Juniper firewalls - SSG or SRX

Jeff Richmond jeff.richmond at
Tue Apr 20 03:10:10 CDT 2010

Count me in as well. I ditched my personal Netscreens and replaced with SRXs and we have done so as well at my day job. Other than a few quirky things, they are very nice. V6 support is still somewhat limited though, but I am using an SRX210H with ADSL2 PIM as my main router at home and it has been absolutely solid. Using it for both V4 (flow) and V6 (packet) routing, as well as doing a bunch of other things. It replaced my older NS5GT and SSG5. Configuration is so much easier now too. I almost forgot the pain of screenos. Ok, maybe not...


On Apr 19, 2010, at 9:39 PM, seph wrote:

> I'm with Owen. I have nothing good to say about ScreenOS. In contrast
> JunOS has been great.
> seph
> Owen DeLong <owen at> writes:
>> Much.. Go SRX over SSG every time.  For anything that doesn't have an
>> SRX analog, consider the J-series.
>> SRX/J-Series == JunOS == Good.
>> SSG Series == ScreenOS == @)#$*#@)$(*!)(@[email protected]$
>> Just my $0.02 having dealt extensively with both environments over the
>> years.
>> Owen
>> On Apr 19, 2010, at 5:32 PM, Jeffrey Negro wrote:
>>> Has anyone on Nanog had any hands on experience with the lower end of the
>>> new SRX series Junipers?  We're looking to purchase two new firewalls, and
>>> I'm debating going with SSG series or to make the jump to the SRX line.  Any
>>> input, especially about the learning curve jumping from ScreenOS to JunOS
>>> would be greatly appreciated.  Thank you in advance.
>>> Jeffrey

More information about the NANOG mailing list