We performed a comparison between Cisco Secure Firewall vs Juniper SRX based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.
Comparison Results: The two solutions are very comparable. Each of them have a good set of features, and the solution you choose will ultimately be dependent on your company’s specific preferences and requirements.
"We can detect any attack of viruses or malware at the first point of contact."
"It has improved our organization with control data."
"Its performance in fulfilling our requirements has been satisfactory."
"FortiGate is on the cheaper end, and it offers good value."
"I like that they have given me a solution at a fair price."
"Fortinet FortiGate's ease of management is the most valuable feature."
"We are a visual effects company, and there have been a number of high profile security issues in our industry. This has brought us to a higher standard of security, which our clients are very keen on these days."
"We have found it to be very reliable and that's why our teams and various users in our company use it as our main firewall every day."
"The most valuable feature is the ability to block almost all of the ports."
"ASA integrates with FirePOWER, IPS functionality, malware filtering, etc. This functionality wasn't there in the past. With its cloud architecture, Cisco can filter traffic at the engine layer. Evasive encryptions can be entered into the application, like BitTorrent or Skype. This wasn't possible to control through a traditional firewall."
"Previously, our customers had to always utilize hand-to-hand delivery. Now, they are able to move completely to a secure digital method. They use a strictly dark fiber optics connection from a central location to the endpoint."
"We can easily track unauthorized users and see where traffic is going."
"It provides security for our company and users."
"The most important feature is its categorization because on the site and social media you are unified in the way they are there."
"It joins all branches and permits employees to work outside their offices, but everything is based on high securities standards (PCI compliance)."
"The most beneficial aspect of the Cisco Secure Firewall is the AnyConnect component within the firewall package, which we selected specifically for VPN usage due to its exceptional integration with various third-party devices and applications."
"Juniper is one of the most powerful network security solutions while remaining simple to use, set up, and scale."
"There is a lot of flexibility in how you can commit, check, and back out of a configuration."
"The solution is relatively easy and inexpensive to maintain."
"What I like the most about Juniper is that they have the same CLI on all routers, switches, and firewalls. If you have worked with any Juniper device, such as a Juniper router, you will be able to work with an SRX, which is really cool. It is a nice experience to work with every device of Juniper, not only firewalls."
"Great as an inter-segmentation firewall or border or arch-firewall."
"I like the Junos OS, which has been very good for me. It's very clever."
"It uses many applications, like antivirus blocking and web filtering."
"Using a Juniper CLI, you configure a "candidate configuration", then "commit" it to bring it live. If you do not like it or messed up something, you just "rollback" to the previous configuration. It can all be done in a matter of minutes. This is super handy once you get use to it."
"The scalability could be better."
"It would be good if they had fewer updates."
"Backup can be improved."
"Technical support could be better. You don't always get the level of help you need right away."
"Its customer service could be better."
"Fortinet doesn't provide multiple virtual firewalls which would facilitate end users and customers."
"The license renewal process, annual renewal price, and the web application firewall features should be improved."
"I could not configure sFlow from the FortiGate graphical user interface. I realized that the sFlow configuration is available only from the CLI, and discovered that sFlow is not supported on virtual interfaces, such as VDOM links, IPsec, or GRE."
"The Cisco Secure Firewall could benefit from enhancements in its API, documentation, and automation tools."
"We are looking for software taxi capabilities."
"We would like to be able to manage a set of firewalls rather than individual firewalls. We haven't really looked into it or yet implemented it, but a single pane of glass would be helpful. We also use another vendor's firewalls, and they have a centralized management infrastructure that we have implemented, which makes it a little bit easier when you're managing lots of firewalls."
"When we talk about data centers, we are talking about 100 gig capacity or 400 gig capacity. When it comes to active-active solution clustering and resilience and performance, Cisco should look into these a little bit more."
"With the new FTD, there is a little bit of a learning curve."
"The main problem we have is that things work okay until we upgrade the firmware, at which point, everything changes, and the net stops working."
"It would be good if Cisco made sure that the solution supports all routing protocols. Sometimes it doesn't."
"The operation of the ASA is good but the problem is that whenever you require an upgrade, there are multiple pieces of software that you have to upgrade. Extensive planning is required, because if you upgrade one piece of the software it has to be compatible with the others as well. You always need to check the compatibility metrics."
"The technical support has room for improvement."
"It should be easier to escalate support tickets."
"JTAC (Juniper Networks Technical Assistance Center) is just okay for technical assistance. However, if you are used to Cisco TAC responsiveness, you will need to adjust your expectations with Juniper Networks TAC."
"We purchased three devices and all three have been replaced under RMA."
"We tried configuring the IDS for more than four months, but it did not work properly."
"In terms of other features, I'd like to see a web filter, 10 point control, application control and a DNA filter in the next release."
"To compare with Fortinet, Juniper needs to improve their security features."
"It could improve areas which need high performance."
Cisco Secure Firewall is ranked 4th in Firewalls with 404 reviews while Juniper SRX Series Firewall is ranked 19th in Firewalls with 86 reviews. Cisco Secure Firewall is rated 8.2, while Juniper SRX Series Firewall is rated 7.8. The top reviewer of Cisco Secure Firewall writes "Highlights and helps us catch Zero-day vulnerabilities traveling across our network". On the other hand, the top reviewer of Juniper SRX Series Firewall writes "Highly scalable, user-friendly UI, and easy to maintain". Cisco Secure Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Meraki MX, Sophos XG and Check Point NGFW, whereas Juniper SRX Series Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Palo Alto Networks NG Firewalls, Check Point NGFW and Meraki MX. See our Cisco Secure Firewall vs. Juniper SRX Series Firewall report.
See our list of best Firewalls vendors and best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.