Specification

SRX300

SRX320

SRX340

SRX345

SRX380

Common Criteria certification

NDPP, VPNEP, FWEP,

IPSEP (based on Junos

19.2R1)

NDPP, VPNEP, FWEP, IPSEP

(based on Junos 19.2R1)

NDPP, VPNEP, FWEP,

IPSEP (based on Junos

19.2R1)

NDPP, VPNEP, FWEP, IPSEP

(based on Junos 20.4R1)

NDPP, VPNEP, FWEP, IPSEP

(based on Junos 20.4R1)

2

SRX320 with PoE+ ports available as a separate SKU: SRX320-POE.

3

SRX345 with dual AC PSU model.

4

SRX320 non PoE model.

5

SRX320-POE with 6 ports PoE+ model.

6

SRX345 with DC power supply (operating temperature as per GR-63 Issue 4 2012 test criteria).

7

As per GR63 Issue 4 (2012) test criteria.

Performance and Scale

Parameter

SRX300

SRX320

SRX340

SRX345

SRX380

Routing with packet mode (64 B packet size) in Mbps8

300

300

550

750

1700

Routing with packet mode (IMIX packet size) in Mbps8

800

800

1,600

2,300

5000

Routing with packet mode (1,518 B packet size in Mbps8

1,500

1,500

3,000

5,500

10,000

Stateful firewall (64 B packet size) in Kpps8

200

200

350

550

1700

Stateful firewall (IMIX packet size) in Mbps8

600

600

1,100

1,500

6,500

Stateful firewall (1,518 B packet size) in Mbps8

1,900

1,900

4,700

5,000

20,000

IPsec VPN (IMIX packet size) in Mbps8

116

116

239

325

1400

IPsec VPN (1,400 B packet size) in Mbps8

336

336

733

977

4,400

Application visibility and control in Mbps9

500

500

1,000

1,700

6,000

Recommended IPS in Mbps9

200

200

400

600

2,000

Next-generation firewall in Mbps11

226

226

420

430

2,500

Secure Web Access firewall in Mbps12

171

171

280

295

1,800

Route table size (RIB/FIB) (IPv4 or IPv6)

256,000/256,000

256,000/256,000

1 million/600,00010

1 million/600,00010

1 million/600,00010

Maximum concurrent sessions (IPv4 or IPv6)

64,000

64,000

256,000

375,000

380,000

Maximum security policies

1,000

1,000

2,000

4,000

4,000

Connections per second

5,000

5,000

10,000

15,000

50,000

NAT rules

1,000

1,000

2,000

2,000

3,000

MAC table size

15,000

15,000

15,000

15,000

16,000

IPsec VPN tunnels

256

256

1,024

2,048

2,048

Number of remote access/SSL VPN (concurrent) users

25

50

150

250

500

GRE tunnels

256

256

512

1,024

2,048

Maximum number of security zones

16

16

64

64

128

Maximum number of virtual routers

32

32

64

128

128

Maximum number of VLANs

1,000

1,000

2,000

3,000

3,000

AppID sessions

16,000

16,000

64,000

64,000

64,000

IPS sessions

16,000

16,000

64,000

64,000

64,000

URLF sessions

16,000

16,000

64,000

64,000

64,000

8

Throughput numbers based on UDP packets and RFC2544 test methodology.

9

Throughput numbers based on HTTP traffic with 44 KB transaction size.

10

Route scaling numbers are with enhanced route-scale features turned on.

11

Next-Generation firewall performance is measured with Firewall, Application Security and IPS enabled using 64KB transactions

12

Secure Web Access firewall performance is measured with Firewall, Application Security, IPS, SecIntel, and URL Filtering enabled using 64KB transactions

SRX300 Line of Firewalls for the Branch Datasheet

8