On Apr 19, 2010, at 7:32 PM, Jeffrey Negro wrote:
Has anyone on Nanog had any hands on experience with the lower end of the new SRX series Junipers? We're looking to purchase two new firewalls, and I'm debating going with SSG series or to make the jump to the SRX line. Any input, especially about the learning curve jumping from ScreenOS to JunOS would be greatly appreciated. Thank you in advance.
My general take: Hardware == Well built and designed, very robust. The only thing 2 things I'd like to see are: 1) a field-replaceable CF card like the J- series (bonus points if there's a backup like the J's as well!) and 2) a 2-port T1 mPIM card. Software == Not horrible but far from great. We have issues with: Ethernet switching not functioning correctly, IPv6 not wanting to work on Enet switched VLANs, IP-IP tunnels acting very "weird", gmd crashing when trying to commit randomly, and lack of pretty much all IPv6 security features. I'd like to see Juniper really focus on getting the "branch" SRX software up-to-snuff especially in regards to IPv6 security features. I think they're working pretty hard on it but I haven't seen the fruits of their labor yet!