Alex, Its important to see the technical specifications for the SSG-320 box:
BGP instances 3 BGP peers 4 BGP routes 10,000 OSPF instances 3 OSPF routes 10,000 RIP v1/v2 instances 128 RIP v2 routes 10,000 > We are a small web hosting company looking to implement a pair of > Juniper firewalls behind our border routers (both J4350s running BGP to > a couple of ISPs). What we are looking for is pretty simple - stateful > firewalling, simple ACLs, DDoS protection, active/passive failover. J-Series certainly will support all these features. > We are looking at getting either 2 x SSG 320 or 2 x J2320s. I'm aware > that these are exactly the same hardware - the question is whether we > want to be running ScreenOS or JunOS. > > My preference right now is J2320s with JunOS as I'm very comfortable > working with JunOS. But there seems to be a consensus amongst people I > have spoken to that ScreenOS will be easier to configure and will be a > better solution in the long term. Also as far as I can gather, JunOS > isn't able to sync firewall state which ScreenOS does easily. ScreeonOS is easier to configure, better support for NAT and Filters (with UTM), but you will not have the same routing features and flexibility to configure, manipulate, mark or classify traffic ... like you have with JUNOS. JUNIPER is talking about to support some UTM features in JUNOS and some acceleration features too. Att, Giuliano _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
