[j-nsp] SRX Experiences - Was: JUNOS 10.4S6 for EX8200 - PR/676826

[Nathan Sipes]

Yep, the FTP ALG has been a real dark and sinister sadist for a while.

On Thu, Sep 1, 2011 at 3:06 PM, Scott T. Cameron <routehero at gmail.com>wrote:

> I have 2x chassis cluster with SRX3400s.
>
> ALGs will destroy your soul.  Avoid at all costs.
> Chassis cluster upgrades are needlessly painful (imo).
> Session counts can become exhausted very easily and lead to a very quick
> and
> dreadful DOS.
>
> Most of my early adopter issues have disappeared with updates over time and
> the software is quite stable for me in the past 6 months.
>
> Scott
>
> On Thu, Sep 1, 2011 at 4:59 PM, Brent Jones <brent at servuhome.net> wrote:
>
> >
> > I run multiple SRXs at several sites doing firewalling, routing, VPNs.
> > Have everything from SRX100s, to SRX 1400s, branch units run 10.4R6 I
> > believe, and SRX1400s running 11.1R3 (will double check later).
> > Have had minor issues, mainly with VPNs to other vendor devices like
> > Cisco ASAs. You have to be mindful if you need policy based VPN or
> > route based VPNs to work with other vendors.
> >
> > I'd be curious to hear what problems other people have, for something
> > to look out for, but otherwise the SRXs have worked as well as most
> > anything else on the market.
> > I would know, I've gone through the whole lifecycle of Cisco PIX, into
> > ASAs, Sonicwall, Fortigate, etc, and I would say SRXs have worked
> > better than most, especially considering they are a young product
> > line.
> >
> >
> > --
> > Brent Jones
> > brent at servuhome.net
> >
> > _______________________________________________
> > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/juniper-nsp
> >
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>