Juniper Networks SRX300 line of firewalls delivers a next-generation firewall (NGFW) and a secure SD-WAN solution that supports the changing needs of enterprise networks. Whether rolling out new services and applications across locations, connecting to the cloud, or trying to achieve operational efficiency, the SRX300 line helps organizations realize their business objectives while providing scalable, easy to manage, secure connectivity and advanced threat mitigation capabilities. Next-generation firewall and content security capabilities make detecting and proactively mitigating threats easier while improving the user and application experience.
The SRX300 line consists of five models:
SRX300: Securing small branch or retail offices, the SRX300 Firewall consolidates security, routing, switching, and WAN connectivity in a small desktop device. The SRX300 supports up to 1.9 Gbps firewall and 336 Mbps IPsec VPN in a single, cost-effective networking and security platform.
SRX320: Securely connecting small distributed enterprise branch offices, the SRX320 Firewall consolidates security, routing, switching, and WAN connectivity in a small desktop device. The SRX320 supports up to 1.9 Gbps firewall and 336 Mbps IPsec VPN in a single, consolidated, cost-effective networking and security platform.
SRX340: Securely connecting midsize distributed enterprise branch offices, the SRX340 firewall consolidates security, routing, switching, and WAN connectivity in a 1 U form factor. The SRX340 supports up to 4.7 Gbps firewall and 733 Mbps IPsec VPN in a single, cost-effective networking and security platform.
SRX345: Best suited for midsize to large distributed enterprise branch offices, the SRX345 Firewall consolidates security, routing, switching, and WAN connectivity in a 1 U form factor. The SRX345 supports up to 5 Gbps firewall and 977 Mbps IPsec VPN in a single, consolidated, cost-effective networking and security platform.
SRX380: A high-performance and secure SD-WAN gateway, the SRX380 offers superior and reliable WAN connectivity while consolidating security, routing, and switching for distributed enterprise offices. The SRX380 features greater port density than other SRX300 models, with 16x1GbE PoE+ and 4x10GbE ports, and includes redundant dual power supplies, all in a 1 U form factor. The SRX380 supports up to 20Gbps firewall and 4.4 Gbps IPSec VPN in a single, consolidated, cost-effective networking and security platform.
Table 1. SRX300 Series Firewalls Performance and Scale
Parameter | SRX300 | SRX320 | SRX340 | SRX345 | SRX380 |
Routing with packet mode (64 B packet size) in Mbps8 | 300 | 300 | 550 | 750 | 1700 |
Routing with packet mode (IMIX packet size) in Mbps8 | 800 | 800 | 1,600 | 2,300 | 5000 |
Routing with packet mode (1,518 B packet size in Mbps8 | 1,500 | 1,500 | 3,000 | 5,500 | 10,000 |
Stateful firewall (64 B packet size) in Kpps8 | 200 | 200 | 350 | 550 | 1700 |
Stateful firewall (IMIX packet size) in Mbps8 | 600 | 600 | 1,100 | 1,500 | 6,500 |
Stateful firewall (1,518 B packet size) in Mbps8 | 1,900 | 1,900 | 4,700 | 5,000 | 20,000 |
IPsec VPN (IMIX packet size) in Mbps8 | 116 | 116 | 239 | 325 | 1400 |
IPsec VPN (1,400 B packet size) in Mbps8 | 336 | 336 | 733 | 977 | 4,400 |
Application visibility and control in Mbps9 | 500 | 500 | 1,000 | 1,700 | 6,000 |
Recommended IPS in Mbps9 | 200 | 200 | 400 | 600 | 2,000 |
Next-generation firewall in Mbps11 | 226 | 226 | 420 | 430 | 2,500 |
Secure Web Access firewall in Mbps12 | 171 | 171 | 280 | 295 | 1,800 |
Route table size (RIB/FIB) (IPv4 or IPv6) | 256,000/256,000 | 256,000/256,000 | 1 million/600,00010 | 1 million/600,00010 | 1 million/600,00010 |
Maximum concurrent sessions (IPv4 or IPv6) | 64,000 | 64,000 | 256,000 | 375,000 | 380,000 |
Maximum security policies | 1,000 | 1,000 | 2,000 | 4,000 | 4,000 |
Connections per second | 5,000 | 5,000 | 10,000 | 15,000 | 50,000 |
NAT rules | 1,000 | 1,000 | 2,000 | 2,000 | 3,000 |
MAC table size | 15,000 | 15,000 | 15,000 | 15,000 | 16,000 |
IPsec VPN tunnels | 256 | 256 | 1,024 | 2,048 | 2,048 |
Number of remote access/SSL VPN (concurrent) users | 25 | 50 | 150 | 250 | 500 |
GRE tunnels | 256 | 256 | 512 | 1,024 | 2,048 |
Maximum number of security zones | 16 | 16 | 64 | 64 | 128 |
Maximum number of virtual routers | 32 | 32 | 64 | 128 | 128 |
Maximum number of VLANs | 1,000 | 1,000 | 2,000 | 3,000 | 3,000 |
AppID sessions | 16,000 | 16,000 | 64,000 | 64,000 | 64,000 |
IPS sessions | 16,000 | 16,000 | 64,000 | 64,000 | 64,000 |
URLF sessions | 16,000 | 16,000 | 64,000 | 64,000 | 64,000 |
Table 1. SRX300 Series Firewalls Hardware Specifications
Specification | SRX300 | SRX320 | SRX340 | SRX345 | SRX380 |
Connectivity | |||||
Total onboard ports | 8x1GbE | 8x1GbE | 16x1GbE | 16x1GbE | 20 (16x1GbE, 4x10GbE) |
Onboard RJ-45 ports | 6x1GbE | 6x1GbE | 8x1GbE | 8x1GbE | 16x1GbE |
Onboard small form-factor pluggable (SFP) transceiver ports | 2x1GbE | 2x1GbE | 8x1GbE | 8x1GbE | 4x10GbE SFP+ |
MACsec-capable ports | 2x1GbE | 2x1GbE | 16x1GbE | 16x1GbE | 16x1GbE 4x10GbE |
Out-of-band (OOB) management ports | 0 | 0 | 1x1GbE | 1x1GbE | 1x1GbE |
Mini PIM (WAN) slots | 0 | 2 | 4 | 4 | 4 |
Console (RJ-45 + miniUSB) | 1 | 1 | 1 | 1 | 1 |
USB 3.0 ports (type A) | 1 | 1 | 1 | 1 | 1 |
PoE+ ports | N/A | 62 | 0 | 0 | 16 |
Memory and Storage | |||||
System memory (RAM) | 4 GB | 4 GB | 4 GB | 4 GB | 4GB |
Storage | 8 GB | 8 GB | 8 GB | 8 GB | 100GB SSD |
SSD slots | 0 | 0 | 1 | 1 | 1 |
Dimensions and Power | |||||
Form factor | Desktop | Desktop | 1 U | 1 U | 1U |
Size (WxHxD) | 12.63 x 1.37 x 7.52 in. | 11.81 x 1.73 x 7.52 in. | 17.36 x 1.72 x 14.57 in. | 17.36 x 1.72 x 14.57 in. (44.09 x 4.36 x 37.01 cm) / 17.36 x 1.72 x 18.7 in. (44.09 x 4.36 x 47.5 cm)3 | 17.36 x 1.72 x 18.7 in. (44.09 x 4.37 x 47.5 cm) / 17.36 x 1.72 x 20.47 in. (44.09 x 4.37 x 52 cm) |
Weight (device and PSU) | 4.38 lb (1.98 kg) | 3.28 lb (1.51 kg)4 / 3.4 lb (1.55 kb)5 | 10.80 lb (4.90 kg) | 10.80 lb (4.90 kg) / | 15 lb (6.8 kg) with 1xPSU / 16.76 lb (7.6 kg) with 2xPSU |
Redundant PSU | No | No | No | No | Yes |
Power supply | AC (external) | AC (external) | AC (internal) | AC (internal) / DC (internal)6 | 1+1 hot-swappable AC PSU |
Rated DC voltage range | N/A | N/A | N/A | -48 to -60 VDC (with -15% and +20% tolerance) | NA |
Rated DC operating voltage range | N/A | N/A | N/A | -40.8 VDC to -72 VDC6 | N/A |
Maximum PoE power | N/A | 180 W5 | N/A | N/A | 480W |
Average power consumption | 24.9 W | 46 W4/221 W5 | 122 W | 122 W | 150 W (without PoE) 510 W (with PoE) |
Average heat dissipation | 85 BTU/h | 157 BTU/h4/755 BTU/h5 | 420 BTU/h | 420 BTU/h | 511.5 BTU/hr (without PoE) |
Maximum current consumption | 0.346 A | 0.634 A4/2.755 A5 | 1.496 A | 1.496 A / 6A @ -48 VDC6 | 1.79A/7.32A |
Acoustic noise level | 0dB (fanless) | 37 dBA4/40 dBA5 | 45.5 dBA | 45.5 dBA | < 50dBA @ room temperature 27C |
Airflow/cooling | Fanless | Front to back | Front to back | Front to back | Front to back |
Environmental, Compliance, and Safety Certification | |||||
Operational temperature | -4° to 140° F | 32° to 104° F (0° to 40° C) | 32° to 104° F (0° to 40° C) | 32° to 104° F (0° to 40° C) -22° to 131° F (-30° to 55° C) for SRX345-DC | 32° to 104° F (0° to 40° C) 32° to 122° F (0° to 50° C) without MPIMs |
Nonoperational temperature | -4° to 158° F (-20° to 70° C) | -4° to 158° F (-20° to 70° C) | -4° to 158° F (-20° to 70° C) | -4° to 158° F (-20° to 70° C) -22° to 158° F (-30° to 70° C) for SRX345-DC | -4° to 158° F (-20° to 70° C) |
Operating humidity | 10% to 90% non-condensing | 10% to 90% non-condensing | 10% to 90% non-condensing | 10% to 90% non-condensing | 10% to 90% non-condensing |
Nonoperating humidity | 5% to 95% non-condensing | 5% to 95% non-condensing | 5% to 95% non-condensing | 5% to 95% non-condensing | 5% to 95% non-condensing |
Meantime between failures (MTBF) | 44.5 years | 32.5 years4/ 26 years5 | 27 years | 27.4 years | 28.1 years |
FCC classification | Class A | Class A | Class A | Class A | Class A |
RoHS compliance | RoHS 2 | RoHS 2 | RoHS 2 | RoHS 2 | RoHS 2 |
FIPS 140-2 | Level 2 (Junos 19.2R1) | Level 2 (Junos 19.2R1) | Level 2 (Junos 19.2R1) | Level 2 (Junos 20.2R1) | Level 2 (Junos 20.2R1) |
Common Criteria certification | NDPP, VPNEP, FWEP, IPSEP (based on Junos 19.2R1) | NDPP, VPNEP, FWEP, IPSEP (based on Junos 19.2R1) | NDPP, VPNEP, FWEP, IPSEP (based on Junos 19.2R1) | NDPP, VPNEP, FWEP, IPSEP (based on Junos 20.4R1) | NDPP, VPNEP, FWEP, IPSEP (based on Junos 20.4R1) |
Table 1. SRX300 Series Firewalls Ordering Information
Product Number | Description |
Base System Model Numbers | |
SRX300-SYS-JB | SRX300 Firewalls include hardware (8GbE, 4G RAM, 8G Flash, power adapter, and cable) and Junos Software Base (firewall, NAT, IPSec, routing, MPLS, and switching). RMK not included. |
SRX320-SYS-JB | SRX320 Firewalls include hardware (8GbE, 2x MPIM slots, 4G RAM, 8G Flash, power adapter and cable) and Junos Software Base (firewall, NAT, IPSec, routing, MPLS and switching). RMK not included. |
SRX320-SYS-JB-P | SRX320 Firewalls includes hardware (8GbE, 6-port POE+, 2x MPIM slots, 4G RAM, 8G Flash, power adapter and cable) and Junos Software Base (firewall, NAT, IPSec, routing, MPLS and switching). RMK not included. |
SRX340-SYS-JB | SRX340 Firewalls include hardware (16GbE, 4x MPIM slots, 4G RAM, 8G Flash, power supply, cable and RMK) and Junos Software Base (firewall, NAT, IPSec, routing, MPLS and switching) |
SRX345-SYS-JB | SRX345 Firewalls include hardware (16GbE, 4x MPIM slots, 4G RAM, 8G Flash, power supply, cable and RMK) and Junos Software Base (firewall, NAT, IPSec, routing, MPLS and switching) |
SRX345-SYS-JB-2AC | SRX345 Firewalls include hardware (16GbE, 4x MPIM slots, 4G RAM, 8G Flash, dual AC power supply, cable and RMK) and Junos Software Base (firewall, NAT, IPSec, routing, MPLS and switching) |
SRX345-SYS-JB-DC | SRX345 Firewalls include hardware (16GbE, 4x MPIM slots, 4G RAM, 8G Flash, single DC power supply, cable and RMK) and Junos Software Base (firewall, NAT, IPSec, routing, MPLS and switching) |
SRX380-P-SYS-JB-AC | SRX380 Firewalls include hardware (16GbE PoE+, 4x10GbE, 4x MPIM slots, 4GB RAM, 100GB SSD, single AC power supply, cable and RMK) and Junos Software Base (firewall, NAT, IPSec, routing, MPLS and switching) |
Software Licenses | |
S-SRXnnn-A1-1 | SRXnnn Advanced 1 – JSE/SD-WAN, includes SD-WAN features App+ (AppID, AppFW, AppQoS, AppRoute, AppQoE, AppTrack) and IPS; 1-year subscription (example: S-SRX380-A1-1) |
S-SRXnnn-A1-3 | SRXnnn Advanced 1 – JSE/SD-WAN, includes SD-WAN features App+ (AppID, AppFW, AppQoS, AppRoute, AppQoE, AppTrack) and IPS; 3-year subscription (example: S-SRX380-A1-3) |
S-SRXnnn-A1-5 | SRXnnn Advanced 1 – JSE/SD-WAN, includes SD-WAN features App+ (AppID, AppFW, AppQoS, AppRoute, AppQoE, AppTrack) and IPS; 5-year subscription (example: S-SRX380-A1-5] |
S-SRXnnn-P1-1 | SRXnnn Premium 1, includes App+ (AppID, AppFW, AppQoS, AppRoute, AppQoE, AppTrack), IPS and Juniper ATP; 1-year subscription (example: S-SRX380-P1-1) |
S-SRXnnn-P1-3 | SRXnnn Premium 1, includes App+ (AppID, AppFW, AppQoS, AppRoute, AppQoE, AppTrack), IPS and Juniper ATP; 3-year subscription (example: S-SRX380-P1-3) |
S-SRXnnn-P1-5 | SRXnnn Premium 1, includes App+ (AppID, AppFW, AppQoS, AppRoute, AppQoE, AppTrack), IPS and Juniper ATP; 5-year subscription (example: |
S-SRXnnn-A2-1 | SRXnnn Advanced 2, includes App+ (AppID, AppFW, AppQoS, AppRoute, AppQoE, AppTrack), IPS and Content Security (UTM, Cloud AV, URLF and AS); 1-year subscription (example: S-SRX380-A2-1) |
S-SRXnnn-A2-3 | SRXnnn Advanced 2, includes App+ (AppID, AppFW, AppQoS, AppRoute, AppQoE, AppTrack), IPS and Content Security (UTM, Cloud AV, URLF and AS); 3-year subscription (example: S-SRX380-A2-3) |
S-SRXnnn-A2-5 | SRXnnn Advanced 2, includes App+ (AppID, AppFW, AppQoS, AppRoute, AppQoE, AppTrack), IPS and Content Security (UTM, Cloud AV, URLF and AS); 5-year subscription (example: S-SRX380-A2-5) |
S-SRXnnn-P2-112 | SRXnnn Premium 2, includes App+ (AppID, AppFW, AppQoS, AppRoute, AppQoE, AppTrack), IPS, Content Security (UTM, Cloud AV, URLF and AS) and Juniper Sky ATP; 1-year subscription (example: S-SRX380-P2-1) |
S-SRXnnn-P2-312 | SRXnnn Premium 2, includes App+ (AppID, AppFW, AppQoS, AppRoute, AppQoE, AppTrack), IPS, Content Security (UTM, Cloud AV, URLF and AS) and Juniper Sky ATP; 3-year subscription (example: S-SRX380-P2-3) |
S-SRXnnn-P2-512 | SRXnnn Premium 2, includes App+ (AppID, AppFW, AppQoS, AppRoute, AppQoE, AppTrack), IPS, Content Security (UTM, Cloud AV, URLF and AS) and Juniper Sky ATP; 5-year subscription (example: S-SRX380-P2-5) |
Remote Access/Juniper Secure Connect VPN Licenses | |
S-RA3-SRX300-S-1 | SW, Remote Access VPN – Juniper, 25 Concurrent Users, Standard, with SW support, 1 Year |
S-RA3-SRX320-S-1 | SW, Remote Access VPN – Juniper, 50 Concurrent Users, Standard, with SW support, 1 Year |
S-RA3-SRX340-S-1 | SW, Remote Access VPN – Juniper, 150 Concurrent Users, Standard, with SW support, 1 Year |
S-RA3-SRX345-S-1 | SW, Remote Access VPN – Juniper, 250 Concurrent Users, Standard, with SW support, 1 Year |
S-RA3-SRX380-S-1 | SW, Remote Access VPN – Juniper, 500 Concurrent Users, Standard, with SW support, 1 Year |
S-RA3-5CCU-S-1 | SW, Remote Access VPN – Juniper, 5 Concurrent Users, Standard, with SW support, 1 Year |
S-RA3-25CCU-S-1 | SW, Remote Access VPN – Juniper, 25 Concurrent Users, Standard, with SW support, 1 Year |
S-RA3-50CCU-S-1 | SW, Remote Access VPN – Juniper, 50 Concurrent Users, Standard, with SW support, 1 Year |
S-RA3-100CCU-S-1 | SW, Remote Access VPN – Juniper, 100 Concurrent Users, Standard, with SW support, 1 Year |
S-RA3-250CCU-S-1 | SW, Remote Access VPN – Juniper, 250 Concurrent Users, Standard, with SW support, 1 Year |
S-RA3-500CCU-S-1 | SW, Remote Access VPN – Juniper, 500 Concurrent Users, Standard, with SW support, 1 Year |
S-RA3-SRX300-S-3 | SW, Remote Access VPN – Juniper, 25 Concurrent Users, Standard, with SW support, 3 Year |
S-RA3-SRX320-S-3 | SW, Remote Access VPN – Juniper, 50 Concurrent Users, Standard, with SW support, 3 Year |
S-RA3-SRX340-S-3 | SW, Remote Access VPN – Juniper, 150 Concurrent Users, Standard, with SW support, 3 Year |
S-RA3-SRX345-S-3 | SW, Remote Access VPN – Juniper, 250 Concurrent Users, Standard, with SW support, 3 Year |
S-RA3-SRX380-S-3 | SW, Remote Access VPN – Juniper, 500 Concurrent Users, Standard, with SW support, 3 Year |
S-RA3-5CCU-S-3 | SW, Remote Access VPN – Juniper, 5 Concurrent Users, Standard, with SW support, 3 Year |
S-RA3-25CCU-S-3 | SW, Remote Access VPN – Juniper, 25 Concurrent Users, Standard, with SW support, 3 Year |
S-RA3-50CCU-S-3 | SW, Remote Access VPN – Juniper, 50 Concurrent Users, Standard, with SW support, 3 Year |
S-RA3-100CCU-S-3 | SW, Remote Access VPN – Juniper, 100 Concurrent Users, Standard, with SW support, 3 Year |
S-RA3-250CCU-S-3 | SW, Remote Access VPN – Juniper, 250 Concurrent Users, Standard, with SW support, 3 Year |
S-RA3-500CCU-S-3 | SW, Remote Access VPN – Juniper, 500 Concurrent Users, Standard, with SW support, 3 Year |
Interface Modules | |
SRX-MP-1T1E1-R | 1 port T1E1, MPIM form factor supported on SRX320, SRX340, SRX345, SRX380, and SRX550M. ROHS complaint |
SRX-MP-1VDSL2-R | 1 port VDSL2 (backward compatible with ADSL / ADSL2+), MPIM form factor supported on SRX320, SRX340, SRX345, SRX380, and SRX550M. ROHS complaint |
SRX-MP-LTE-AA | 4G / LTE MPIM support 1, 3, 5, 7-8, 18-19, 21, 28, 38-41 LTE bands (for Asia and Australia). Supported on SRX320, SRX340, SRX345, SRX380, and SRX550M |
SRX-MP-LTE-AE | 4G / LTE MPIM support 1-5, 7-8, 12-13, 30, 25-26, 29-30, 41 LTE bands (for Americas and EMEA). Supported on SRX320, SRX340, SRX345, SRX380, and SRX550M |
SRX-MP-WLAN-US | Wireless access point (Wi-Fi) MPIM for SRX320, SRX34x, SRX380, and SRX550M. Supported for U.S. regulatory bands only. |
SRX-MP-WLAN-WW | Wireless access point (Wi-Fi) MPIM for SRX320, SRX34x, SRX380, and SRX550M. Supported for worldwide regulatory bands (excluding U.S. and Israel). |
SRX-MP-WLAN-IL | Wireless access point (Wi-Fi) MPIM for SRX320, SRX34x, SRX380, and SRX550M. Supported for Israel regulatory bands only. |
SRX-MP-ANT-EXT | Antenna extension cable for WLAN MPIM on SRX Series platforms |
Accessories | |
SRX300-RMK0 | SRX300 rack mount kit with adaptor tray |
SRX300-RMK1 | SRX300 rack mount kit without adaptor tray |
SRX300-WALL-KIT0 | SRX300 wall mount kit with brackets |
SRX320-P-RMK0 | SRX320-POE rack mount kit with adaptor tray |
SRX320-P-RMK1 | SRX300-POE rack mount kit without adaptor tray |
SRX320-RMK0 | SRX320 rack mount kit with adaptor tray |
SRX320-RMK1 | SRX320 rack mount kit without adaptor tray |
SRX320-WALL-KIT0 | SRX320 wall mount kit with brackets |
SRX34X-RMK | SRX340 and SRX345 rack mount kit |
EX-4PST-RMK | SRX380 rack mount kit |
JSU-SSD-MLC-100 | Juniper Storage Unit, SSD, MLC, 100GB |
JPSU-600-AC-AFO | SRX380 600W AC PSU, front-to-back |
