Juniper Networks SRX220 Services Gateway - Security appliance - 8 ports - 1GbE, HDLC, Frame Relay, RS-232, PPP, X.21, V.35, RS-449, MLPPP, FRF.15, FRF.16, MLFR - 1U - rack-mountable

Juniper Networks | SRX220H2

SRX series services gateways for the branch provide perimeter security, content security, access control, and network-wide threat visibility and control. Best-in-class firewall and VPN technologies secure the perimeter with minimal configuration and consistent performance. By using zones and policies, even network administrators can configure and deploy an SRX series for the branch quickly and securely. Policy-based VPNs support more complex security architectures that require dynamic addressing and split tunneling. For content security, SRX series for the branch offers a complete suite of Unified Threat Management (UTM) services consisting of: intrusion prevention system (IPS), antivirus, anti-spam, Web filtering and data loss prevention via content filtering to protect your network from the latest content borne threats. The branch SRX series integrates with other Juniper security products to deliver enterprise-wide unified access control and adaptive threat management. These capabilities give security professionals powerful tools in the fight against cybercrime and data loss.SRX series for the branch brings high-performance and proven deployment and capabilities to enterprises that need to build a worldwide network of thousands of sites. The wide variety of options allows configuration of performance, functionality, and price scaled to support from a handful to thousands of users. Ethernet, serial, T1/E1, xDSL, Metro Ethernet, and third generation (3G) cellular wireless are all available options for WAN or Internet connectivity to securely link your sites. Multiple form factors allow you to make cost-effective choices for mission-critical deployments. Managing the network is easy using the proven JUNOS command-line interface (CLI) and scripting capabilities, or a simple to use Web-based GUI.

• Secure routing
  Should you use a router and a firewall to secure your network? By building the branch SRX series with best in class routing and firewall capabilities in one product, enterprises don't have to make that choice. Why forward traffic if it's not legitimate? SRX series for the branch checks the traffic to see if it is legitimate, and only forwards it on when it is. This reduces the load on the network, allocates bandwidth for all other mission-critical applications, and secures the network from hacking.
• High availability
  When SRX series services gateways for the branch are configured as an active/active pair, traffic and configuration will be mirrored automatically to provide active firewall and VPN session maintenance in case of a failure. The branch SRX series will now synchronize both configuration and runtime information. As a result, during failover, synchronization of the following information is shared: connection/session state and flow information, IPsec security associations, Network Address Translation (NAT) traffic, address book information, configuration changes, and more. In contrast to the typical router active/standby resiliency protocols such as Virtual Router Redundancy Protocol (VRRP), all dynamic flow and session information is lost and must be reestablished in the event of a failover. Some or all applications sessions will have to restart depending on the convergence time of the links or nodes. By maintaining state, not only is the session preserved, but security is intact. In an unstable network, this active/active configuration also mitigates link flapping affecting session performance.