Juniper SRX Series Firewall Reviews

We are a financial institution and we use Juniper SRX routers to support our credit team, as well as our branch network. I am part of the IT department.

The Juniper router has a firewall built-in, which is a nice security enhancement for our organization. It adds a bit more value.

The support is very good.

The range of devices should be expanded to include those suitable for a small implementation. Juniper does not have any lower-priced SRX models, useful perhaps for a single ATM or a single bank branch. Having such a model at a reasonable price would be good.

In the time that we have used Juniper, we have not seen them improve their product line. If you look at Cisco, they have all kinds of network products. They have routers, switches, and firewalls. But with Juniper, they are not coming up with different kinds of products. They should be including more firewalls and other products. This is an area that Juniper should improve in general.

In Bangladesh, there is a very limited number of partners. The problem with this is that there is a monopoly, and I think that they should end this by increasing the number of local partners.

We have been working with Juniper SRX routers for more than five years.

Juniper SRX is a stable product.

This is a scalable router. In our organization, there are almost 3,000 people using the Juniper product. They have varied roles.

We plan to increase our use of Juniper products in the future, although it depends on input from management.

The technical support is quite good.

Currently, I am also using a Cisco product. The split between Cisco and Juniper devices is approximately 50/50.

Compared to Cisco, the price for Juniper SRX routers is very reasonable. The reason that we are switching to Juniper is because of the cost.

The initial setup is easy.

As we have been using this product for quite a long time, we are used to it and our resources have become very skilled with Juniper devices. The deployment does not take very long.

Our in-house network team is responsible for deployment.

There are six people in our network team. They are network administrators.

Juniper products provide a good return on investment.

This is a cost-effective solution because the price is very reasonable, and some of the features are available at no extra cost. That's the beauty of Juniper.

We have a perpetual license, which comes with the device. Once we purchase it, we can continue the service for three years. When the three-year warranty expires, we have to sign a new agreement with the OEM.

We are looking to gain some experience in using Mikrotik routers and switches.

My advice for anybody who is implementing Juniper is to enroll in the training that they have available. Train first, then deploy. That will make it much easier.

Overall, I think that this is quite a good product. However, they need to expand their range of device offerings.

I would rate Juniper SRX a seven out of ten.

We are using this solution mainly for the NPCs and the firewall of the mobile data customers. We are using it to protect the ISP of the mobile data customers: 2G, 3G, and 4G customers. 

In terms of features, we are using Source NAT. 

The virtualization feature: Sometimes customers are requesting a private connection using mobile data when they are connecting to remote sites. 

The Juniper SRX product needs to improve in terms of innovation. E.g., Checkpoint comes with a monitoring solution embedded in its product, as well as providing good reports. Checkpoint also does analysis by tracking the logs and letting you know when you are under attack. What Juniper has today in comparison is not so good.

Juniper only has limited reports, such as memory, capacity, data, and traffic.

Since we have deployed the product, we have had two or three minor issues.

We have something like 12 million customers (mobile data customers).

Sometimes, it is difficult to contact the Juniper support because we did not purchase the support package, as it was too expensive. We are using a local reseller instead. Sometimes, when we have had issues, it can take one to three hours for resolution, which is not good at all based on our company standard. However, once we have the right thing connected on the device, then it's very fast.

I would rate the technical support as a seven out of ten. The support is skilled, but the cost is expensive.

We previously used Cisco ASA. The results were not good.

The initial setup is straightforward. We had the help of the local provider. So, it was very straightforward. 

Even now, when I compare the initial setup to Cisco, the implementation of Juniper SRX is very simple.

To finish the implementation, we had the help of the local provider, Ericsson.

From the design phase up to the implementation phase, it took more than one month per site. The time to validate the design documents and change, then doing those changes, approve those changes and implementing them. Because we have two sites, it was somewhere around three months.

After the acquisition phase, we discussed the plan and the design document. We did the architecture and design document with the vendor. Before going into the implementation phase, we have to validate all our documents for the high-level and low-level designs. The operational teams are also validating these documents.

Once we have all those documents validated, we request the approval for change. We have a committee who analyzes the documentation. We analyze the work that we are planning to do and validate the changes for a specific time.

We need to look if there any impact on the customer side, do we need to present it to the customer before making the change, and what is the plan for monitoring after the change?

The direct support with Juniper is expensive. When you stop using the solution and miss one year of payments, if you want the support back on a specific node, they ask you to pay for the year that you haven't used the node.

We tried to move our mobile data firewall from Juniper SRX to Cisco ASA. What we found was that Cisco did not performing well at all. We were very disappointed by the Cisco solution. With the Cisco solution, we had more memory issues with the same amount of traffic. With Juniper SRX, it just needs an upgrade to carry the traffic.

We have approved vendors in every industry. We cannot deviate and chose any vendor that we want. We can only select vendors from our approved list. The two vendors on that list for this industry include Cisco and Juniper, though recently Huawei was added.

Make sure to have skilled local support.

We are planning to move to the bigger version of Juniper SRX later this year (SRX5800). We are also planning to move to IPv6.

It was a MPLS implementation for a Coal India product.

We have more than 10,000 people using this solution in telecommunication.

For the routers, every feature is quite essential and this is a complete router. The firewall applications are scalable.

To compare with Fortinet, Juniper needs to improve their security features.

I have been using this solution for three years.

It's stable.

It's easily scalable.

I would rate technical support 4 out of 5. They're responsive.

It's easy to set up. I would rate it 5 out of 5.

It takes a maximum of 30 minutes to deploy everything.

Two engineers are enough for maintenance because it's pretty stable and the hardware quality is very good.

For a medium-sized organization, the cost for the licensing and implementation of Juniper SRX for 10 users would be about $300-400.

Juniper is lagging behind compared with Fortinet and Cisco.

I would rate this solution 10 out of 10.

If you have the routing solutions and you want to use Juniper as a complementary solution, you could use it. But if you want it mainly for the firewall, I would recommend Fortinet or Cisco instead.

Juniper SRX is used for NCLS networks as well as fiber to the home.

We are a reseller of Juniper.

Juniper SRX has helped in the financial success of our organization.

The most powerful feature in Juniper SRX is definitely NCLS.

Aside from the updates, I am satisfied with everything this solution has to offer.

I'm satisfied with its routing, firewalling, and web filtering.

Juniper's product updates are extremely slow, and competitors are rapidly keeping up. It slowly updates the model.

Juniper SRX lacks email protection, for example. it is not malware-protected. In the case of malware, you are purchasing a software package from vendors through Juniper. They do not sell their own products. 

It lacks the Sandbox as well as the CM. The CM is available from Juniper, but it is manufactured by IBM rather than Juniper, despite its name.

I have been using Juniper SRX since 2012, or 2013. This solution is still being used today.

We are working with the most recent up-to-date version.

The stability of Juniper SRX is perfect.

The scalability is amazing.

We have approximately 1,000 users in our organization.

Our usage is moderate.

Technical support is a little worse than Cisco but better than everybody else.

Previously, we worked with several solutions. We switched to Juniper SRX because of the pricing, scalability, and performance.

The initial setup is straightforward. It's very easy.

The time it takes to deploy is determined by the one you choose. It can take a week or less.

I wouldn't be able to tell the amount of staff that is required to update the solution because I am not involved in the process myself.

I am a third-party integrator.

Yes, we have seen a return on investment.

Make sure you have qualified personnel, because qualified personnel may not be as readily available in your country as Cisco professionals, for example.

I would rate Juniper SRX a nine out of ten.

Our main use case for Juniper SRX is for gateway level protection for all internet users and UTM and to control the user when accessing websites, applications and non-relevant sites.

Our main purpose for using the Juniper security solution is because we are also using Cisco routers, switches etc.. and we wanted unity in the OEM products so that we can maintain all the products in NMS.

The features that I have found valuable are the ones for the main purpose we are using Juniper - its firewall to protect our network for our internet access.

In terms of what could be improved, J-Web, Juniper Web, is sometimes not working great when users are increasing their internet use. Additionally, they need to improve the GUI, graphical user interface, and the firewall management needs to improve. Their CLI is good, but sometimes the GUI is very slow.

Also, the UTM, Unified Threat Management, feature needs to be improved.

We have been using Juniper SRX since January 2018.

Juniper SRX is stable. Stability is okay.

Juniper SRX has scalability. Its current site has 1500 users and we can upgrade to 2 K users.

Right now, we have around 500 - 600 total users, but I think some sections are still under deployment, so all the users are around the 1700 - 1800 range.

We connected with tech support seven or eight months ago. We got good support and a good response.

The initial setup is complex. It takes one week's time for deployment because we are also integrated with Active Directory and Radius Contactless.

We did it with our own team.

Before choosing Juniper, we compared it with two other solutions, but they were banned because they were Chinese products.

I suppose Juniper is a good solution for the railway and metro environment. These projects are very handy and work in the relevant environmental condition, because in this environment we have different climatic conditions. Suppose we require -5 to 55, -5 to 85 compression, some EMCMI specifications, such as EN501214 - Juniper is a good solution in the railway and metro environment, anywhere worldwide and domestic. It is relevant anywhere.

On a scale of one to ten, I would give Juniper SRX an eight.

We use Juniper for EEE routing and we also use the gateway feature.

The most valuable features are routing and policy security.

The EEE security controls allow us to make policy restrictions, so I can customize port numbers to allow or limit control.

The Juniper SRX protects against DDoS attacks. 

When we first tested the serial interface on our model, it did not work.

It should be easier to escalate support tickets.

We have been working with Juniper SRX for eight or nine years.

We sized this solution based on our bandwidth, so scalability has not been a problem.

The support that we receive from the partner is good. They are available if you are looking for a replacement or an upgrade, and they worked with me when it came to sizing the router according to our bandwidth.

They were also able to find a workaround to the problem that we were having with the serial interface not working on our SRX550-M.

The only issue with technical support is that it depends on the escalation.

We also have a small number of Cisco routers but we rely primarily on Juniper. The Cisco products are more expensive.

The initial setup is straightforward.

Overall, this is a really good product.

I would rate this solution an eight out of ten.

I like the routing and firewall features.

The workplace management console needs improvement. It should be a little bit more developed. Also, the interface needs a bit more improvement.

If the solution would have an intuitive interface would be much better because the work-based interface is not so perfectly developed and it's not ideal. It's not complete yet, and it makes it difficult for beginners and first-time users of this solution. As it is, for new users, it would make it very difficult for them to deploy this solution. Otherwise, the rest is fine. There's no other problem with it.

In terms of stability, everything was okay except for one situation which happened about three years ago. There was an upgrade which was released. Once we got the upgrade on the software, it would crash and it wouldn't work as it had before, so we had to downgrade to the previous version. Once we started using that there was no problem.

Due to sanctions, we haven't used the technical support of the original company so the maintenance and everything is done by us.

We were using a different solution, a Microsoft solution. We were looking for a more affordable solution which would suit our needs.

The initial setup was difficult the first time. It was a little bit complicated, but after it was done, we've been using it just fine and there's no problem with the use. It was the first time we were using a firewall, the initial setup procedure took about one month to define all the zones. 

We extend the license yearly and the prices, because of the sanctions, are expensive and costs much more compared to other solutions. It's pricey compared to other locations where there are representatives and you can buy directly from them.

At the moment the solution satisfies our needs. There are no extra features that we need at the moment.

I would rate this solution 8.5 out of 10 because it seems to satisfy our needs. Everything seems good and works fine.

We use Juniper SRX to do LAN routing. FortiGate uses it for public SMS, and we're using Juniper for internal LAN segmentation. We're routing between different international sites in Morocco, France, and Tunisia.

We're primarily using Juniper's EPA feature, but not the other things. We use it to manage different points of firewalling of routing.

Junos Space should be improved to be on par with FortiGate's solution for managing firewalls and routing. 

We've been using Juniper SRX for 10 years. 

Juniper SRX is stable. 

Juniper SRX lacks scalability. Juniper uses a switch car with different switches. We have some difficulties managing this kind of equipment and implementing some features, like Mac lock and Mac limiting solutions. It's difficult to get good support about this from Juniper. We have about 10,000 users across all routers and switches. I can say the same for FortiGate. We're currently using it extensively for all traffic, and we plan to expand usage.  

Juniper support is okay, but maybe they could improve their support for the gates or when the gates are returned. It takes a lot of time to get a return about the subgate.

It's easier to deploy FortiGate, so maybe we will replace some of our Juniper firewalls with FortiGate in the future. We would still use Juniper for routers and switches but use FortiGate for firewalls. 

It's easier to manage EDA TPS on FortiGate, so maybe we will replace Juniper if they can't provide us with a good solution for this in the future. Maybe in a few months, we will replace some Juniper appliances with FortiGate in some projects.

Setting up Juniper SRX is a little difficult. 

Juniper is annually licensed. There are some additional costs for APS. 

I rate Juniper SRX seven out of 10.