Juniper Contrail SD-WAN vs Juniper Session Smart Router comparison

Juniper Contrail SD-WAN vs. Juniper Session Smart Router

Download the complete report

Helped 885,880 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of April 2026, in the Software Defined WAN (SD-WAN) Solutions category, the mindshare of Fortinet FortiGate is 12.3%, down from 20.0% compared to the previous year. The mindshare of Juniper Contrail SD-WAN is 1.6%, up from 0.7% compared to the previous year. The mindshare of Juniper Session Smart Router is 2.4%, down from 3.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Software Defined WAN (SD-WAN) Solutions Mindshare Distribution
Product	Mindshare (%)
Fortinet FortiGate	12.3%
Juniper Session Smart Router	2.4%
Juniper Contrail SD-WAN	1.6%
Other	83.7%

Software Defined WAN (SD-WAN) Solutions

Featured Reviews

Abhinandan Yadav

Network Security Engineer at Arrow PC Network Pvt Ltd

Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches

Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.

Read full review

Ivan Sandano

Solution Architect at Posteo

Has automation features but provisioning new branches or making changes to the existing ones is difficult

I've worked with several SD-WAN solutions over the past few years, and the product felt more like an automated provisioning tool. Unlike solutions from Palo Alto or other SD-WANs orchestrated by a SaaS solution, Juniper Contrail SD-WAN already had the files and built their SaaS to orchestrate the configuration. Initially, you didn't do much, but then it started adding some routing capabilities. The automation features do help with network operations. Manually configuring SD-WAN is complicated, so the automation simplifies that. However, the initial SD-WAN solution had many limitations, particularly regarding its features. At some point, the tool began looking for other solutions and bought the 128T, which led to implementing a different SD-WAN approach. It also acquired another company for its session smart router, and then it began to develop the exact SD-WAN solution on the Mist Cloud.

Read full review

Bashir Bashir

IT Manager at Vegol

Real-time visibility has strengthened network control and supports long-term enterprise use

Juniper Session Smart Router could improve its documentation to become more competitive. It has very little documentation, and you have to rely mainly so much on support to do something, which I feel should not be that way. Otherwise, functionality-wise, I feel it is perfect. It is way high and expensive; that is why most of my clients on the lower end, I cannot suggest Juniper. It is too pricey. Of late, I am seeing them changing the interface; the UI is changing, and that is a good thing. But still, I feel you can standardize the syntax to be in line with the rest of them.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"In terms of cost, features, and security, everything is top-notch."

"The beauty is the price performance ratio is great with FortiGate, as it provides all the features we need and the price is comparable with other firewalls, making it quite competitive with firewalls that have similar features."

"It's very easy to set up, it's very easy to make policies and, for an organization, that means you don't need IT expert in firewalls. You just need to have somebody who knows a little bit of IT, and that's it. With other products, you need someone with a "Masters" degree in firewalls."

"I like that they have given me a solution at a fair price."

"The dashboard I have found the most valuable in Fortinet FortiGate."

"The performance is good."

"We like signature-based anomaly detection and zero-day protection features."

"If you use this solution, within three years, you will get your investment back."

More Fortinet FortiGate pros

"I would appreciate your thoughts about the security capabilities of Juniper Contrail SD-WAN, particularly its built-in features."

"The solution is more specific about what's happening since it explains where the problem may lie and points out areas where there is a problem. So, we like that it provides more visibility."

"My customers use the solution to have better control and knowledge about the applications inside ONE Access. It also helps them cut costs by reducing MPLs and using better internet access from FTTH."

"Juniper has layer four to seven protection; it gives you that level of visibility to understand what's going on between layer four and layer seven and helps us reduce bandwidth compared to competitors' MPLS circuits while providing a strong platform for cloud migration to AWS and GCP without any sort of extra bandwidth from the MPLS circuits."

"The support is very good from Juniper and from the local distributors."

"I've worked with several SD-WAN solutions over the past few years, and the product felt more like an automated provisioning tool. Unlike solutions from Palo Alto or other SD-WANs orchestrated by a SaaS solution, Juniper Contrail SD-WAN already had the files and built their SaaS to orchestrate the configuration. Initially, you didn't do much, but then it started adding some routing capabilities."

"JUNIPER CDWAN ROI is excellent as product has long life cycle and therefore supported with no need to buy replacement products."

"It gives you that level of visibility to understand what's going on between layer four and layer seven."

More Juniper Contrail SD-WAN pros

"For telecom companies, I think zero-trust segmentation is the way to go because if you allow anything that you do not understand, then it becomes a problem."

"Customer service is very prompt."

"As compared to the other major vendors in the SD-WAN market, such as VeloCloud, Cisco, and others, the tunnel-free and secure vector routing technology is its major USP, which gives plenty of room to discuss with the customer why IPSec from 1998 is a bit outdated."

"Because we are talking directly to engineers in the US, the support is usually the best you can possibly get."

"The most valuable feature of Juniper Session Smart Router is its unique SDR channel."

"They provided us with a customized product according to our requirements."

"The solution is especially Session's smart, application-aware, AI-based."

"The best feature is the easiest way to deploy configuration and also back up them, and also to roll back quickly if there's an incident."

Cons

"The visibility of the network can be better. The GUI can be improved for better visibility of the network flow. Other solutions have better GUI in terms of network visibility."

"In an incident, after a restart, Fortinet FortiGate did not connect to FortiGuard servers. Due to that reason, on the customer end, all websites got blocked. I don't know why this happened. The firewall of a bank in Sri Lanka rebooted yesterday, and after that, FortiGuard servers did not connect properly, blocking all customer environment websites."

"The solution could be more evenly structured."

"I don't like that anything more than very basic reporting is not included."

"The SD-WAN functionality is a bit overly complicated and not fully documented."

"It would be nice if FortiGate incorporated some built-in endpoint protection features. I would also like a built-in SOC dashboard for managing multiple Fortinet firewalls."

"Fortinet FortiGate SWG could improve the price, it is expensive."

"The biggest "gotcha" is that if the client purchases what they call the UTM shared bundle, which has unified threat management on both, it's not as easy to manage if you have more than one firewall."

More Fortinet FortiGate cons

"The training could be better. When it comes to the demo dashboard capability, I feel like it could be much easier for our customers to use. Our last customer complained about this."

"Implementing new branches or changing existing ones in Juniper Contrail SD-WAN wasn't as straightforward as with other solutions like Meraki SD-WAN, which is almost plug-and-play with its zero-touch provisioning. In Juniper Contrail SD-WAN, it was more challenging."

"The solution installs similarly to competitors. It is not more difficult or easier. However, it could be easier and take less time for the installation."

"The solution is expensive. Its support can be better."

"The training could be better. When it comes to the demo dashboard capability, I feel like it could be much easier for our customers to use."

"The solution installs similarly to competitors. It is not more difficult or easier. However, it could be easier and take less time for the installation."

"Areas for improvement in the Juniper Contrail SD-WAN solution include the on-premises deployment process."

"The only issue was the switch we got, which was a little problematic because it was PoC equipment, and we had a little problem with that."

"Juniper Session Smart Router could be better in terms of software performance."

"Juniper Session Smart Router could improve its documentation to become more competitive. It has very little documentation, and you have to rely mainly so much on support to do something, which I feel should not be that way."

"Regarding improvement, we still need to see what it can do."

"I found some weaknesses on their hardware. They are sometimes breaking very often."

"Juniper Session Smart Router can improve the integration for Wi-Fi devices and add additional Sassy deployments."

"The UI of the SSR conductor is the main part where improvements can be done. Today, for every configuration step, you have to do a series of clicks. What we are missing there are wizards. For example, I have two applications, and I want one application to be prioritized against the other. In such a case, a wizard for assigning policies to a service without configuring each step by hand would be very helpful. There should be an overhaul of the GUI of the conductor. The functionality they have got in the Mist portal should be baked into the conductor itself. It would be really great, but as we all know, that won't happen."

"The UI of the SSR conductor is the main part where improvements can be done. Today, for every configuration step, you have to do a series of clicks."

Pricing and Cost Advice

"The solution could be better priced."

"It is expensive. You need to pay for the subscription every year, which is very expensive. The subscription includes technical support and hardware exchange in case of failure."

"Fortinet FortiGate SWG is an affordable solution."

"The pricing is fair."

"While Fortinet FortiGate has a higher price point compared to Sophos XG, its user-friendly interface justifies the cost."

"It is not expensive as compared to Cisco."

"The product is not very expensive."

"Our licensing costs are on a yearly basis."

More Fortinet FortiGate pricing and cost advice

"The cost of the solution is a little expensive. The hardware is a one-time purchase fee and the software is purchased on an annual basis. There are additional costs for other software features that are available which are on an annual basis, such as extra capacity."

"They are neither very expensive nor cheap. So, we can consider its pricing somewhere in the middle."

"The licensing structure is very flexible."

"It is a simple bandwidth-based license and the orchestration comes bundled with the solution by default."

"We are currently renegotiating the offer for the licenses and the license bundle model. The license for an ISP has to be different from the license for an end customer. This is something we are currently renegotiating with Juniper, but, of course, the pricing for the licensing is always an issue when you want to get more customers."

See which vendors are best for you

Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.

See recommendations

885,880 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

11%

Comms Service Provider

10%

Manufacturing Company

Financial Services Firm

14%

Healthcare Company

10%

Comms Service Provider

Media Company

Manufacturing Company

21%

Comms Service Provider

12%

Computer Software Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	364
Midsize Enterprise	135
Large Enterprise	191

By reviewers
Company Size	Count
Small Business	7
Large Enterprise	1

No data available

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What do you like most about Juniper Contrail SD-WAN?

I've worked with several SD-WAN solutions over the past few years, and the product felt more like an automated provis...

What needs improvement with Juniper Contrail SD-WAN?

There might be additional features that would be beneficial to have in the Juniper Contrail SD-WAN solution, includin...

What is your primary use case for Juniper Contrail SD-WAN?

Some time back, I conducted research on our website, PeerSpot.com, about IT solutions, specifically about Huawei Wire...

What needs improvement with Juniper Session Smart Router?

Juniper Session Smart Router could improve its documentation to become more competitive. It has very little documenta...

What is your primary use case for Juniper Session Smart Router?

I have not tested Sophos on a larger scale, as I use Sophos in a very office environment and Juniper in telecom. Beca...

What advice do you have for others considering Juniper Session Smart Router?

On a scale of one to ten, I rate the solution nine.

Sophos Firewall vs Fortinet FortiGate

Comparisons

Compared 18% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 12% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 4% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 4% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

VMware VeloCloud SD-WAN vs Juniper Contrail SD-WAN

Compared 11% of the time

Cisco Meraki vMX vs Juniper Contrail SD-WAN

Compared 8% of the time

Cato SASE Cloud Platform vs Juniper Contrail SD-WAN

Compared 8% of the time

Juniper Mist Edge vs Juniper Contrail SD-WAN

Compared 7% of the time

Barracuda CloudGen Firewall vs Juniper Contrail SD-WAN

Compared 6% of the time

More Juniper Contrail SD-WAN Competitors

Cisco Catalyst SD-WAN vs Juniper Session Smart Router

Compared 12% of the time

VMware VeloCloud SD-WAN vs Juniper Session Smart Router

Compared 8% of the time

NFX Series Network Services Platform vs Juniper Session Smart Router

Compared 7% of the time

Aruba EdgeConnect SD-WAN Platform vs Juniper Session Smart Router

Compared 7% of the time

Cloudflare One vs Juniper Session Smart Router

Compared 4% of the time

More Juniper Session Smart Router Competitors

Product Reports

Download Fortinet FortiGate product report

Fortinet FortiGate

April 2026

Juniper Contrail SD-WAN

Download Juniper Contrail SD-WAN product report

Routers

Download Juniper Session Smart Router product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

Contrail SD-WAN

128T Networking Platform, 128 Technology SD-WAN, Juniper SSR Series

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Contrail SD-WAN delivers a simple, automated multicloud SD-WAN. It enables you to create an evolvable architecture to simplify growth, from secure routers to SD-WAN, SD-Branch, and beyond. It automates the WAN edge across Juniper virtual cloud endpoints and on-premises next-generation firewall or universal CPE platforms. And it provisions and enforces multilevel security policy at scale, across multiple clouds and enterprise sites with diverse topologies.

Juniper

The 128T Networking Platform (128T) natively provides network-based security, control, and insight across data centers, wide-area networks (WAN), and edge locations for enterprises, service providers, and cloud companies alike. 128T is reshaping the way organizations design, deploy, and operate real-world networks by making them dramatically simpler, smarter, and more secure — it’s going to fix the router — and ultimately the network — as we know it.

Juniper

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Allied Pinnacle

Revation Systems

Juniper Contrail SD-WAN vs. Juniper Session Smart Router