Juniper SRX Series Firewall Reviews

Fast packet mover, uptime.

Stability in a heavy Microsoft environment, RPC communication.

5 years.

Numerous deplyoment issues, very early product at the time.

Numerous deployment issues, very early product at the time.

No scalability issues at all, very good for scalability.

Very impressive, but you have to know the inner workings of JTAC.

Very impressive, but you have to know the inner workings of JTAC. Juniper has a very effective 24/7 Follow The Sun.

Juniper SSG, switched because of capacity and change of focus from Juniper.

Be aware if you need RPC. Out of 18 software versions only 2 has been without issues with RPC.

The solution can scale very well.

It's quite a user-friendly solution and I find it to be easy to navigate. 

The initial setup is very easy.

The stability has been quite good. 

Technical support has been quite helpful. 

The pricing has become very reasonable and we find them to be competitive.

The reporting is lacking. it's an aspect of the solution I would like to see improved upon in the future. 

The solution isn't as present in the market as Cisco and Fortigate. They need to do a better job of marketing themselves and becoming more visible. 

I've used the solution for a number of years at this point. I started using it around 2012 or 2013. It's been a while. 

The stability has been good. Over the years there have been no issues with crashing or freezing and there are no bugs or glitches. 

The product scales very well. It's not a problem if your company needs to expand it. 

In our office, we have about 120 people protected under Juniper. However, we have proposed it to many customers and some clients use it as well. Some of them are quite sizeable businesses. 

We've used technical support in the past and have been satisfied with the level of service they provide. they are helpful and responsive. 

I'm also familiar with Cisco and Fortigate.

The initial setup was straightforward. This is due to the fact that we have a decent Juniper-certified team.

We are integrators and can install it for our clients if they need us to. 

We pay an annual licensing fee. 

In the past, they would sometimes be more expensive than Fortinet, however, we have noticed that their pricing has come down a bit and now they are very reasonable. 

We are a reseller and systems integrator. We are also a customer. 

In the office, we have Juniper SRX firewalls. We have not activated the SD-WAN.

I would recommend the solution to other users and companies. 

I'd rate the solution at an eight out of ten overall. 

The primary use case of this solution is as a next generation firewall  If I have a customer who needs a good router for the office, but they're not in a complicated situation with VPNs and the like, the SRX is great.

This is a flexible platform, it's great as an inter-segmentation firewall or border or arch-firewall. The solution has a solid position on the market as a security device. The most important feature in the SRX is the application visibility and control because it gives the user a lot of information about the application in the traffic. Juniper SRX is great as a smaller router for smaller offices.

I think with this Juniper product, the CPU switch could be improved for a better overall performance of traffic flow. I'd also like to see a threat intelligence feed which would hopefully monitor the network traffic flowing through the SRX to detect malware and other content.

I've been using this solution for a month. 

The overall stability is good. 

Some models are scalable but you have to have VMs to modify resources to get better performance. 

We have premium support from the company and we provide support to our customers. 

I don't deal with implementation but in a typical project we have sale, pre-sales and deployment engineers. If the project is really big, we also use project managers. There would be four people involved in a typical project. If the product requires integration of different technologies like web application firewalls, we bring in more engineers specialized in different type of technologies to integrate them together. 

I really like the architecture of the product, but it's not a leader in the market. It's a very good platform, but if the user needs more performance on the edge, I would prefer something else. If a user needs a more sophisticated next generation firewall feature or threat intelligence themes, I'm not sure they'll get that with SRX devices. I think there's a gap there. I think it's a good solution but not for everyone. 

I rate this solution a seven out of 10. 

Stateful inspection , IPSEC and NAT as per our customers' design. The boxes are used as SecGW, Gi and SGi Firewall, those are the features usually needed in 3G/4G context.

It improved in term of security.

Clustering fab interface doesn't support bandwidth aggregation. This limitation caused a huge design change in our network.

I've used the solution for eight years.

Yes, some bugs in module restart and cluster failover, but without outage.

Yes, fab interface doesn't support bandwidth aggregation

9 out of 10.

No, we didn't.

Not complex.

We didn’t use any other solutions so I can’t compare this to others.

No.

We are satisfied with its stability , but we don’t advise others to implement a cluster design other than Active/Passive.

The solution is primarily used in two ways: to protect our three data centers and servers. It works at protecting both areas from malicious attacks.

We have worked with the solution for a while and therefore have become quite versed in it. We're comfortable with its tech and have a good understanding of how best to use it. 

The initial setup was easy.

In terms of usability, there are good forums on offer and they've got a lot of technical documentation for everything. 

Technical support is good. They quickly respond, and they even have local help here. They can actually give you an answer very quickly.

The solution has been stable over the years.

The capacity can be limiting. We have outgrown its capacity. You can only scale up to a certain extent, depending on the device purchased. 

There are cheaper options on the market.

The reporting and alerts could be improved. If you had alerts, whereby you can have things like intrusion detection systems quickly alerting the security managers of a breach would be helpful. 

They need to work on the user interface. Most tasks are done by commands, and if you don't have experience using the command line, it's terrible. They should make it easier.

We've only been using the latest solution for a few days. It's quite new to us. It replaced a previous version, which we had for five years. 

The stability is quite good. It's very reliable as long as your power is okay. It's a good device and good software and is a great piece of equipment, however, if your power has any issues, then you are likely to lose it after power surges.

Scalability is limited and you need the right sizing. In our case, our device has reached the end of life, and there are no more plugins that we can actually use.

We're quite satisfied with technical support. They are very helpful and responsive and there is good documentation.

We've also used Cyberoam, which is now Sophos. 

The initial setup was very straightforward. It's an easy process and not very difficult or complex. 

The license we have now is perpetual, however, going forward, with a newer version, we're looking at annual or bi-annual licensing. 

The cost is not cheap or overly expensive. It's middle of the road. 

We are just a customer.

It's a good device overall. I'd recommend it to other users and companies. As long as a customer is buying something that is supported and has a good lifespan, they should be happy.

I'd rate the solution at an eight out of ten.

I used this solution in my previous organization. We used it to protect data centers and some private resources.

What I like the most about Juniper is that they have the same CLI on all routers, switches, and firewalls. If you have worked with any Juniper device, such as a Juniper router, you will be able to work with an SRX, which is really cool. It is a nice experience to work with every device of Juniper, not only firewalls.

As a networking person, I don't really have any major issues with this device. Based on my experience of using it in a cluster, it could be more stable. I had an incident when one of the SRXs in a cluster couldn't learn ARP.

It is a good solution, but firewalls don't seem to be an area of development for Juniper. They are focusing on data centers, routers, and switches, not firewalls.

Its stability isn't bad. In two years of supporting this device, I had only one issue. I had an incident when one of the SRXs in a cluster couldn't learn ARP, and the request didn't move between cluster units. I had to fix this manually, which wasn't really cool because I had to get up in the night because of this incident.

We weren't using it in a high load infrastructure.

I didn't really need their support. I only needed their support for the demo of their CSR product because it wasn't working as mentioned in their documents.

Its initial setup is straightforward. If you are a network engineer with some experience, you will be able to configure it easily. I have configured many Juniper firewalls, and it was really easy. Configuring the device isn't a problem. The main problem is preparing the environment and the infrastructure for your device.

It took more than one year to use this solution in production because I used a lot of features in my demo infrastructure, such as VSRX, to demonstrate this solution to potential and existing customers.

I like the SRX series. In fact, I like all products from Juniper. 

I would rate Juniper SRX an eight out of ten.

One valuable feature is the reliability of the Junos OS. However, we did not make full use of the UTM functionality.

We have experienced more dependability.

Management: Junos Space Security Director is not great and there is no global database of objects.

We have been using the product for about six years.

We did not encounter any issues with stability.

The clustering of a maximum of two nodes limited some architectural options.

Support is what the end customer buys. Unfortunately, it's not always from Juniper.

We migrated from Juniper Screen OS to Junos. We are leaving Juniper now as their focus on security seems to have dropped.

The setup was no more difficult than switching to any other firewall implementation.

Be wary of Juniper's stake in the security realm. If they are ramping up again and are again competing with Check Point, Palo Alto, and FortiGate, then they are worthy of consideration. It is also worth your consideration if your network is Juniper based and you have a secondary firewall vendor.

We use it for the firewall.

It's fine, and it's good. It's very stable.

It could be more secure.

I have been using Juniper SRX for about five years.

Very stable. These firewalls are stable.

We had Cisco, but when comparing the price, Juniper SRX was cheaper.

I would recommend this solution to new users.

On a scale from one to ten, I would give Juniper SRX an eight.