Juniper SRX Series Firewall Reviews

We have a lot of virtual access in the public or private cloud, as well as virtualization on hardware devices.

The most valuable features are the security cloud ACP and KPP features.

Juniper SRX Series Firewall is a primary network company, but its security portfolio is not a market leader. Their primary responsibility is the features that provide their products. Perhaps taking a leap and developing some features from scratch could be a way to improve.

The centralized management has room for improvement because it is outdated and not easy to integrate.

The technical support has room for improvement.

I have been using the solution for five years.

I give the stability an eight out of ten.

In my experience, Juniper SRX Series Firewall is the most stable compared to the primary Fortinet and Palo Alto that I am also used to working with.

When deploying the cluster, we cannot create it anywhere, such as in Palo Alto or Check Point. We must scale appropriately, adding more devices with a load balancer or similar. Depending on the size of the area, it can be highly scalable.

Our customers range from small all the way up to governments.

The technical support is not as good as it used to be, but it is comparable to that of other vendors such as Cisco. We have found that when we contact support, we often end up dealing with the same technician and have to repeat the same procedures before we can be referred to a higher level of technical support.

I also use Palo Alto and Fortinet. Juniper has better firewall-level network functionality.

The initial setup is dependent on how much experience one has with the command line. If one is familiar with the command line, the initial setup is relatively simple. However, if one is used to working in a management setting, the initial setup can be more challenging.

The implementation time depends on the number of clusters required.

The first step of implementation is to unplug and upgrade the devices, followed by configuration before moving into production.

We implement the solution for our customers.

I find the price to be reasonable for an enterprise-level solution. Juniper has recently changed its licensing model. The licenses are annual.

The advanced security functions are an additional fee.

I give the solution an eight out of ten.

I suggest not relying on the management and primary CLI.

We are using Juniper SRX as a network firewall.

The most valuable feature of Juniper SRX is that it is plug-and-play. Additionally, it has a lot of capabilities in one device.

Juniper SRX could improve by adding an IPX feature.

I have been using Juniper SRX for approximately three years.

We have less than 50 percent of our company using Juniper SRX.

We have approximately 10 people using this solution.

I have not contacted the support from Juniper SRX.

I use Fortinet and Cisco solutions.

I rate Juniper SRX a nine out of ten.

The GUI of the solution is quite good. It's also very different from other solutions. On others, if you need to configure anything, you can do it all from the default gateway. Cisco, for example, has a bit of a more difficult process. Juniper's GUI is easier and it makes configuration easier.

Troubleshooting with the solution is quite easy. If you compare the process to, for example, Fortigate, Juniper is much easier.

The speed of the solution is very good.

The initial setup is very easy.

While the GUI is pretty good on the Juniper side, there can still be tweaks made to it that will make it even better.

I've been using the solution for two years or so.

The stability has been good so far. We haven't had issues with bugs or glitches. It's not a solution that crashes a lot of freezes up. We find it very reliable.

The scalability potential depends on the customer. Some customers are working only on the edge with smaller systems and the other environment is connected to Cisco switches. Some clients mix up switches and use HP or Cisco. Some like ASA, however, that's more expensive. Many go with SRX as an affordable option. 

I have reached out to Juniper tech support a couple of times. I recall the experience being good. I got the answers I needed. I've used technical support from Sophos and Cisco in the past, and in comparison, I find Juniper to be quite good. I'd say we are satisfied with the level of support provided. 

I've used Cisco and Fortigate solutions, among others, in the past as well. I find Juniper easier to use from a GUI aspect. Cisco is better from a CLI perspective.

We did not find the initial setup to be complex. The implementation was straightforward and simple. It didn't really give us any trouble.

The pricing of the product is pretty good. It's less than Cisco, which can be expensive for some organizations.

Our client is a medium, small branch company. When they purchased this firewall, they understood that they could use it for a couple of years.

I have a client that works with Juniper 4200 and 4300 and they find the solution to be very user-friendly.

Overall, I would recommend the solution as it is easy to use and has a pretty good GUI. Customers really seem to like it.

In general, on a scale from one to ten, I would rate it at an eight.

As a value-added reseller, we resell Juniper hardware to our clients. Its use cases are related to the standard network architecture. It is a part of the fabric that Juniper uses for their switching.

It is a part of the infrastructure when we're selling Juniper. That's what clients are familiar with and that's what they rely on. 

It does have its nuances in terms of deployment. There are always areas to make something easier or more intuitive or make the system auto-negotiate more with existing hardware.

I have been using this solution since it got launched. It has been around five years or so.

For the most part, it is no more difficult than anything else that's out there right now.

Most of the feedback that I've got from my clients related to Juniper's support is that their support is okay. It is not spectacular. It is just okay.

It is easy. It is pretty much plug-and-play. This is why people like Juniper.

Its price is comparable to the competition.

I would advise definitely taking some training if you're not really familiar with the interface or the GUI. Brush up on it before you dig into it because a lot of people know Aruba or Cisco, but you need to be familiar with it. Don't just buy it because you read some marketing material on it. You actually need to know how to deploy it.

I would rate it a seven out of ten.

The Juniper SRX is our edge firewall.

We have three in total. Two of them are set up in an HA pair, and the other is standalone in another city.

This product has definitely not improved the way our organization functions.

I am familiar with Cisco products and when we purchased the Juniper units, they told us that if you know Cisco IOS then Juniper SRX is really easy. It isn't. It would be like saying that if you know English, then Chinese is really easy. The reality is that it's completely different. There's no commonality and the philosophies are different. Everything is different.

We purchased it for the basic firewall features but added UTM a little bit later.

The reliability needs to be improved. We purchased three devices and all three have been replaced under RMA. We've had other problems where they have needed to be rebooted.

A couple of times I've run into the problems where they have to integrate with other systems. The Juniper support really doesn't have a clue about other systems. They know Juniper and if everything is Juniper then it's great. However, we have Windows RADIUS Servers and I need Juniper-specific settings for them. Unfortunately, they're having a real hard time telling me what those should be, and they keep referring back to it being Microsoft, which they don't support. When they say that I need to speak with Microsoft, I remind them that these are things that are defined in the Juniper configurations that I need to set up. They seem to forget that not everybody is exclusively Juniper.

We bought three Juniper SRX345s about four years ago, and we are still using them today.

We have had glitches that necessitating rebooting the device. For example, a couple of times, they just stop routing on certain VLANs, and one time, it was our server VLANs, so our DNS was down and no one could get to anything. People thought that our internet connection down but actually, it was the DNS and the routing to it had been stopped.

We're a relatively small organization so we didn't scale it.

All of the people in the organization are protected by the devices.

I have used technical support quite a bit, and they are really good. I would rate them an eight out of ten. There is almost always room for improvement.

Prior to the Juniper SRX devices, we had some Cisco ASAs. They were reaching end-of-life so we had to replace them.

At the time we were shopping, Cisco was behind in their technologies. Had they kept up with the technology and provided a comparable device at a competitive price, we would have stayed with Cisco.

We hired a contractor to set up the units.

The IT manager and I, being the network admin, are the only ones who touch it. We try to keep the software updated on all of our devices.

My advice to anybody who is implementing this product is to make sure that they fully understand Junos OS. Over the past four years, I have become moderately proficient with Juniper SRX. There still a lot to learn but I also have contractors that I can get assistance from if needed. For example, currently, I'm trying to set up RADIUS and I'm having some problems with it.

In summary, I think that their design philosophy is really good, but the execution leaves a bit to be desired.

I would rate this solution a six out of ten.

The solution is used for security purposes.

The security features and the model collection are the most valuable.

I think improvement can be done to the security part, particularly the UDM, and the product should have a user-friendly interface similar to FortiGate.

It should have the Azure RBAC in the next release.

I have been using this solution for more than ten years.

The product is quite stable. I would give it a seven out of ten.

We are using a hardware appliance and we have to choose a size based on our business. It is not like a software application, like in a cloud model.

I would rate the scalability an eight out of ten.

The customer support team is good. I recommend contacting them if any support is needed.

We are using Verax and also FortiGate products. We use them simultaneously.

The installation was not very complex, it was rather easy. It took around one hour to complete the installation.

We evaluated the Cisco 1400 series.

I would give it a seven out of ten.

We help the customers. In some cases, we recommend it. Based on the customer demand, if a customer feels that they have to go with Juniper Firewall because they have experience with that product, then we go with it. Otherwise, we generally recommend Meraki devices.

The threat intelligence capability in SRX is there. But for all of those things, we need to go for the configurations.

It is a good product. There are a lot of security features, like packet sniffing and malware protection. All of those features are available. For that, we need to take separate licenses.

There is room for improvement in customer service and support. The customer interaction is not up to par. 

It is also very delayed.

I have experience with this product. 

Juniper customer support, from the feedback side, is not as per my expectation level.

Neutral

Compared to Meraki, Meraki is very easy to handle. Even the L1 and L2 people can handle it very easily. We do not need so much expertise to use Meraki. 

Compared to Meraki, Juniper SRX firewall is complex. Configuration as well as managing the devices is complex.

Compared to Meraki, it’s expensive. Juniper products are more expensive.

Overall, I would rate it an eight out of ten because of the complexity of configurations and the maintenance.

We are a financial institution and we use Juniper SRX routers to support our credit team, as well as our branch network. I am part of the IT department.

The Juniper router has a firewall built-in, which is a nice security enhancement for our organization. It adds a bit more value.

The support is very good.

The range of devices should be expanded to include those suitable for a small implementation. Juniper does not have any lower-priced SRX models, useful perhaps for a single ATM or a single bank branch. Having such a model at a reasonable price would be good.

In the time that we have used Juniper, we have not seen them improve their product line. If you look at Cisco, they have all kinds of network products. They have routers, switches, and firewalls. But with Juniper, they are not coming up with different kinds of products. They should be including more firewalls and other products. This is an area that Juniper should improve in general.

In Bangladesh, there is a very limited number of partners. The problem with this is that there is a monopoly, and I think that they should end this by increasing the number of local partners.

We have been working with Juniper SRX routers for more than five years.

Juniper SRX is a stable product.

This is a scalable router. In our organization, there are almost 3,000 people using the Juniper product. They have varied roles.

We plan to increase our use of Juniper products in the future, although it depends on input from management.

The technical support is quite good.

Currently, I am also using a Cisco product. The split between Cisco and Juniper devices is approximately 50/50.

Compared to Cisco, the price for Juniper SRX routers is very reasonable. The reason that we are switching to Juniper is because of the cost.

The initial setup is easy.

As we have been using this product for quite a long time, we are used to it and our resources have become very skilled with Juniper devices. The deployment does not take very long.

Our in-house network team is responsible for deployment.

There are six people in our network team. They are network administrators.

Juniper products provide a good return on investment.

This is a cost-effective solution because the price is very reasonable, and some of the features are available at no extra cost. That's the beauty of Juniper.

We have a perpetual license, which comes with the device. Once we purchase it, we can continue the service for three years. When the three-year warranty expires, we have to sign a new agreement with the OEM.

We are looking to gain some experience in using Mikrotik routers and switches.

My advice for anybody who is implementing Juniper is to enroll in the training that they have available. Train first, then deploy. That will make it much easier.

Overall, I think that this is quite a good product. However, they need to expand their range of device offerings.

I would rate Juniper SRX a seven out of ten.