Juniper SRX Series Firewall pros and cons

You can scale the solution.

The IPS functionality of Juniper SRX is useful in the telecom industry.

When compared to Palo Alto, Juniper is a better choice when it comes to the enterprise network and connectivity.

It is very fast and very easy to maintain. Another nice part of it is that you can easily extract the logs and move them over to a security operations center.

One of Juniper SRX's most valuable features is the site-to-site VPN.

The technical support is quite good.

The command line in Juniper SRX is extremely powerful, in my opinion. It's one of the best command lines I've used in networking products.

The reason that we picked Juniper SRX is for the scalability, the fit for purpose, the tools that are available, the ongoing support and the ability to monitor, but particularly for the virtual routers in our data centers so that we can quickly upscale them when needed, when we need more throughput.

If we need to define our user system from an anti-spam perspective, we can constantly update the antivirus.

Technical support is good. They quickly respond, and they even have local help here. They can actually give you an answer very quickly.

The solution is quite advanced. You need a lot of training to use it effectively.

In comparison to other enterprise-level firewalls, such as Cisco FTD, Cisco has improved significantly. In the past, I believed that Juniper SRX was superior, but after seeing the advancements in the FTD platform, Cisco has better functionality. I have not recently explored Juniper SRX's next-generation firewall capabilities as we only use basic firewall filtering in our enterprise network.

The user interface is something that Juniper needs to improve.

Its logging is very good, but we would like to have an easier way of creating more reports. We would like to be able to manipulate the reports or manage the way the reports are coming out.

I would like to have a better web UI for administration. Juniper could simplify the web UI and make it more compatible with mobile devices.

The range of devices should be expanded to include those suitable for a small implementation. Juniper does not have any lower-priced SRX models, useful perhaps for a single ATM or a single bank branch.

Both the web management and the graphical user interface are inadequate and should be improved.

Ongoing costs are something that we need to manage and make sure that we're getting value on.

It would be ideal if the solution could use cloud services to help update signatures or threat prevention systems.

The capacity can be limiting. We have outgrown its capacity. You can only scale up to a certain extent, depending on the device purchased.