algorithms: hmac-md5, hmac-sha-196, hmac-sha-256
IPsec Encryption Algorithms: Prime, DES-CBC, 3DES-CBC, AEC-CBC, AES-GCM, SuiteB
Perfect forward secrecy, anti-reply
Internet Key Exchange: IKEv1, IKEv2
Monitoring: Standard-based dead peer detection (DPD) support, VPN monitoring
VPNs GRE, IP-in-IP, and MPLS |
| Network Services |
Dynamic Host Configuration Protocol (DHCP) client/server/relay
Domain Name System (DNS) proxy, dynamic DNS (DDNS)
Juniper real-time performance monitoring (RPM) and IP-monitoring
Juniper flow monitoring (J-Flow)
Bidirectional Forwarding Detection (BFD)
Two-Way Active Measurement Protocol (TWAMP)
IEEE 802.3ah Link Fault Management (LFM)
IEEE 802.1ag Connectivity Fault Management (CFM) |
| High Availability Features |
Virtual Router Redundancy Protocol (VRRP)
Stateful high availability
Dual box clustering
Active/passive
Active/active
Configuration synchronization
Firewall session synchronization
Device/link detection
In-Band Cluster Upgrade (ICU)
Dial on-demand backup interfaces
IP monitoring with route and interface failover |
| Management, Automation, Logging, and Reporting |
SSH, Telnet, SNMP
Smart image download
Juniper CLI and Web UI
Mist AI
Simplified management
WAN Assurance
Junos Space and Security Director
Python, PyEz, and Ansible modules
Junos OS event, commit, and OP script
Application and bandwidth usage reporting
Auto installation
Debug and troubleshooting tools
ZTP with Contrail Service Orchestration |
| Advanced Routing Services |
Packet mode
MPLS (RSVP, LDP)
Circuit cross-connect (CCC), translational cross-connect (TCC)
L2/L3 MPLS VPN, pseudowires
Virtual private LAN service (VPLS), next-generation multicast VPN (NG-MVPN)
MPLS traffic engineering and MPLS fast reroute |
| Application Security Services |
Application visibility and control
Application-based firewall
Application QoS |
| Enhanced SD-WAN Services |
Application-based advanced policy-based routing (APBR)
Application quality of experience (AppQoE)
Application-based link monitoring and switchover with AppQoE |
| Threat Defense and Intelligence Services |
Intrusion prevention system (IPS)
Antivirus
Antispam
Category/reputation-based URL filtering
Protection from botnets (command and control)
Adaptive enforcement based on GeoIP
Juniper Advanced Threat Prevention to detect and block zero-day attacks
Adaptive Threat Profiling
Encrypted Traffic Insights
Juniper SecIntel to provide threat intelligence |
| Operating temperature |
32° to 104° F (0° to 40° C) |
| Storage temperature |
4° to 158° F, (-20° to 70° C) |
| Relative humidity operating |
10% to 90% (noncondensing) |
| Relative humidity non-operating |
5% to 95% (noncondensing) |
| Meantime between failures (MTBF) |
9.6 years with redundant power |
| FCC classification |
Class A |
| RoHS compliance |
Yes |
Add A Review
Your email address will not be published. Required fields are marked
Your Rating