Juniper SRX Series Firewall vs Palo Alto Networks VM-Series comparison

Cancel
You must select at least 2 products to compare!
Fortinet Logo
120,425 views|88,209 comparisons
90% willing to recommend
Juniper Logo
14,215 views|8,554 comparisons
85% willing to recommend
Palo Alto Networks Logo
7,117 views|4,612 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Juniper SRX Series Firewall and Palo Alto Networks VM-Series based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Juniper SRX Series Firewall vs. Palo Alto Networks VM-Series Report (Updated: May 2024).
769,976 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The tool is a nice product and easy to handle. The software's user interface is also good. You can easily implement remote access in the solution.""The application control features, such as Facebook blocking and Spotify blocking, are the most valuable.""Their reliability and their policy of pre-shipping replacements when a unit has failed.""The customization potential is quite impressive.""The most important feature, normally for small business customers, is link load balancing.""The virtual firewall feature is the most valuable. We have around 1,500 firewalls. We did not buy individual hardware, and the virtual firewalls made sense because we don't have to keep on buying the hardware. FortiGate is easier to use as compared to Checkpoint devices. It is user friendly and has a good UI. You don't need much expertise to work on this firewall. You don't need to worry much about DCLA, commands, and things like that.""FortiGate is on the cheaper end, and it offers good value.""The most important features with FortiGate are the web filter and application controls. We can control our internet usage and use the web filter for application purposes."

More Fortinet FortiGate Pros →

"It provides good routing and high performance of the data center.""The GUI is simple to use.""The most valuable feature is robustness.""It's easily scalable.""The most valuable features are the security cloud ACP and KPP features.""The scalability is fine.""Troubleshooting with the solution is quite easy. If you compare the process to, for example, Fortigate, Juniper is much easier.""The command line in Juniper SRX is extremely powerful, in my opinion. It's one of the best command lines I've used in networking products."

More Juniper SRX Series Firewall Pros →

"We have reduced the number of configuration lines by 90%. We need fewer number of admins right now because of it.""The most effective features of the solution for threat prevention are Layer 7 inspection, SSL decryption, IPS, and the web filtering profile.""It gives us the ease that we are secure. We have set up the proper things that help make our data safe.""Palo Alto Networks VM-Series is easy to maintain...From a security point of view, I find Palo Alto Networks VM-Series to be a better product compared to the other solutions in the market.""In AWS, Palo Alto provides us a better view than flow logs for network traffic.""It ensures that every interaction, pre and post-loan processing, undergoes a thorough inspection, leveraging VPN features and comprehensive security protocols.""Embedding it into my application development lifecycle prevents data loss and business disruption, allowing the adoption to operate at the speed of my AWS Cloud.""The solution strengthens our IT posture."

More Palo Alto Networks VM-Series Pros →

Cons
"They need to improve their technical support.""If I had any criticism that I would give FortiGate, it would be that they need to stop changing their logging format. Every time we do a firmware upgrade, it is a massive issue on the SIM. Parsers have to be rebuilt. Even the FortiGate guys came in and said that they don't play well in the sandbox.""You do need some IT knowledge in order to effectively work with the solution.""I feel that the reporting needs to be improved.""Fortinet FortiGate could improve by having better visibility. Palo Alto has better visibility.""The logs need to be better. They need to be more visible and easier to access.""I would like reporting to be improved and should offer a lot more tools to monitor the products.""Scalability for Fortinet FortiGate needs to be improved. SD-WAN security for this solution also needs some improvement."

More Fortinet FortiGate Cons →

"The visibility/reporting could be better. To see something, you have to export the log to a syslog and then process with another product.""Juniper SRX Series Firewall has to improve its web content site, like web filtration.""Junos Space should be improved to be on par with FortiGate's solution for managing firewalls and routing.""The workplace management console needs improvement. It should be a little bit more developed. Also, the interface needs a bit more improvement.""Third-party support for Juniper is a lot less than Cisco. This is no surprise, but a definite consideration if you are expecting to use a lot of third party support. In my guesstimate, for every 100 Cisco shops, you will find one Juniper shop.""The GUI needs to be easier and more helpful for users who don't have security experience.""The CPU switch could be improved for a better overall performance of traffic flow.""There are a lot of features that customers do not know about and I think that better documentation would help when it comes to learning how to use the product."

More Juniper SRX Series Firewall Cons →

"AWS doesn't integrate well with third-party firewalls.""On the cloud side, they need to come up with more HA solutions to support the multi-region.""Integrative capabilities with other solutions should be addressed.""People are less aware of Palo Alto.""There are various reports that come with the box or with the VMware, but you can only run them daily.""Palo Alto is that it is really bad when it comes to technical support.""All areas need improvement: manufacturing, education, financial, etc.""We have ran into issues with Palo Alto’s limitations for resolving large IP lists from DNS lookups, as well as the antivirus interfering with App-ID."

More Palo Alto Networks VM-Series Cons →

Pricing and Cost Advice
  • "Fortinet has one or two license types, and the VPN numbers are only limited by the hardware chassis make."
  • "These boxes are not that expensive compared to what they can do, their functionality, and the reporting you receive. Fortinet licensing is straightforward and less confusing compared to Cisco."
  • "Go for long term pricing negotiated at the time of purchase."
  • "Work through partners for the best pricing."
  • "The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."
  • "Easy to understand licensing requirements."
  • "​We saved a bundle by not needing all the past appliances from an NGFW.​"
  • "The cost is too high... They have to focus on more features with less cost for the customer. If you see the market, where it's going, there are a lot of players offering more features for less cost."
  • More Fortinet FortiGate Pricing and Cost Advice →

  • "The prices are very good as compared to other vendors."
  • "Pricing is very good, not expensive."
  • "I would say about $20,000 for a SRX650 with IDP licence."
  • "Small enterprises or telco have variant licenses, and this licensing should be improved."
  • "We were able to lower our overall operating costs over a three year period by 25%, mostly recovered from maintenance/support costs."
  • "Pricing is good. Most of the costs are in the UTM (IDS/IPS, virus scanning, etc) subscription."
  • "Palo Alto was nice, but much more expensive."
  • "It is not that expensive."
  • More Juniper SRX Series Firewall Pricing and Cost Advice →

  • "For what you get, it does do what it says. It is a good value for an enterprise firewall.​"
  • "​The licensing is pretty much like everyone else."
  • "When you have a client compare box against box, a lot of times Palo Alto is a bit more expensive, but its network firewalls have a very rich ratio."
  • "Do not buy larges box if you do not need them. Rightsizing is a great task to do before​hand."
  • "I know Palo Alto is not cheap. They have been telling me, the members of the finance team, it is not a cheap solution. It is a solution whose target is that no matter how big your organization is, small, medium, or large, it is about the maturity of your security team or infrastructure team whom you want to work with."
  • "It is a little bit of crazy if you compare it to Vanguard, Sophos, or even Cisco. The newest version of Cisco, the Next-Generation Firewall of Cisco, is less expensive than Palo Alto. It is more comparable to Check Point."
  • "For licensing, It depends how they want to use the firewall. The firewall can be used only for IPS purposes. If you only want that firewall IPSs, you will only need a license that is called threat prevention. That license, threat prevention, includes vulnerabilities, antivirus signatures and one additional measure (that I can't remember), but it includes three measures and security updates."
  • "The box, if you do not want to buy the threat prevention license in the box, you can buy it only with the support license. It is for the support of the hardware. It works like a simple firewall. It integrates what it calls user IDs and application IDs. If you do not buy any other license, only the firewall, Palo Alto will also help you improve a lot of your security."
  • More Palo Alto Networks VM-Series Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
    769,976 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: When you compare these firewalls you can identify them with different features, advantages, practices and usage at… more »
    Top Answer:From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know… more »
    Top Answer:As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite… more »
    Top Answer:Juniper SRX Series Firewall is a stable solution.
    Top Answer:In my opinion, the Juniper SRX Series Firewall is cheaper than other products. We have a five-year license for the… more »
    Top Answer:Currently, we are using the solution as a data center firewall, but we previously used Juniper on all my segments. Since… more »
    Top Answer:In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it… more »
    Top Answer:Both products are very stable and easily scalable The setup of Azure Firewall is easy and very user-friendly and the… more »
    Top Answer:The VM-Series scalability is fast and easy to implement, improving our security posture as our Azure network grows.
    Comparisons
    Also Known As
    FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
    Juniper SRX
    Learn More
    Overview

    Fortinet FortiGate enhances network security, prevents unauthorized access, and offers robust firewall protection. Valued features include advanced threat protection, reliable performance, and a user-friendly interface. It improves efficiency, streamlines processes, and boosts collaboration, providing valuable insights for informed decision-making and growth.

    Juniper SRX is a next-generation security solution that enables users to expand and secure their networks without incurring heavy costs or sacrificing performance.

    Benefits of Juniper SRX

    Some of the benefits of using Juniper SRX include:

    • Easily manage and view every aspect of your system’s security. Juniper SRX enables users to manage their security from a centralized location. The central control center can control and view every Juniper connected device in a user’s network. Once a device meets the desired security requirements, an administrator can configure the device’s policy to match the other machines in their network. This both simplifies the way that the network operations run and decreases the number of resources that are needed to ensure that operations run smoothly.
    • Secure your system with a flexible and comprehensive security suite. Juniper SRX’s firewalls are flexible enough that they always match the type of applications that they are supposed to be protecting. Its security features uniformly protect your applications. This is true regardless of how your application is deployed. It can integrate with everything from cloud-based applications to those stored on physical servers in a data center. This makes it easy for administrators to maintain consistency across their systems.
    • Protect yourself from advanced threats. Juniper SRX is equipped with powerful security automation features. They can detect a wide range of known and unknown threats as soon as they appear. Once malware is detected, Juniper SRX begins to analyze it and determines what response fits the situation. Additionally, the threats are prioritized according to their severity. Administrators are then given a selection of response options from which they can choose. This enables users to prevent the spread of these threats.
    • Increase your ability to scale your security. Juniper SRX makes it easy for users to scale up their security to meet their specific needs. Its service processing cards (SPC) are designed to enable a user to meet all of their needs. Administrators do not need to buy specific hardware every time that they need to get something done. Their SPCs can be quickly and easily customized. The addition of SPCs enables users to scale up according to the particular project that they are working on at that time.
    • Reduce the number of resources that you need to expend. Juniper SRX enables users to add expansion modules to their network without expanding the cost to run their network. They accommodate growth without adding to the overall cost. Administrators will not need to spend money on more space, cooling power, or maintenance. Additionally, they will not have to dedicate more time to maintaining the network. Your network may grow, but the cost of running your system will not.

    Reviews from Real Users

    Juniper SRX stands out among their competitors for a number of reasons. Two major ones are their central management capabilities and the robustness of their suite of security features. Juniper SRX is designed to make it easy for users to take control of their network’s security. From one location, administrators can manage all aspects of their infrastructure’s security. The many features that it offers allows users to tailor their security to meet their specific needs.

    Shashidhara N., director of technology solutions & services at Connectivity IT Services Private Limited, writes, “On the SRX box, it has what I call a one model concept for security. I work especially with hybrid environments. With an SRX we have a single management dashboard. We can manage the internal framework easily with the centralized management component. You can work with threat prevention, you can work with integration, you can work with traffic management. Another good part about SRX is that you have opportunities for automation. Another thing that is very good is that all the operating systems for all Juniper boxes are the same. You do not work on different operating systems using different boxes.”

    Pradip J., the owner of Shree Atharva Sales Corporation, writes, “It is a complete security bundle. The cloud-based Sky Advanced Threat Prevention feature is very valuable. I am 100% satisfied with the performance of the Juniper firewall. It has a very good throughput. It works very fine. We use our firewall as a site-to-site VPN or Software-Defined Wide Area Network (SD-WAN). In both cases, it has a very good and optimum performance.Their service support is very good in India. I get really good support from the Juniper team."

    Palo Alto Networks VM-Series is a highly effective advanced threat protection (ATP) solution and firewall that can be hosted on cloud computing technologies designed by many different companies. It decreases the amount of time that it will take administrators to respond to threats. Users that deploy VM-series have 70% less downtime than those who use similar firewalls. Neither protection nor efficiency are concerns when this next-generation firewall is in play.

    VM-Series is being deployed to protect both public and private cloud environments. This level of flexibility empowers organizations to run the environment or environments that best meet their needs without worrying that they are going to be exposed to digital threats due to the environment that they choose.

    In the public cloud, users of Palo Alto Networks VM-Series can automate their deployment and dynamically scale up their environment while experiencing a consistent level of protection. This dynamic scalability means that they also integrate their security into their DevOps workflows so that their security can keep up with their activities and requirements. Users of private cloud environments can set up security policies that can be automated to be provisioned as the need arises. Organizations don’t need to slow down when they deploy VM-Series because it makes the task of defending them so simple that they can set their defenses and forget that they are even there.

    Users gain a deep level of visibility when they deploy Palo Alto Networks VM-Series. App-ID technology enables organizations to see their network traffic on the application level and spot threats that might be trying to sneak in through vulnerable points in their defenses. It also leverages Palo Alto Networks WildFire and advanced threat protection to block the threats before they can escalate.

      Palo Alto Networks VM-Series Features:

      • Central management system - It has a central management system that enables users to set up and control their security operations from one location. Users don’t need to search for the tools that they need. This system allows for security consistency and complete control without requiring businesses to spend large periods of time to do so.
      • Blacklisting and whitelisting - Organizations can utilize blacklisting and whitelisting tools to ensure that their network traffic only contains the type of traffic that they want to be present. These tools make it possible for them to set specific web traffic sources as being either undesirable and thus blocked from entering their network or desirable and thus allowed to enter. 
      • Automation feature - The product’s automation feature can automate many critical functions that users would otherwise have to handle manually. Security policy updates are an example of a function that users can automate.

      Reviews from Real Users:

      Palo Alto Networks VM-Series is a solution that stands out when compared to other similar solutions. Two major advantages that it offers are its ability to protect users without degrading the efficiency with which their networks perform and its centralized management system. 

      Jason H., the director of information technology at Tavoca Inc, writes, “There is no noticeable trade-off between security and network performance. In fact, so far, we've not seen any negative network performance with it. We're very impressed in that regard.”

      An information technology manager at a tech services company says, “We use Palo Alto’s Panorama centralized management system. We have an on-prem firewall where Panorama is very good for pulling logs in from the cloud so we can see what is going on. It gives us visibility into that as well as shows us what attacks are coming in. Palo Alto’s Panorama centralized management system simplifies our security posture based on our requirements. Instead of manually pulling logs, then generating them into readable formats, it gives us the console in a readable format to view.”

      Sample Customers
      1. Amazon Web Services 2. Microsoft 3. IBM 4. Cisco 5. Dell 6. HP 7. Oracle 8. Verizon 9. AT&T 10. T-Mobile 11. Sprint 12. Vodafone 13. Orange 14. BT Group 15. Telstra 16. Deutsche Telekom 17. Comcast 18. Time Warner Cable 19. CenturyLink 20. NTT Communications 21. Tata Communications 22. SoftBank 23. China Mobile 24. Singtel 25. Telus 26. Rogers Communications 27. Bell Canada 28. Telkom Indonesia 29. Telkom South Africa 30. Telmex 31. Telia Company 32. Telkom Kenya
      7-Eleven, AARNet Pty Ltd, Allegro Networks, alltours GmbH, Apollo Hotel Papendrecht, Armstrong Atlantic State University, Atlantech Online, Availity, Bajaj Capital, Baloise Insurance, BancABC, BAS Group, Black Lotus, Blue Box, Borealis, Carilion Clinic, Catholic Health System, CATV, Champlain College, Chinas Ministry of Railways, China University of Mining and Technology (CUMT), Cloud Dynamics, CloudSeeds, Cloudwatt, CODONiS, Colt Technology Services, Cork Internet Exchange, CSS Versicherung AG, CyrusOne, Danish Crown, Deloitte Belgium, Department of Energy, Divona Telecom, DQE Communications, DreamHost, European Government Agency, Expedient, Financial Market Information Services Provider, Fluidata, Fonality, Fox Sports, Global Financial Institution, Global Investment Bank, Global Investment Company, Energy Sciences Network (ESnet), Goethe University, HEAnet, High Performance Networks Inc., Hillenbrand
      Warren Rogers Associates
      Top Industries
      REVIEWERS
      Comms Service Provider16%
      Computer Software Company9%
      Financial Services Firm8%
      Manufacturing Company7%
      VISITORS READING REVIEWS
      Educational Organization20%
      Computer Software Company15%
      Comms Service Provider8%
      Manufacturing Company6%
      REVIEWERS
      Comms Service Provider34%
      Financial Services Firm16%
      Computer Software Company10%
      Manufacturing Company6%
      VISITORS READING REVIEWS
      Educational Organization42%
      Computer Software Company11%
      Comms Service Provider6%
      Government5%
      REVIEWERS
      Computer Software Company26%
      Manufacturing Company16%
      Financial Services Firm13%
      Government10%
      VISITORS READING REVIEWS
      Computer Software Company15%
      Financial Services Firm11%
      Manufacturing Company7%
      Government6%
      Company Size
      REVIEWERS
      Small Business48%
      Midsize Enterprise23%
      Large Enterprise30%
      VISITORS READING REVIEWS
      Small Business27%
      Midsize Enterprise32%
      Large Enterprise41%
      REVIEWERS
      Small Business44%
      Midsize Enterprise21%
      Large Enterprise35%
      VISITORS READING REVIEWS
      Small Business19%
      Midsize Enterprise48%
      Large Enterprise33%
      REVIEWERS
      Small Business41%
      Midsize Enterprise26%
      Large Enterprise33%
      VISITORS READING REVIEWS
      Small Business23%
      Midsize Enterprise15%
      Large Enterprise61%
      Buyer's Guide
      Juniper SRX Series Firewall vs. Palo Alto Networks VM-Series
      May 2024
      Find out what your peers are saying about Juniper SRX Series Firewall vs. Palo Alto Networks VM-Series and other solutions. Updated: May 2024.
      769,976 professionals have used our research since 2012.

      Juniper SRX Series Firewall is ranked 18th in Firewalls with 86 reviews while Palo Alto Networks VM-Series is ranked 10th in Firewalls with 53 reviews. Juniper SRX Series Firewall is rated 7.8, while Palo Alto Networks VM-Series is rated 8.6. The top reviewer of Juniper SRX Series Firewall writes "Highly scalable, user-friendly UI, and easy to maintain". On the other hand, the top reviewer of Palo Alto Networks VM-Series writes "Many features are optimized for troubleshooting real-time scenarios, saving a lot of time". Juniper SRX Series Firewall is most compared with Cisco Secure Firewall, Palo Alto Networks WildFire, Netgate pfSense, Palo Alto Networks NG Firewalls and WatchGuard Firebox, whereas Palo Alto Networks VM-Series is most compared with Azure Firewall, Fortinet FortiGate-VM, Cisco Secure Firewall, Palo Alto Networks NG Firewalls and Huawei NGFW. See our Juniper SRX Series Firewall vs. Palo Alto Networks VM-Series report.

      See our list of best Firewalls vendors and best Firewalls vendors.

      We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.