SRX

 View Only
last person joined: 2 days ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  vSRX Throughput license - what kind of throughput

    Posted 05-28-2018 03:14

    Hi All,

     

    vSRX is sold in bandwitdth/throughput tier licences (10M, 100M, 1G, etc). What kind of throughput it is meant? (Stateful) Firewall throughput? NGFW throughput? All licensed features enabled throughput (let say CS + ATP bundle)?

     

    TY in advance ...


    #vSRXThroughputlicensing


  • 2.  RE: vSRX Throughput license - what kind of throughput
    Best Answer

    Posted 05-28-2018 03:39

    This is just a limit for overall traffic totatl through the vSRX regardless of features enabled.

     



  • 3.  RE: vSRX Throughput license - what kind of throughput

    Posted 05-28-2018 03:52

    TY for prompt answer



  • 4.  RE: vSRX Throughput license - what kind of throughput

    Posted 05-28-2018 04:28

    Just for clarification for my understanding / confirmation: 

    so if VSRX-100M-ATP-B-x is used, if all features are enabled (AppSecure, IDP, EWF, AV and Sky ATP), throughput will still be 100M, not less, regardless of enabled features?

    Different that "Physical" SRX340 where FW is capable of 1100M, but with features enabled 200M (and less)?



  • 5.  RE: vSRX Throughput license - what kind of throughput

    Posted 05-28-2018 04:38

    Sorry for the lack of clarity.

     

    The license on the vSRX is a throttle on overall bandwidth independent of features enabled.  This prevents the vSRX instance from exceeding the licensed limit without regard to the configuration usage.  But this does not change the behavior or performance of any of the features themselves.

     

     Also reaching this maximum depends on the underlying hypervisor and hardware being able to deliver that capacity.

    See the chart on page 4 of the data sheet for additional detail.

    https://www.juniper.net/us/en/local/pdf/datasheets/1000489-en.pdf