tag:blogger.com,1999:blog-8889285000186294932.post8644622453877961837..comments2024-03-17T02:45:18.077-07:00Comments on Ken Felix Security Blog: Juniper SRX vrs cisco ASAUnknownnoreply@blogger.comBlogger6125tag:blogger.com,1999:blog-8889285000186294932.post-58397166228820919592017-03-01T10:06:24.330-08:002017-03-01T10:06:24.330-08:00Okay where to start;
How many user is good, but w...Okay where to start;<br /><br />How many user is good, but what thruput are you expecting from BW ? <br /><br />With regards to users are you expecting SSL or IPSEC connectivity, the former will rule out the SRX300 and with the ciscoASA that could be a license issue if you need SSLVPN aka webvpn access<br /><br /><br />Next, the 2 models are great ( I have a SRX300 btw ) so do you need only copper interfaces? The SRX will support SFP interface if so desired<br /><br />And lastly are you looking for HA? Both should be find in that area.<br /><br />Finally, routed-based is a "must" or preferred for vans in a SRX platform. I would not do a policy based vpn for any means. Route based with a "routed tunnel interfaces" are so much better from a diagnostic and collection standpoint. <br /><br />I hope that helps<br /><br />Ken<br />socpuppetshttps://www.blogger.com/profile/13096043188091774607noreply@blogger.comtag:blogger.com,1999:blog-8889285000186294932.post-75365074447892542412017-03-01T05:11:01.565-08:002017-03-01T05:11:01.565-08:00What would you recommend, to use of route base IPs...What would you recommend, to use of route base IPsec tunnels and enable full UTM feature for internal 500 users. cisco 5516x with firepower services or SRX300 series or else.Open Mind Communityhttps://www.blogger.com/profile/09965501838034415592noreply@blogger.comtag:blogger.com,1999:blog-8889285000186294932.post-59084772840775633032015-08-06T14:18:08.836-07:002015-08-06T14:18:08.836-07:00Lizz,
It depends on your business needs and requi...Lizz,<br /><br />It depends on your business needs and requirements. Review the cisco datasheets and contract with a consultant or reseller. Your question is too broad to give a reasonable reply.<br /><br />socpuppetshttps://www.blogger.com/profile/13096043188091774607noreply@blogger.comtag:blogger.com,1999:blog-8889285000186294932.post-2852296187162255132015-08-06T13:53:40.073-07:002015-08-06T13:53:40.073-07:00Which of the different models of cisco asa would y...Which of the different models of cisco asa would you recommend to buy? I was reading some reviews in http://ciscoasa.com but still not sureLizzhttps://www.blogger.com/profile/16003259947237404385noreply@blogger.comtag:blogger.com,1999:blog-8889285000186294932.post-70967315943638969452015-01-10T07:04:33.655-08:002015-01-10T07:04:33.655-08:00NP
There's good things to be found in both p...NP<br /><br />There's good things to be found in both platforms. The Cisco approach to application filtering & awareness, " is not a leading feature imho".<br /><br />Stay tune for more. socpuppetshttps://www.blogger.com/profile/13096043188091774607noreply@blogger.comtag:blogger.com,1999:blog-8889285000186294932.post-28432169843405697792015-01-10T03:16:40.834-08:002015-01-10T03:16:40.834-08:00Actually I was looking for a good comparison betwe...Actually I was looking for a good comparison between Juniper SRX and the Cisco's new ASA. As Cisco claims that it does application filtering. Thanks for sharing this nice post.Anonymoushttps://www.blogger.com/profile/07494430933231767535noreply@blogger.com