Juniper SRX Review
Zones make it easy to logically organize security polices


How has it helped my organization?

Thanks to the well-structured and organized security policies, we decreased operations time to create/update/delete our security policies.

What is most valuable?

Security policies in combination with zones: It is very easy to organize the security polices in a logical structure.

CLI: Junos CLI is very easy to use, and it is also very easy to find back items in the configuration and to change them.

Commit: You can update the whole configuration without affecting the production. The new configuration will be loaded once the command "Commit" is submitted. You can also do a Commit confirmed to automatically roll back to the previous config after X minutes. 

What needs improvement?

The visibility/reporting could be better. To see something, you have to export the log to a syslog and then process with another product.

For how long have I used the solution?

More than five years.

What do I think about the stability of the solution?

We have used it for years without any stability issues.

What do I think about the scalability of the solution?

We haven't encountered scalability issues.

How is customer service and technical support?

Technical support is pretty good. I would rate it eight out of 10.

Which solutions did we use previously?

I previously used a Netscreen ISG1000 firewall. I switched because the ISG was end-of-life and Netscreen was bought by Juniper.

How was the initial setup?

Initial setup was complex because Junos is totally different than ScreenOS. But with some introductory courses and some googling it becomes much easier.

What's my experience with pricing, setup cost, and licensing?

I’m just the tech, I didn’t take part in the price negotiation. I would say about $20,000 for a SRX650 with IDP licence.

Which other solutions did I evaluate?

No, we didn't evaluate other options. This was a natural way for us to migrate from ISG to SRX.

What other advice do I have?

Be sure you know what you are looking for. The SRX650 is a perfect product for a small datacenter, not for a branch office where you need lots of visibility.

Implement your structure (zones) first, on paper, before starting to configure it.

Disclosure: I am a real user, and this review is based on my own experience and opinions.

Add a Comment

Guest
Why do you like it?

Sign Up with Email