Juniper SRX Series Firewall Reviews

It was a MPLS implementation for a Coal India product.

We have more than 10,000 people using this solution in telecommunication.

For the routers, every feature is quite essential and this is a complete router. The firewall applications are scalable.

To compare with Fortinet, Juniper needs to improve their security features.

I have been using this solution for three years.

It's stable.

It's easily scalable.

I would rate technical support 4 out of 5. They're responsive.

It's easy to set up. I would rate it 5 out of 5.

It takes a maximum of 30 minutes to deploy everything.

Two engineers are enough for maintenance because it's pretty stable and the hardware quality is very good.

For a medium-sized organization, the cost for the licensing and implementation of Juniper SRX for 10 users would be about $300-400.

Juniper is lagging behind compared with Fortinet and Cisco.

I would rate this solution 10 out of 10.

If you have the routing solutions and you want to use Juniper as a complementary solution, you could use it. But if you want it mainly for the firewall, I would recommend Fortinet or Cisco instead.

We use Juniper SRX firewalls and site-to-site VPN connectivity.

Overall, in terms of uptime, they are very stable and reliable, which has benefited our organization.

The command line in Juniper SRX is extremely powerful, in my opinion. It's one of the best command lines I've used in networking products.

Both the web management and the graphical user interface are inadequate and should be improved. It's one of those situations. When it comes to Juniper, I would never use the GUI, instead, I would only use the command line.

I would like to see an improved user interface, and some kind of SD-WAN solution included, or perhaps a simpler way of configuring redundant links, such as WAN links.

I have been using Juniper SRX for 10 years.

We're working with the SRX240 and 210 models.

Juniper SRX is a very stable solution.

It should scale well, in my opinion. We are not a large company, but I don't anticipate any problems with Juniper SRX scalability.

We have approximately 300 employees, whose roles are in typical sales, accounting, operations, and transportation.

I'm not sure about increasing, but we do have other Juniper products, such as switches, that we would use.

Based on my experience with technical support, I would rate them a four out of five.

Positive

We have used other solutions. We decided to change to Juniper for something a little different. We have used some open-source firewalls in the past, and we wanted something a little more robust and fully supported in a real business class environment.

Coming from other vendors, the initial learning curve was a little steep. However, I would say that the actual setup was not that difficult.

I would rate the initial setup a three out of five.

I would recommend two people with networking knowledge, particularly in Juniper SRX, are enough to have it managed and supported.

One person could do it, but it helps to have a backup.

It only took a few weeks for them to all be deployed. It was really just a matter of timing and having a window for each location to have a little downtime to make the transition.

The deployment was completed in-house.

I would say that there has been a return on investment with Simply having the dependability, uptime, and additional security features.

Juniper SRX is reasonably priced.

We evaluated other products before choosing Juniper.

Other products had a more limited feature set, in my opinion. For some of the others, it was just the price. Juniper had a reasonable price and other reliable sources highly recommend it.

I believe that knowing exactly what you want to do is beneficial. There's a lot. It's a very flexible platform, and there's usually more than one way to accomplish your goals. Planning ahead of time is definitely beneficial. If you don't have a lot of experience, I'd recommend working with a partner if at all possible.

I would rate Juniper SRX an eight out of ten.

As a value-added reseller, we resell Juniper hardware to our clients. Its use cases are related to the standard network architecture. It is a part of the fabric that Juniper uses for their switching.

It is a part of the infrastructure when we're selling Juniper. That's what clients are familiar with and that's what they rely on. 

It does have its nuances in terms of deployment. There are always areas to make something easier or more intuitive or make the system auto-negotiate more with existing hardware.

I have been using this solution since it got launched. It has been around five years or so.

For the most part, it is no more difficult than anything else that's out there right now.

Most of the feedback that I've got from my clients related to Juniper's support is that their support is okay. It is not spectacular. It is just okay.

It is easy. It is pretty much plug-and-play. This is why people like Juniper.

Its price is comparable to the competition.

I would advise definitely taking some training if you're not really familiar with the interface or the GUI. Brush up on it before you dig into it because a lot of people know Aruba or Cisco, but you need to be familiar with it. Don't just buy it because you read some marketing material on it. You actually need to know how to deploy it.

I would rate it a seven out of ten.

We are a financial institution and we use Juniper SRX routers to support our credit team, as well as our branch network. I am part of the IT department.

The Juniper router has a firewall built-in, which is a nice security enhancement for our organization. It adds a bit more value.

The support is very good.

The range of devices should be expanded to include those suitable for a small implementation. Juniper does not have any lower-priced SRX models, useful perhaps for a single ATM or a single bank branch. Having such a model at a reasonable price would be good.

In the time that we have used Juniper, we have not seen them improve their product line. If you look at Cisco, they have all kinds of network products. They have routers, switches, and firewalls. But with Juniper, they are not coming up with different kinds of products. They should be including more firewalls and other products. This is an area that Juniper should improve in general.

In Bangladesh, there is a very limited number of partners. The problem with this is that there is a monopoly, and I think that they should end this by increasing the number of local partners.

We have been working with Juniper SRX routers for more than five years.

Juniper SRX is a stable product.

This is a scalable router. In our organization, there are almost 3,000 people using the Juniper product. They have varied roles.

We plan to increase our use of Juniper products in the future, although it depends on input from management.

The technical support is quite good.

Currently, I am also using a Cisco product. The split between Cisco and Juniper devices is approximately 50/50.

Compared to Cisco, the price for Juniper SRX routers is very reasonable. The reason that we are switching to Juniper is because of the cost.

The initial setup is easy.

As we have been using this product for quite a long time, we are used to it and our resources have become very skilled with Juniper devices. The deployment does not take very long.

Our in-house network team is responsible for deployment.

There are six people in our network team. They are network administrators.

Juniper products provide a good return on investment.

This is a cost-effective solution because the price is very reasonable, and some of the features are available at no extra cost. That's the beauty of Juniper.

We have a perpetual license, which comes with the device. Once we purchase it, we can continue the service for three years. When the three-year warranty expires, we have to sign a new agreement with the OEM.

We are looking to gain some experience in using Mikrotik routers and switches.

My advice for anybody who is implementing Juniper is to enroll in the training that they have available. Train first, then deploy. That will make it much easier.

Overall, I think that this is quite a good product. However, they need to expand their range of device offerings.

I would rate Juniper SRX a seven out of ten.

Our main use case for Juniper SRX is for gateway level protection for all internet users and UTM and to control the user when accessing websites, applications and non-relevant sites.

Our main purpose for using the Juniper security solution is because we are also using Cisco routers, switches etc.. and we wanted unity in the OEM products so that we can maintain all the products in NMS.

The features that I have found valuable are the ones for the main purpose we are using Juniper - its firewall to protect our network for our internet access.

In terms of what could be improved, J-Web, Juniper Web, is sometimes not working great when users are increasing their internet use. Additionally, they need to improve the GUI, graphical user interface, and the firewall management needs to improve. Their CLI is good, but sometimes the GUI is very slow.

Also, the UTM, Unified Threat Management, feature needs to be improved.

We have been using Juniper SRX since January 2018.

Juniper SRX is stable. Stability is okay.

Juniper SRX has scalability. Its current site has 1500 users and we can upgrade to 2 K users.

Right now, we have around 500 - 600 total users, but I think some sections are still under deployment, so all the users are around the 1700 - 1800 range.

We connected with tech support seven or eight months ago. We got good support and a good response.

The initial setup is complex. It takes one week's time for deployment because we are also integrated with Active Directory and Radius Contactless.

We did it with our own team.

Before choosing Juniper, we compared it with two other solutions, but they were banned because they were Chinese products.

I suppose Juniper is a good solution for the railway and metro environment. These projects are very handy and work in the relevant environmental condition, because in this environment we have different climatic conditions. Suppose we require -5 to 55, -5 to 85 compression, some EMCMI specifications, such as EN501214 - Juniper is a good solution in the railway and metro environment, anywhere worldwide and domestic. It is relevant anywhere.

On a scale of one to ten, I would give Juniper SRX an eight.

We're using it as a primary firewall and UTM for the main lines coming into our offices and also for connecting our sub-offices around the world.

Previously, we had different routers for each of the incoming lines to the office, and we had other firewalls on the backend to manage them. Now, we have changed all of these, and we have all the lines coming into one single solution, which is SRX. We manage everything very easily from one single interface. Previously, we used to have 10 different devices to do that. Now, we have only one.

We like the fact that we can easily combine multiple internet links to the office and use them like one link.

It is very fast and very easy to maintain. Another nice part of it is that you can easily extract the logs and move them over to a security operations center.

Its logging is very good, but we would like to have an easier way of creating more reports. We would like to be able to manipulate the reports or manage the way the reports are coming out.

In terms of new features, we are using almost all of the features that it has, and there is nothing specific that it is lacking.

I have been using this solution for four years.

It is very stable.

It is scalable. We haven't used the scalability up till now, but we know that we can extend it.

We have 150 users here, and then we have around 30 to 40 users in different countries such as Singapore, Hong Kong, and Norway. They're using some parts of it. They are using some smaller units to connect to the main office.

We don't have any plans to increase its usage as of now. Any expansion would be in terms of getting new offices around the world. We may install more of those smaller ones, but for the time being, as far as I know, we will not expand it in the office because it is already performing as it should. It actually did a very good job when we were working remotely because it allows us to connect to the office very easily and work remotely.

They have been pretty good. In some cases, they took a little bit of time to give a response for the cases we were facing. However, in most of the cases, they were very fast in responding and providing full resolution to the cases we faced.

We had different routers for each of the incoming lines to the office, and we had other firewalls on the backend to manage them. We switched because it was too difficult to manage multiple solutions for each of those lines. We wanted to have one single place where we could manage everything. We also didn't want to have some people going out from one internet line and some from another internet line. We wanted to combine all those lines together and make them work as one, and that's what we achieved with SRX.

We were not so much involved in the setup because we had a security company to do that for us. It took us about two months.

We had a security company for its implementation. Our experience with them was very good.

For its maintenance, we have our IT department. There are three people for managing the maintenance of it. 

We evaluated many other options. We checked out Palo Alto, Fortinet, and Check Point.

I would advise others to do good planning in the beginning because that helps a lot in having a very little downtime. It took us two months to implement it, which might seem very long, but we had zero downtime. Nobody noticed anything during the switch. It was the best way to implement it. This is the most important part. When you are trying to do such changes in the organization, it is very important that you do it by using the right resources and from the right perspective.

I would rate Juniper SRX a 10 out of 10.

We use Juniper SRX for branch offices or for small office use.

The GUI is simple to use.

I have been using Juniper SRX for approximately 20 years.

Juniper SRX is stable, but it could improve. FortiGate has better stability than Juniper SRX.

Juniper SRX could improve the scalability to compete better with other solutions, such as 
FortiGate.

We have less than 10% of our customers using Juniper SRX.

We use FortiGate solutions and we have been deploying them more than Juniper SRX because of the benefits.

The installation is straightforward.

The time of the deployment depends on the complexity of the environment. If the customer requires HA deployment and the configuration could take longer time. On average, for a small-scale branch office, it can be completed within one day, which includes testing. If the customer does not have any special preference on the policy and they do not have any IP tunnels then it could be completed within half a day.

We have an in-house team of 10 engineers that do the implementation and maintenance of the solutions we provide.

I rate Juniper SRX a seven out of ten.

We had implemented two SRXs in high availability mode. They were used, generally, for firewall and NAT translation tables, for forwarding for services, and connecting branch offices. We have a constant internet connection, which is directly connected with the branch offices, in general. We didn't explicitly configure or use any specific SRX features regarding the filtering of URLs or something that a UTM could use, since Juniper has a more advanced configuration and, in general, a UI that's made for the customer.

The solution is mostly stable. 

We get technical support via the reseller, and they are very helpful. 

You can scale the solution. 

The solution works well for larger organizations. 

We've had some issues with the firmware. 

The solution is quite advanced. You need a lot of training to use it effectively.

When we bought the equipment, and we have more Juniper devices, not just SRX, they started to malfunction. I'm not sure why. All the devices that we bought were from the year 2018. We had the EX4600. Something was not working with this device. It was offline. We bought everything in twos so we could make a high availability with all of them. The current has malfunctioned, and all the warranties have also expired. We are, generally, expecting malfunctioning, maybe in the next few years. I was planning to switch the Juniper equipment with something else to avoid this.

It does not have a simple user interface. 

The warranty offered on the devices isn't long enough. it would be better if you could extend it out to five or eight years. Otherwise, you have to be very careful with the equipment. 

I'm not sure if Juniper SRX can filter emails or block viruses. I'm not familiar with these aspects as I haven't had that much experience using the SRX inside the UI. However, if they do not, it would be ideal if they did. I'm not sure if it can deflect any kind of DDoS attack. 

The one particular issue that I've seen on the SRX, is if you have SSH enabled and if there is a large number of SSH connections, when a brute force attack happens, the SRX, in general, tends to become unstable, or it resets by itself. That's one issue that's particularly making me angry, and I had to request the reseller to block the SSH permanently, or just to allow access, so only they can connect.

Juniper SRX was implemented in our company at the start of 2018.

While the solution has been running stable, one device has also malfunctioned. We had some issues with Juniper in general. It was regarding the firmware and some box, or something like that. We've needed to contact our reseller more frequently to fix the issues that are occurring when using the device.

Regarding stability, it's pretty much working in a stable way. I haven't had any issues regarding, let's say, speeds or connectivity or general day-to-day use, when users connected on the switches and accessing the internet, and so on. That said, sometimes with the devices, strange issues happen.

Regarding scalability, generally, it is simple, I would say, at least from my perspective. I wasn't the person that configured the devices, however. The reseller was. 

Before the Corona crisis, there were 250 users. Now we've got maybe 90 to 100 people.

We generally contact the reseller that sold us the device and also has a maintenance protocol. We have services on-demand when some issues arise and we need help.

The reseller was pretty good regarding ticket issues, management, or making modifications, even during the production time. They are really trusted people, and a trusted IT company, and they've expertly managed all the requirements that I've sent them or any other modification on the network that I wanted to have.

I've used Cyber and a Sophos UTM device. Juniper is, generally, more advanced. I haven't been able to get enough training to maintain the Juniper device.

The main reason we chose Juniper was the stability, and the number of concrete connections that users can make when, let's say, they going out to the internet, and accessing services over the internet. Also, regarding the network port-forwarding to internal servers, in services, the device that we had before was Cyberoam UTM, and it didn't quite handle the high load. I generally noticed that SRX can handle pretty high network loads when going in or out. It's proven itself to be stable in that regard.

The initial setup was generally handled by the reseller and they did the setup as described on the schematic and regarding core network configuration, high availability, security, firewalls, et cetera. It was, generally, out of the box when it was configured and set up from the ground up.

While the setup was planned in 2017, it was up and running in 2018. It took about six months or so.

We switched office buildings, the main office. The new office was built with this solution. Everything was migrated, including all the network devices, all the servers, all the ISP, internet connections, and so on. Everything was, generally, carefully planned when it was deployed.

Our reseller also handles the maintenance. Generally, that takes one or two people.

Our reseller partner handled the initial setup for the most part.

I can't speak to the licensing. It's not an aspect I handle directly. I can't say that there are extra costs involved beyond the licensing fee. 

We are currently using Juniper SRX, however, I was thinking about maybe changing the devices to FortiGate or a UTM device.

Lately I was thinking about simplifying. Maybe FortiGate might have something more user-friendly for the end-user or for the customer experience.

I'm just a customer and an end-user.

We are using the SRX Model 345. It's a physical device. It's not a virtual instance.

In general, I wouldn't recommend Juniper to, for example, a small business. I would maybe recommend it to a bigger company. We might have made a mistake taking Juniper. Maybe we should have used something more user-friendly.

I would recommend it to a company that has more than 250 people. Or maybe even over 300. For a smaller company, it's not financially, efficient in the long-term, in terms of subscriptions or maintenance costs and similar things. A company that uses high-grade enterprise equipment, should be really financially equipped to handle such things.

It's highly advanced, at least for me. I would really need some training to at least handle some basic things, or maintenance, or even Firmware upgrading or high availability configurations. It's too advanced for me. I would really need to have some kind of network specialist certificate to manage them.

I would be really worried about the warranty as a new user as well. You really need to keep the subscriptions up to date, or not to stop them. If you've stopped them, you also need to pay penalties for the years that the subscriptions weren't used. 

Regarding equipment, you really need to have them in twos, not one. You need to have high availability for all of them. The equipment tends to malfunction, specifically if there are any power issues inside the building, or if there isn't any generator or UPS underneath, and so on. The equipment really needs to be taken care of.

I'd rate the solution at an eight out of ten.

We use the virtual on-premises in our data centers.

The reason that we picked Juniper SRX is for the scalability, the fit for purpose, the tools that are available, the ongoing support, and the ability to monitor, but particularly for the virtual routers in our data centers so that we can quickly upscale them when needed, when we need more throughput.

In the last year, we've started to roll out Juniper SRX for new sites. It has only been a couple, but we'll have about 10 to 15 sites within the next month in the new framework, and we'll also be putting a virtual SRX router at our gateway in our data centers as well.

We are using the latest version. It's not finalized to install yet. I expect it to be finalized next week in our city and Melbourne data centers.

So far they've been good in terms of stability.

The scalability has been very good so far.

We've got 420 staff using it, plus two of my internal team and two of my MSPs, four people,  working on the network stuff.

We have been in touch with support and they've been good. During the configuration stages, we had a couple of tickets and they were responsive to it.

The first configuration with my network experts took a little bit of time to work through the differences between their knowledge of the Huawei networking and the Juniper set-up and the change from all the Huawei to the Juniper and Sophos access points. The first install took a couple of weeks to configure the actual hardware, and then on site, what we expected to take half a day in the first instance probably took a week, but once we did one, we've been ok rolling out the next ones after that.

In terms of the initial setup being straightforward, that depends on your knowledge of the product. Juniper has been fairly responsive when my team has asked them questions. So it has taken us longer to install than I would've hoped, but that's one of those things when you change your products.

There is a component of monthly and yearly costs depending on the product.

Ongoing costs are something that we need to manage and make sure that we're getting value on. But with feeding the data back in and the capability, we're hoping that it will pay for itself in the monitoring tools and the ability to go past just the different baselines of stability and scalability to actually make sure that we're proactive in keeping our networks alive.

On a scale of one to ten, I would give Juniper SRX an eight.

The main thing is cost. Having said that, it's not ridiculous, but you're always looking for the best value, and them bringing out the virtual cores has been really good. The cost is more expensive, but you're getting a bang for your buck. They are very good value for money in their product.

The overall, ongoing costs of licensing has added to my budget, but until I get long-term experience and make sure that it's running as expected, I can't say it's everything that I expected.

We are using 300 series and 1500 series models.

It is a complete security bundle. The cloud-based Sky Advanced Threat Prevention feature is very valuable.

I am 100% satisfied with the performance of the Juniper firewall. It has a very good throughput. It works very fine. We use our firewall as a site-to-site VPN or Software-Defined Wide Area Network (SD-WAN). In both cases, it has a very good and optimum performance.

Their service support is very good in India. I get really good support from the Juniper team.

It must be 5G ready. The 5G network is rolling out soon in India, and Juniper must upgrade their firewall slot to the 5G network, or they must manufacture a 5G dongle card for the Juniper firewall. I want Juniper to upgrade their dongle from 4G to 5G. 

Presently, they have an expansion slot in the SRX 322 series and higher firewalls. In that expansion slot, they can put a 4G mobility SIM card so that whenever our primary link is down, it will automatically connect through this GSM network and form a tunnel.

I have been using this solution for three years.

It is 100% stable. They have a common operating system for firewalls, routers, and LAN switches.

Their technical support is excellent. As compared to any other company, Juniper has better support in India. We have a very good understanding, and I get good support from them.

I have worked with Sophos and SonicWall. As far as the real packet forwarding internet mix is concerned, Juniper is far better than SonicWall, FortiGate, Sophos, and Cisco.

The setup of any firewall is always complex because we have to customize features according to customer requirements.

Its price is reasonable. In India, most of the products have a similar price. There is only a 5% to 10% variation in the price of different brands.

I would recommend this solution to others. They can blindly go with Juniper. Juniper has very good after-sales support. Their technical team is very aggressive in support, and they give very good support to the customers.

I plan to keep using this solution. Currently, there is no plan to switch from Juniper to any other brand. I am 100% satisfied with Juniper. They provide a very good service to my customers. I don't have any concerns about after-sales support with Juniper.

I would rate Juniper SRX a ten out of ten.