Juniper SRX Series Firewall Reviews

The usual use cases for Juniper SRX Series Firewall that I work with mostly are for enterprise solutions, which include headquarter and branches security. They use IPsec tunnels for secure data transmission. Additionally, I work with this project for ISPs where it serves as a CGNAT solution for big providers and mobile operators. They typically utilize next-generation firewall functions such as anti-spam, IPS, IDS functions, and web filtering, for example, antivirus. Usually, Juniper SRX Series Firewall is used in a cluster configuration, where two boxes operate as one high availability solution.

Regarding the features or capabilities of Juniper SRX Series Firewall that I have found the most valuable and useful, IPsec tunnels are very popular functions. Also, the IPS/IDS functionality is used very often. It all depends on customer requirements because different customers have different needs, but these functions I have utilized frequently.

Juniper SRX Series Firewall has built-in functionality in its Junos operating system to use automation scripts, which allow for the automation of processes to deploy and maintain Juniper SRX Series Firewall. It is also a very good solution to use Security Director when you have many Juniper SRX Series Firewall boxes in your network. I prefer CLI; if you do not have so many Juniper SRX Series Firewall boxes, it is good to use CLI because Juniper Junos allows you to save different configurations and you can always roll back to a previous configuration if a new configuration does not work as expected.

I think Juniper SRX Series Firewall could be improved or enhanced because maybe a year or two ago, Juniper began producing new boxes such as SRX 1600, SRX 2300, and SRX 4300 and 4700, which are excellent products. They are only one unit high but have very good performance and a lot of different ports, supporting from 1 gig to 100 gig ports. Juniper also has series SRX 300, but it is an old firewall and not very powerful. I believe that maybe in a year, they will transition to another series, such as SRX 400. However, the functionality of Juniper SRX Series Firewall remains the same. The differences involve performance, quality, number of ports, and types of ports in different models of Juniper SRX Series Firewall.

I work for a distributor company as a Juniper consultant, and I have been working with Juniper SRX Series Firewall for maybe 10 years.

I find Juniper SRX Series Firewall to be a reliable solution. I have configured it for many customers, and they have operated for more than a year without any problems. Therefore, I consider Juniper to be one of the more reliable firewalls.

I believe the scalability of Juniper SRX Series Firewall is good for mid-range and upper-range firewalls, but the branch models are not very scalable. This could be a recommendation for Juniper to provide additional solutions or models for branch firewalls. Currently, we can use a maximum of two firewalls in a cluster setup, where one box is active and the other is a backup. In comparison, I know Check Point has a solution that allows connecting several boxes for high availability or increased power.

Regarding my satisfaction with Juniper SRX's technical support, I find it varies. Depending on the case, the Juniper technical center sometimes resolves issues quickly, while in other situations, we find ourselves having to resolve the issue independently.

For the usual initial setup process with Juniper SRX Series Firewall, if we use a cloud management solution, we do not need to configure all boxes directly and manually because Juniper supports zero trust or zero install solutions. You simply connect the firewall to the internet, and then in the cloud management platform, you use different templates. Juniper SRX Series Firewall obtains all configurations from the management platform, making this process very easy and fast. It requires having a competent network or security engineer to manage effectively.

The role-based control feature supported by Juniper SRX Series Firewall is usually a good solution, especially when using another database server or RADIUS server for authenticating different users. We can manage roles for users, utilizing group management roles.

For application visibility on Juniper SRX Series Firewall, we need a special license. Juniper supports adding different applications manually, but you can also use a ready database of all popular applications when licensed, with this database being updated automatically. You can utilize these different applications in various policies for firewalling, allowing access or blocking at the user-based level or across the entire network between subnets, making it very flexible.

Regarding the pricing of Juniper SRX Series Firewall, I think the cost is comparable to Cisco, Check Point, and Palo Alto, but it is very difficult for Juniper to compete with Fortinet. This vendor is very economical while maintaining good functionality for devices. Prices have been growing constantly every month, possibly due to RAM and chip costs. I believe the price is significant, but if you require a good security solution, it is a reasonable price.

The usual challenges I encounter with Juniper SRX Series Firewall include situations where customers do not read documentation. When they configure some functionality incorrectly, they face problems and ask me for help to troubleshoot and identify the issue. Everything is often traced back to the network security administrator's prior experience with other vendors, where different command syntax or approaches are utilized. Thus, it is advisable for users to read documentation thoroughly before configuring any functionality. It turns out that many requests I receive from customers stem from this issue, although it is not a big problem, rather a small inconvenience attributable to customer oversight. I would rate this product a 7 overall.

As a distributor, my customers mainly use Juniper SRX Series Firewall for firewalls and edge devices.

Customers in various industries, including financial institutions, higher education institutions, small businesses, data centers, and service providers, use this firewall across all sectors.

When speaking about the features of this firewall, the best include the firewalling features, Unified Threat Management, ATP Cloud or Sky ATP, and the VPN Connect part.

Juniper SRX Series Firewall helps in terms of network security for my customers by protecting end-users from any form of cyber attack or threat, with a good database that updates and pushes out signatures to defend against threats.

I have worked with the Application Visibility feature, which is a very good part of the Juniper SRX Series Firewall solution, providing decent visibility into applications going through the device.

The centralized management with Security Director is effective in reducing administrative overhead, as it has made device management and configuration easy, from day zero to day two lifecycle.

The adaptive security policies meet my customers' evolving business demands.

The biggest benefit of Juniper SRX Series Firewall overall is that it is rugged and cost-effective, offering basic firewall features and additional licensed features as needed.

The main challenge I see as a distributor is Juniper's rating in the Gartner report, where Juniper is not a leader in enterprise security, which often influences customer conversations. Most customers want to check the Gartner report before they engage, making it challenging to sell Juniper security.

With my extensive experience with the Juniper SRX Series Firewall, the robustness of the SD-Cloud or Security Director interface and overall functionality needs to be improved to compete with leading firewall solutions.

I have been working with Juniper SRX Series Firewall for at least 10 years.

The Juniper SRX Series Firewall is stable.

For scalability, I have no complaints regarding the Juniper SRX Series Firewall.

The Juniper SRX Series Firewall is easy to set up with Mist and SD-Cloud.

The setup time depends on configuration needs, averaging between 20 to 30 minutes, with basic configurations taking about 10 minutes, while advanced configurations might take 20 to 30 minutes.

The Juniper SRX Series Firewall is affordable and cost-effective.

The cost depends on the use case; for firewalls, it's not per user, but for VPN Connect it is per user, while most other licenses are not per user.

I advise those considering the Juniper SRX Series Firewall to try and test it out, as it is a robust security solution that works for businesses of all sizes and service providers.

They should be open-minded and see how it can cost-effectively manage their firewalls or security needs. On a scale of 1-10, I rate this solution an 8.

My usual use cases for Juniper SRX Series Firewall include building redundancy HA clusters and configuration setup, and supporting our customers with this equipment. I build IPsec tunnels, build extended ICP connections, and implement load balancing with ICP1 and ICP2.

We have a customer who uses Juniper SRX Series Firewall equipment for firewall solutions, and we supported him.

The most valuable feature is the HA high availability cluster for active-active Juniper SRX Series Firewall.

I find this high availability cluster so valuable because when the first node is down or powered off, the second node is still working, and customers can continue their business.

In my experience, it saves money because it does not stop working for business since it is a cluster.

This is a single solution for firewall, filtering traffic, and routing traffic. We use it in the collapsed core, which serves as a single border router and core for medium enterprise businesses.

I do not work with threat prevention, so customers do not purchase this license for Juniper SRX Series Firewall. It is working only with firewall and VPN concentrator and router functionality.

We do not use the application visibility feature.

About four years.

The scalability is good. Customers buy new Juniper SRX Series Firewall units, and we migrate configurations on the new units very easily and quickly.

It allows saving on the purchase of additional routing requirements or a router like Juniper MX.

I work with Aruba, Juniper, and FortiGate Fortinet solutions. I do not work with Juniper Mist. I only work with Juniper switches, routers, and firewalls, including MX routers, QFX switches, and Juniper SRX Series Firewall routers. I work with only two models: 345 and 340.

One of our customers uses the Juniper SRX Series Firewall. I am a Juniper customer, and we talked about earlier, I usually work as a subcontractor. I implement Juniper solutions as a subcontractor under other bigger companies, typically for medium and enterprise clients.

I appreciate Juniper software solutions, though the Juniper SRX Series Firewall is similar but slightly different than the physical Juniper firewall SRX. The routing, Layer 2, 3, 4 solutions in the network layers are valuable features. I appreciate Juniper firewall solutions.

The graphical user interface could make this firewall better. The weakest point of Juniper is the graphical user interface. With a better user interface and graphical interface, the Juniper SRX Series Firewall could be a superior solution compared to what it is now.

I have used the Juniper SRX Series Firewall for five years. I used it in test environments more than ten years ago, but it was only for testing. There was SRX version 12. From version 12, everyone could download a Juniper SRX Series Firewall version and use it in test environments. After that, Juniper created a bigger version for production environments.

I appreciate this device and solution, so I have not experienced any challenges. It is good to integrate Juniper firewalls.

The solution has absolutely high stability. One of our customers told me, 'Juniper always works if I can provide power for the device.' It offers absolutely high stability solutions. Since 10 is always suspicious, I rate it nine.

The scalability is high, rating between eight and nine.

Technical support is very good. I usually create tickets to the Juniper technical support, and they usually can help me. I would rate it eight.

Positive

I prefer the hardware platform SRX over the Juniper SRX Series Firewall. The Juniper SRX Series Firewall provides similar solutions to other virtual environments, such as FortiGate virtual firewall or Checkpoint virtual firewall. I am uncertain about the benefits of the Juniper SRX Series Firewall over these other platforms. FortiGate is another one of my favorite firewalls.

I never used the initial setup or the fabric initial setup. I usually delete all default configurations and build my own configuration with the firewall. The main reason is that I usually build firewall clusters, which requires deleting everything and creating a new configuration from the baseline. The setup takes a few hours, typically two hours. The initial solution requires building the configuration, security policies, network address translation rules, special routing for firewall filter policies, and more.

This is difficult to answer because I never sell these devices. As a subcontractor, I only configure them. I am not aware of the market price for Juniper products.

I absolutely recommend the Juniper SRX Series Firewall, but not for everyone. The Juniper graphical user interface is not very friendly, but the shell is very good. I recommend it for highly ranked technical people who need to understand what they want. They should have a very strong base in Linux and other command line knowledge, such as Cisco. With this knowledge, Juniper is a very good solution. My overall rating for this solution is 7 out of 10.

We use it for our IPsec VPN and for IT security and have enabled encryption on the network traffic. We use 128-bit encryption.

We have a very small branch office firewall, and enabling security features would degrade our traffic performance. That's why we only use IPsec VPN.

For example, we have not enabled threat management capabilities in Juniper.

We use Juniper firewalls just for network traffic encryption, and we think it's a good encryption algorithm. We avoid sniffing and some kinds of breaches in our network traffic. That's the only facility we are gaining from this Juniper firewall. 

But when we implement the Fortinet firewall, we will definitely enable traffic inspection after decryption. We will enable traffic encryption and traffic inspection on the FortiGate firewalls.

It's a very small firewall, and Juniper doesn't provide UTM solutions. That's why we are shifting towards FortiGate firewalls.

We definitely have some kind of business functionality that is not matching with this firewall. Our research and development department works on it, and they recommended that we should replace it with a better firewall, like Fortinet or Cisco, and we found Fortinet more feasible.

We have been working with Juniper firewalls for approximately more than three to four years. We have worked with the SRX.

Different appliances have different versions because we have not updated them regularly. It varies from appliance to appliance because we are not convinced that we have to update all the versions and then upgrade our security infrastructure to only Juniper firewalls. So we did not focus on our versions and updates because we have strategies to implement a different firewall than Juniper.

It's a very stable firewall. We have no issues regarding hardware performance. It's working fine. Its maintenance cost is very low, and we haven't seen any kind of challenges in hardware functionality or even its services, like IPsec services.

We have a scalability option, but we have a limited number of branch offices so far. So we are okay with it, but due to some UTM facilities in Fortinet, we are shifting towards Fortinet. 

It's unexpected that market support is very limited now, and SRX firewall will become obsolete and reach end-of-life.

We have approximately, including all our branch offices, 1,500 end users.

Regarding technical support, we don't require any because we use these devices underutilized, and it's working fine.

We had a tender about three months ago, and we purchased Fortinet FortiGate  firewall. We are going to implement it soon, within a month.

We have an IPsec VPN already established on a Juniper firewall, while we're using a Fortinet firewall as an aggregation firewall. We plan to replace our Juniper firewalls with FortiGate firewalls.

We are just firewall deployment engineers. We just deployed the firewall provided by the security policies from the information security department. 

All the security features come from our information security department, and they will look into it and provide us with the procedures, and we implement the procedures as given by them.

We are only configuration engineers. It is easy to maintain, there is little maintenance required.

I would recommend it to others. If their need is very limited and aligns with their business functions, we recommend using Juniper Firewall. It's very cost-effective, easily managed, and it's working smoothly. It's a good firewall.

Overall, I would rate it a six out of ten.

I work for a system integration company that partners with Juniper. Currently, I'm in a role akin to a technical consultant.

The SRX Series is often used by enterprise companies, typically in a cluster mode configuration, to enhance reliability. It's suitable for small to medium-sized enterprises as well.

Juniper recently announced a new SRX model that's very powerful, so I'm currently satisfied with the offerings.

The product provides good performance and has features comparable to other leading products in the market.

We typically use the SRX for VPN solutions and it supports next-generation features like antivirus, anti-spam, and IPS effectively.

There is room for improvement in scalability and performance. 

It's scalable and reliable, but when using next-generation firewall features, the performance decreases significantly for Juniper SRX. In Check Point and Cisco, the performance decrease is less.

I have been using it for ten years. I have good experience with Juniper SRX Series Firewall, especially in federal applications.

The branch model, being the smallest, sometimes has some bugs. However, the high-end and middle-end models are reliable and stable.

It is scalable, but unlike some vendors, like Check Point, which allows connecting more than two devices in a cluster, Juniper only supports configuring two devices in a cluster.

It's scalable and reliable, but when using next-generation firewall features, the performance decreases significantly for Juniper SRX. In Check Point and Cisco, the performance decrease is less.

I provide technical support myself.

Before, I found solutions myself. I don't usually need technical support for the SRX.

For me,  the initial setup is straightforward due to my experience. Juniper provides good documentation with example configurations, which should help even beginners.

I've handled installation services for service providers. I mostly work with on-premises versions, but sometimes I also install cloud-based solutions.

I start by preparing the configuration based on the customer's requirements, then upgrade to the Juniper-recommended version and install the configuration.

The deployment time depends on the number of SRX devices. Usually, I can handle it alone. It takes two to three hours to deploy one SRX firewall.

The maintenance is moderately challenging.

There is value for money. It offers a good solution at a good price. The price is normal for such a product.

I would recommend reading the documentation before beginning the configuration.

Overall, I would rate the solution an eight out of ten. 

Normal use cases like policy creation, infrastructure setup, VPNs, and general firewall functionality. 

If a company uses the SRX firewall, they don't need additional security measures to control cyberattacks. The firewall is enough to contain them.

Regarding security, if Mist AI were integrated into the firewall, it would be as secure as any other firewall. Palo Alto is considered one of the best firewalls, but I trust Juniper. Once a customer starts to use Juniper products, they never switch to another brand.

Regarding threat prevention, I would rate the SRX firewall a ten out of ten. 

If Juniper needs improvement, they should work on the price point because it's very high.

I have been working with this product for the past eight months.

I would rate the stability a ten out of ten. It is a stable product. 

I would give it a ten out of ten in terms of scalability and network growth. 

Our customers who use the firewall are medium and enterprise businesses. They are basically in manufacturing and car automation.

Compared to Palo Alto firewalls, Juniper firewalls offer easy access, setup, configuration, and connection with customers. We can provide read-only access, create specific policies, and even give customers read-write access to their email policies.

I would rate my experience with the initial setup a ten out of ten, with ten being very easy. 

It takes 30 minutes to 45 minutes.

Our job is to install and deploy the Juniper product, provide end support to the customer.

There is AI support and cost savings. The AI support is the best, and it also provides cost savings.

I would rate the pricing an eight out of ten, with ten being very expensive. There is an opportunity to reduce the price.

It is more suitable for medium to enterprise businesses. Overall, I would rate it a ten out of ten.

At our company, we use the Juniper SRX Series Firewall for customers in the banking sector. 

The complete security bundle, powerful routing and USB blocking applications are the most valuable features of Juniper SRX Series Firewall. The solution effortlessly integrates with other third-party products. 

The product has been recently acquired by Hewlett-Packard enterprise. Juniper Firewalls and switches always support AI-powered and ML technologies. Juniper SRX Series Firewall is user-friendly for the end-users as well as the integrators. 

Juniper SRX Series Firewall does not offer protection for IoT devices. Therefore, devices like CCTV cameras, biometric systems, control access systems, and building management systems cannot be protected using the product. With around 450+ IoT devices worldwide, Juniper SRX Series Firewall should allow protection for all such devices with an ethernet port, similar to Palo Alto and Check Point.  

The GUI of the product is overcomplicated and almost every feature of the solution needs to be implemented through CLI programming, using tools like Tera Term. The solution provider should simplify the GUI for partners, system integrators and end users alike. 

I have been working with Juniper SRX Series Firewall for ten years. 

I would rate the stability a ten out of ten. 

I would rate the scalability a nine out of ten. I would recommend Juniper SRX Series Firewall for enterprises of every scale. 

Juniper products are only available through a couple of national distributors in our country. In our company, we reach out only to distributors for support, and then the Juniper tech team provides official support. We receive excellent support at our company for Juniper SRX Series Firewall. 

The initial setup of the product is complicated to some extent, as it only supports CLI programming. 

I would rate the pricing eight out of ten. The solution is available at a reasonable and transparent price point. 

In our country, Chinese IoT devices are widely used, but Juniper SRX Series Firewall or similar firewall solutions from Fortinet or Sophos are unable to protect them.

But firewall products from Palo Alto and Check Point can protect IoT devices. Customers of our company using IoT devices remain worried about IP hacking, therefore we promote Check Point Firewall with IoT protection license. Juniper SRX Series Firewall is most suitable for protecting devices like computers, desktops and laptops. 

I would overall rate the product a ten out of ten. I would definitely recommend the product the others, but at our company, we implement customization according to customer requirements before deploying the solution. 

Currently, we are using the solution as our data center firewall.

Juniper SRX Series Firewall is a stable solution. I am confident about the solution from a security perspective because it is difficult to penetrate.

Juniper SRX Series Firewall has to improve its web content site, like web filtration.

I have been using Juniper SRX Series Firewall since 2015.

Juniper SRX Series Firewall is a stable solution.

Juniper SRX Series Firewall is a scalable solution.

Technical support is always available, and I have had no issues with them. When I raise a ticket, they frequently join the session and resolve the issues.

On a scale from one to ten, where one is bad and ten is good, I rate the solution's technical support nine and a half out of ten.

Positive

The solution is quite easy to install.

The solution can be deployed in a couple of hours.

We have seen a return on investment with the solution because it provides all the security features required on your network, and it's not easy to penetrate.

In my opinion, the Juniper SRX Series Firewall is cheaper than other products. We have a five-year license for the solution in one go.

Currently, we are using the solution as a data center firewall, but we previously used Juniper on all my segments. Since Juniper doesn't have any web content or web filtration, we moved to Fortinet for the internet segment. Otherwise, Juniper is quite okay.

The solution is easy to maintain and monitor. We have moved from SRX550 to SRX1500. Its uptime for the last three months from the deployment day is working fine. The solution's management interface is quite user-friendly for configuring policies and rules.

Overall, I rate the solution an eight out of ten.

We have used Juniper SRX Series Firewall in airports and multiple other industries.

The most valuable features of the Juniper SRX Series Firewall are the user-friendly UI, and accessing the solution is simple.

The pricing strategy of the vendor could improve.

I have been using Juniper SRX Series Firewall for approximately three years.

The solution is stable.

I rate the stability of the Juniper SRX Series Firewall a ten out of ten.

The scalability of the solution is good. We can add additional firewalls and configure them without a problem.

We provide solutions to SMB and enterprise companies.

I rate the scalability of the Juniper SRX Series Firewall a ten out of ten.

The support is excellent.

I rate the support of the Juniper SRX Series Firewall a ten out of ten.

Positive

I have used Check Point and FortiGate.

The initial setup of the Juniper SRX Series Firewall is straightforward. The process takes two hours.

I rate the initial setup of the Juniper SRX Series Firewall a ten out of ten.

The price of the Juniper SRX Series Firewall could improve. The price is always a challenge in the market.

I rate the price of the Juniper SRX Series Firewall a seven out of ten.

I would recommend this solution to others because it is user-friendly and easy to maintain.

I rate the Juniper SRX Series Firewall an eight out of ten.