[j-nsp] SRX vs Checkpoint (4800)

[Jerry Jones]

I have no information on how they compare.

However keeping in mind my previous comment we sell these, I really do like them. Juniper kind of slacked off over last few years but are gaining steam and adding many new features and capabilities. We also sell others, and personally I would go with an SRX over those.

I do hear good stuff about Checkpoint.


On Nov 24, 2013, at 8:19 AM, Jerry Jones <jjones at danrj.com> wrote:

No comparison with checkpoint.

But Space is a framework. Yes you can purchase an appliance to run it on or just download the vm. In fact you can download the vm and play with for 30 days free.

To manage SRX you would use Security Director, a component of Space. You can download and try it also, but first must have a valid registered Space.

Security Director itself has come a long way in the last year. We have deployed it to manage a large national customer with many chain locations and it is working well. Note we sell Juniper so…

They have improved the GUI on SRX and added wizards to help make life nice, but it still is a long way from the cli.


On Nov 24, 2013, at 1:51 AM, Skeeve Stevens <skeeve+junipernsp at eintellegonetworks.com> wrote:

Hey all,

I have a customer where we have been slowly deploying Juniper (instead of
Cisco) for their routing and switching, and that has been going well.

But the other day they asked me about replacing their Checkpoint 4800's
with Juniper SRX.  For their needs, I am thinking of a pair of SRX550's.
But, I would like to justify my advice...  Does anyone have any
comparisons, etc... for Checkpoint 4800's (or that family) against SRX's?

Also, rather than just touching command-line to create/change rules...  is
there any GUI management tool for SRX firewall rules? I've heard of Space,
but the Juniper website only really talks about it in 'concept' and I can't
even tell if its a physical, virtual or app platform, and what it would
look like.

I've also heard of JACL - a non-supported migration/management tool, but it
seems to have disappeared from the net.

Any advice is welcome thanks guys.

...Skeeve

*Skeeve Stevens - *eintellego Networks Pty Ltd
skeeve at eintellegonetworks.com ; www.eintellegonetworks.com

Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve

facebook.com/eintellegonetworks ;  <http://twitter.com/networkceoau>
linkedin.com/in/skeeve

twitter.com/theispguy ; blog: www.theispguy.com


The Experts Who The Experts Call
Juniper - Cisco - Cloud
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp