It was a MPLS implementation for a Coal India product.
We have more than 10,000 people using this solution in telecommunication.
It was a MPLS implementation for a Coal India product.
We have more than 10,000 people using this solution in telecommunication.
For the routers, every feature is quite essential and this is a complete router. The firewall applications are scalable.
To compare with Fortinet, Juniper needs to improve their security features.
I have been using this solution for three years.
It's stable.
It's easily scalable.
I would rate technical support 4 out of 5. They're responsive.
It's easy to set up. I would rate it 5 out of 5.
It takes a maximum of 30 minutes to deploy everything.
Two engineers are enough for maintenance because it's pretty stable and the hardware quality is very good.
For a medium-sized organization, the cost for the licensing and implementation of Juniper SRX for 10 users would be about $300-400.
Juniper is lagging behind compared with Fortinet and Cisco.
I would rate this solution 10 out of 10.
If you have the routing solutions and you want to use Juniper as a complementary solution, you could use it. But if you want it mainly for the firewall, I would recommend Fortinet or Cisco instead.
The GUI of the solution is quite good. It's also very different from other solutions. On others, if you need to configure anything, you can do it all from the default gateway. Cisco, for example, has a bit of a more difficult process. Juniper's GUI is easier and it makes configuration easier.
Troubleshooting with the solution is quite easy. If you compare the process to, for example, Fortigate, Juniper is much easier.
The speed of the solution is very good.
The initial setup is very easy.
While the GUI is pretty good on the Juniper side, there can still be tweaks made to it that will make it even better.
I've been using the solution for two years or so.
The stability has been good so far. We haven't had issues with bugs or glitches. It's not a solution that crashes a lot of freezes up. We find it very reliable.
The scalability potential depends on the customer. Some customers are working only on the edge with smaller systems and the other environment is connected to Cisco switches. Some clients mix up switches and use HP or Cisco. Some like ASA, however, that's more expensive. Many go with SRX as an affordable option.
I have reached out to Juniper tech support a couple of times. I recall the experience being good. I got the answers I needed. I've used technical support from Sophos and Cisco in the past, and in comparison, I find Juniper to be quite good. I'd say we are satisfied with the level of support provided.
I've used Cisco and Fortigate solutions, among others, in the past as well. I find Juniper easier to use from a GUI aspect. Cisco is better from a CLI perspective.
We did not find the initial setup to be complex. The implementation was straightforward and simple. It didn't really give us any trouble.
The pricing of the product is pretty good. It's less than Cisco, which can be expensive for some organizations.
Our client is a medium, small branch company. When they purchased this firewall, they understood that they could use it for a couple of years.
I have a client that works with Juniper 4200 and 4300 and they find the solution to be very user-friendly.
Overall, I would recommend the solution as it is easy to use and has a pretty good GUI. Customers really seem to like it.
In general, on a scale from one to ten, I would rate it at an eight.
The Juniper SRX is our edge firewall.
We have three in total. Two of them are set up in an HA pair, and the other is standalone in another city.
This product has definitely not improved the way our organization functions.
I am familiar with Cisco products and when we purchased the Juniper units, they told us that if you know Cisco IOS then Juniper SRX is really easy. It isn't. It would be like saying that if you know English, then Chinese is really easy. The reality is that it's completely different. There's no commonality and the philosophies are different. Everything is different.
We purchased it for the basic firewall features but added UTM a little bit later.
The reliability needs to be improved. We purchased three devices and all three have been replaced under RMA. We've had other problems where they have needed to be rebooted.
A couple of times I've run into the problems where they have to integrate with other systems. The Juniper support really doesn't have a clue about other systems. They know Juniper and if everything is Juniper then it's great. However, we have Windows RADIUS Servers and I need Juniper-specific settings for them. Unfortunately, they're having a real hard time telling me what those should be, and they keep referring back to it being Microsoft, which they don't support. When they say that I need to speak with Microsoft, I remind them that these are things that are defined in the Juniper configurations that I need to set up. They seem to forget that not everybody is exclusively Juniper.
We bought three Juniper SRX345s about four years ago, and we are still using them today.
We have had glitches that necessitating rebooting the device. For example, a couple of times, they just stop routing on certain VLANs, and one time, it was our server VLANs, so our DNS was down and no one could get to anything. People thought that our internet connection down but actually, it was the DNS and the routing to it had been stopped.
We're a relatively small organization so we didn't scale it.
All of the people in the organization are protected by the devices.
I have used technical support quite a bit, and they are really good. I would rate them an eight out of ten. There is almost always room for improvement.
Prior to the Juniper SRX devices, we had some Cisco ASAs. They were reaching end-of-life so we had to replace them.
At the time we were shopping, Cisco was behind in their technologies. Had they kept up with the technology and provided a comparable device at a competitive price, we would have stayed with Cisco.
We hired a contractor to set up the units.
The IT manager and I, being the network admin, are the only ones who touch it. We try to keep the software updated on all of our devices.
My advice to anybody who is implementing this product is to make sure that they fully understand Junos OS. Over the past four years, I have become moderately proficient with Juniper SRX. There still a lot to learn but I also have contractors that I can get assistance from if needed. For example, currently, I'm trying to set up RADIUS and I'm having some problems with it.
In summary, I think that their design philosophy is really good, but the execution leaves a bit to be desired.
I would rate this solution a six out of ten.
Juniper SRX Series Firewall has a lot of opportunities in Bangladesh. The enterprise service is basic, serving as a gateway for Juniper networks. It facilitates network-to-network connectivity and operates as a next-generation firewall. It provides exceptional protection, scalability, and integration of security services.
The main features are safeguarding their data and ensuring robust security services for organizational data.
Both network and cloud environments require security measures such as traffic protection, intrusion prevention, and antivirus solutions to ensure shared protection.
In some cases, customers encounter issues related to network interfaces, while others prioritize security concerns. These aspects are of utmost importance from the customer's perspective. The customers value stability and seek high performance.
I have been using Juniper SRX Series Firewall for three years.
The solution is highly stable. I rate the stability a nine out of ten.
The solution is very scalable and I would rate the scalability a ten out of ten.
Ultimately, when customers encounter challenges, they reach out to us for assistance. We then establish a schedule and allocate a skilled technical professional to provide support. We initiate the process by creating a ticket for Juniper Service Centers' service team. The service team is very good and the response rate is quite fast.
Positive
The initial setup is easy and the deployment takes one week. I rate the setup a ten out of ten.
The pricing appears to be cost-effective, and the cost is quite reasonable within Bangladesh and other countries, though it may vary based on global currency fluctuations. Currently, we have challenges related to product delivery and meeting the delivery schedule. It would be beneficial if we could improve the production lead time, making it shorter.
I would rate the overall solution a ten out of ten.
The solution is used for security purposes.
The security features and the model collection are the most valuable.
I think improvement can be done to the security part, particularly the UDM, and the product should have a user-friendly interface similar to FortiGate.
It should have the Azure RBAC in the next release.
I have been using this solution for more than ten years.
The product is quite stable. I would give it a seven out of ten.
We are using a hardware appliance and we have to choose a size based on our business. It is not like a software application, like in a cloud model.
I would rate the scalability an eight out of ten.
The customer support team is good. I recommend contacting them if any support is needed.
We are using Verax and also FortiGate products. We use them simultaneously.
The installation was not very complex, it was rather easy. It took around one hour to complete the installation.
We evaluated the Cisco 1400 series.
I would give it a seven out of ten.
I am a teacher and the solution is used as a router for my students' laboratory exercises. I have the firewall function switched off and the solution operates as a main router for our very limited traffic.
The solution is stable, inexpensive, and works well for medium size companies.
The solution's configurations and syntax are specific and more complicated than other platforms. Compared to Cisco, the solution is not intuitive.
I have been using the solution for two years.
The solution is stable.
The solution is scalable and I rate it a ten out of ten.
I have not used support services because I rely on experienced colleagues for answers.
The solution is quite simple to set up if you spend a few hours learning the syntax. Based on experience level, it can be implemented in a few hours.
The pricing is very inexpensive which is the main reason I bought the solution. One device costs around 50 EUR through the University's vendor who is modernizing our network.
I rate this solution a seven out of ten.
We are a financial institution and we use Juniper SRX routers to support our credit team, as well as our branch network. I am part of the IT department.
The Juniper router has a firewall built-in, which is a nice security enhancement for our organization. It adds a bit more value.
The support is very good.
The range of devices should be expanded to include those suitable for a small implementation. Juniper does not have any lower-priced SRX models, useful perhaps for a single ATM or a single bank branch. Having such a model at a reasonable price would be good.
In the time that we have used Juniper, we have not seen them improve their product line. If you look at Cisco, they have all kinds of network products. They have routers, switches, and firewalls. But with Juniper, they are not coming up with different kinds of products. They should be including more firewalls and other products. This is an area that Juniper should improve in general.
In Bangladesh, there is a very limited number of partners. The problem with this is that there is a monopoly, and I think that they should end this by increasing the number of local partners.
We have been working with Juniper SRX routers for more than five years.
Juniper SRX is a stable product.
This is a scalable router. In our organization, there are almost 3,000 people using the Juniper product. They have varied roles.
We plan to increase our use of Juniper products in the future, although it depends on input from management.
The technical support is quite good.
Currently, I am also using a Cisco product. The split between Cisco and Juniper devices is approximately 50/50.
Compared to Cisco, the price for Juniper SRX routers is very reasonable. The reason that we are switching to Juniper is because of the cost.
The initial setup is easy.
As we have been using this product for quite a long time, we are used to it and our resources have become very skilled with Juniper devices. The deployment does not take very long.
Our in-house network team is responsible for deployment.
There are six people in our network team. They are network administrators.
Juniper products provide a good return on investment.
This is a cost-effective solution because the price is very reasonable, and some of the features are available at no extra cost. That's the beauty of Juniper.
We have a perpetual license, which comes with the device. Once we purchase it, we can continue the service for three years. When the three-year warranty expires, we have to sign a new agreement with the OEM.
We are looking to gain some experience in using Mikrotik routers and switches.
My advice for anybody who is implementing Juniper is to enroll in the training that they have available. Train first, then deploy. That will make it much easier.
Overall, I think that this is quite a good product. However, they need to expand their range of device offerings.
I would rate Juniper SRX a seven out of ten.
We are using this solution mainly for the NPCs and the firewall of the mobile data customers. We are using it to protect the ISP of the mobile data customers: 2G, 3G, and 4G customers.
In terms of features, we are using Source NAT.
The virtualization feature: Sometimes customers are requesting a private connection using mobile data when they are connecting to remote sites.
The Juniper SRX product needs to improve in terms of innovation. E.g., Checkpoint comes with a monitoring solution embedded in its product, as well as providing good reports. Checkpoint also does analysis by tracking the logs and letting you know when you are under attack. What Juniper has today in comparison is not so good.
Juniper only has limited reports, such as memory, capacity, data, and traffic.
Since we have deployed the product, we have had two or three minor issues.
We have something like 12 million customers (mobile data customers).
Sometimes, it is difficult to contact the Juniper support because we did not purchase the support package, as it was too expensive. We are using a local reseller instead. Sometimes, when we have had issues, it can take one to three hours for resolution, which is not good at all based on our company standard. However, once we have the right thing connected on the device, then it's very fast.
I would rate the technical support as a seven out of ten. The support is skilled, but the cost is expensive.
We previously used Cisco ASA. The results were not good.
The initial setup is straightforward. We had the help of the local provider. So, it was very straightforward.
Even now, when I compare the initial setup to Cisco, the implementation of Juniper SRX is very simple.
To finish the implementation, we had the help of the local provider, Ericsson.
From the design phase up to the implementation phase, it took more than one month per site. The time to validate the design documents and change, then doing those changes, approve those changes and implementing them. Because we have two sites, it was somewhere around three months.
After the acquisition phase, we discussed the plan and the design document. We did the architecture and design document with the vendor. Before going into the implementation phase, we have to validate all our documents for the high-level and low-level designs. The operational teams are also validating these documents.
Once we have all those documents validated, we request the approval for change. We have a committee who analyzes the documentation. We analyze the work that we are planning to do and validate the changes for a specific time.
We need to look if there any impact on the customer side, do we need to present it to the customer before making the change, and what is the plan for monitoring after the change?
The direct support with Juniper is expensive. When you stop using the solution and miss one year of payments, if you want the support back on a specific node, they ask you to pay for the year that you haven't used the node.
We tried to move our mobile data firewall from Juniper SRX to Cisco ASA. What we found was that Cisco did not performing well at all. We were very disappointed by the Cisco solution. With the Cisco solution, we had more memory issues with the same amount of traffic. With Juniper SRX, it just needs an upgrade to carry the traffic.
We have approved vendors in every industry. We cannot deviate and chose any vendor that we want. We can only select vendors from our approved list. The two vendors on that list for this industry include Cisco and Juniper, though recently Huawei was added.
Make sure to have skilled local support.
We are planning to move to the bigger version of Juniper SRX later this year (SRX5800). We are also planning to move to IPv6.