Barracuda CloudGen Firewall vs. Juniper SRX

The firewalls management is made easy through its very good management software. It has a lot of features such as VPN, ATP, IPS, Real-time log views, Active Directory integration, Virus Scanning of traffic / file downloads, High Availability Failover, Qos / Traffic Shaping, and a nice quick glance dashboard.

Incentivized

Juniper vSRX is an excellent edge gateway device. The combination of Tunneling protocols supported and the advanced routing & security features makes it perfect for this kind of deployment. It is available in physical, virtual appliances as well as support on multiple clouds so you can have the same box be your edge gateway in multiple environments for consistency.

It can also work as a Internet Gateway, DMZ Firewall/Router and it would function just fine.

While it can also work as a DC firewall (North-South), the poor GUI will make it harder in the day to day administration for the multiple policies in a DC.

Incentivized

• Increased level of network protection against threats.
• Visibility and control of applications that users access.
• URL Filtering to block unauthorized or prohibited websites on the internal corporate network.
• Protection against diverse malware at the edge of the network.
• Firewall redundancy with another backup appliance.

Incentivized

• The Juniper SRX platform is easy to set up (out of the box).
• The support team responds to tickets quickly and with good solutions.

Incentivized

• Very complex and steep learning curve to get up to speed.
• Multiple ways to configure for the same service or feature. Takes time to determine "your" customized build.
• Interface can sometimes be clunky when trying to determine how it's organized or arranged. Again, steep learning curve.

• Some of the more complex setups (clustered HA, etc.) can be a little difficult to configure.
• The lowest-end model that supports true multi-site HA is relatively expensive. It would be nice to have that option in lower models.
• Some configuration options (particularly the way address book entries are done) can get tedious and make for very long configs.

Incentivized

Easy enough to use and configure using the management UI. Reporting from the web filter is a little clunky, and not very user friendly. To be perfectly honest, once it's set up and running, there isn't a lot to do from the day-to-day side of things, which is not a bad thing.

They are very quick to answer the phone and I think I haven’t waited more than 5 minutes in the queue and if you have to hang up they actually call you back when it’s your turn in line. They have a secure tunnel that you can open for them to get into your device and help you with basically anything. It’s pretty magical if you ask me.

Incentivized

This is the one area where I have a beef with Juniper. When I called into Cisco TAC, 90% of the time, the first person I spoke with was able to resolve my issue. With Juniper TAC, 90% of the time, the first person I speak with is not able to resolve my issue, seems to almost be reading from a script, and must escalate my ticket. All of which takes time.

Incentivized

We used a much alder Cisco ASA router that was chocking our bandwidth and it couldn’t really be compared. It was clunky and horrible at best. Our WatchGuard was overly complicated and difficult to manage and required a version matching thick client installed locally to manage the firewall. The Barracuda solved a bunch of issues from both of these devices and allows me to really save time and money with its easy to configure the interface and inexpensive yet quality device and interface allow me to feel like I am getting a great value for my security.

Incentivized

Equipment prices ran about the same. Performance and management were also more or less equal. The biggest deciding factors for going with Juniper were (1) fewer security incidents related to SRX firewalls and (2) technical support costs were significantly less.

Incentivized

• Really neutral given we came from the x series. The move to the x series was a huge positive in terms of time spent managing and the ability to get what needed to be done, well done. The move to the NG was just the next step.
• I will say the one thing, in terms of value, that is given is the firewall admin application. This one program saves a ton of time in configuration versus using the web-based configuration. You can only pick one, and for me, it's a no brainer - turn the web-based config off and use the app.

Incentivized

• It is a workhorse for our field operations. It provides the last touch for an ISP to the customer. The customer has no view of the device, but with the repeatability of the device, they do not need to.
• The ability to roll out a dynamic routing protocol attached to a security zone allows elasticity to the environment that supports growth.
• VLAN support on the inside interfaces allow this to be the only device in some smaller deployments we install these in.

Incentivized