[j-nsp] SRX Experiences - Was: JUNOS 10.4S6 for EX8200 - PR/676826

Scott T. Cameron routehero at gmail.com
Thu Sep 1 17:06:28 EDT 2011


I have 2x chassis cluster with SRX3400s.

ALGs will destroy your soul.  Avoid at all costs.
Chassis cluster upgrades are needlessly painful (imo).
Session counts can become exhausted very easily and lead to a very quick and
dreadful DOS.

Most of my early adopter issues have disappeared with updates over time and
the software is quite stable for me in the past 6 months.

Scott

On Thu, Sep 1, 2011 at 4:59 PM, Brent Jones <brent at servuhome.net> wrote:

>
> I run multiple SRXs at several sites doing firewalling, routing, VPNs.
> Have everything from SRX100s, to SRX 1400s, branch units run 10.4R6 I
> believe, and SRX1400s running 11.1R3 (will double check later).
> Have had minor issues, mainly with VPNs to other vendor devices like
> Cisco ASAs. You have to be mindful if you need policy based VPN or
> route based VPNs to work with other vendors.
>
> I'd be curious to hear what problems other people have, for something
> to look out for, but otherwise the SRXs have worked as well as most
> anything else on the market.
> I would know, I've gone through the whole lifecycle of Cisco PIX, into
> ASAs, Sonicwall, Fortigate, etc, and I would say SRXs have worked
> better than most, especially considering they are a young product
> line.
>
>
> --
> Brent Jones
> brent at servuhome.net
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>


More information about the juniper-nsp mailing list