[j-nsp] J-Series vs SSG

[Campbell, Alex]

We are a small web hosting company looking to implement a pair of
Juniper firewalls behind our border routers (both J4350s running BGP to
a couple of ISPs).  What we are looking for is pretty simple - stateful
firewalling, simple ACLs, DDoS protection, active/passive failover.
 
We are looking at getting either 2 x SSG 320 or 2 x J2320s.  I'm aware
that these are exactly the same hardware - the question is whether we
want to be running ScreenOS or JunOS.
 
My preference right now is J2320s with JunOS as I'm very comfortable
working with JunOS.  But there seems to be a consensus amongst people I
have spoken to that ScreenOS will be easier to configure and will be a
better solution in the long term.  Also as far as I can gather, JunOS
isn't able to sync firewall state which ScreenOS does easily.
 
Any thoughts would be most appreciated.
 
Thanks,
 
Alex