[125594] in North American Network Operators' Group
Re: Juniper firewalls - SSG or SRX
daemon@ATHENA.MIT.EDU (Owen DeLong)
Tue Apr 20 07:25:21 2010
From: Owen DeLong <owen@delong.com>
In-Reply-To: <20100420081129.GA11809@minerva.redbrick.dcu.ie>
Date: Tue, 20 Apr 2010 04:18:11 -0700
To: Cian Brennan <cian.brennan@redbrick.dcu.ie>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Apr 20, 2010, at 1:11 AM, Cian Brennan wrote:
> On Mon, Apr 19, 2010 at 08:32:47PM -0400, Jeffrey Negro wrote:
>> Has anyone on Nanog had any hands on experience with the lower end of =
the
>> new SRX series Junipers? We're looking to purchase two new =
firewalls, and
>> I'm debating going with SSG series or to make the jump to the SRX =
line. Any
>> input, especially about the learning curve jumping from ScreenOS to =
JunOS
>> would be greatly appreciated. Thank you in advance.
>>=20
> Depends. SRXes are (in my experience) still quite a bit away from =
stable. We've
> had far more crashes than I'd like with them, without doing anything
> particularly strange. SSGs on the other hand are a horrible pain to =
admin, but
> (again, ime) seem stable as a rock. I assume SRXes will get betters =
given time,
> so the question is can you afford the instability for the moment?
>=20
Interesting. My SRXes have been rock solid since upgrading to 10.0R1.8.
Owen
