[125589] in North American Network Operators' Group
Re: Juniper firewalls - SSG or SRX
daemon@ATHENA.MIT.EDU (Jeff Richmond)
Tue Apr 20 04:10:29 2010
From: Jeff Richmond <jeff.richmond@gmail.com>
In-Reply-To: <w52oche4u0c.fsf@lame.message.id>
Date: Tue, 20 Apr 2010 01:10:10 -0700
To: seph <seph@directionless.org>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Count me in as well. I ditched my personal Netscreens and replaced with =
SRXs and we have done so as well at my day job. Other than a few quirky =
things, they are very nice. V6 support is still somewhat limited though, =
but I am using an SRX210H with ADSL2 PIM as my main router at home and =
it has been absolutely solid. Using it for both V4 (flow) and V6 =
(packet) routing, as well as doing a bunch of other things. It replaced =
my older NS5GT and SSG5. Configuration is so much easier now too. I =
almost forgot the pain of screenos. Ok, maybe not...
-Jeff
On Apr 19, 2010, at 9:39 PM, seph wrote:
> I'm with Owen. I have nothing good to say about ScreenOS. In contrast
> JunOS has been great.
>=20
> seph
>=20
> Owen DeLong <owen@delong.com> writes:
>=20
>> Much.. Go SRX over SSG every time. For anything that doesn't have an
>> SRX analog, consider the J-series.
>>=20
>> SRX/J-Series =3D=3D JunOS =3D=3D Good.
>> SSG Series =3D=3D ScreenOS =3D=3D @)#$*#@)$(*!)(@$!@$
>>=20
>> Just my $0.02 having dealt extensively with both environments over =
the
>> years.
>>=20
>> Owen
>>=20
>> On Apr 19, 2010, at 5:32 PM, Jeffrey Negro wrote:
>>=20
>>> Has anyone on Nanog had any hands on experience with the lower end =
of the
>>> new SRX series Junipers? We're looking to purchase two new =
firewalls, and
>>> I'm debating going with SSG series or to make the jump to the SRX =
line. Any
>>> input, especially about the learning curve jumping from ScreenOS to =
JunOS
>>> would be greatly appreciated. Thank you in advance.
>>>=20
>>> Jeffrey
>=20
