Thank you! -- richard
From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Tuesday, March 26, 2013 5:46 PM To: NT System Admin Issues Subject: Re: Semi OT: Cisco versus Checkpoint & Juniper The SRX line is Juniper's enterprise line. The SSG is based on their Netscreen acquisition many moons ago. The cost difference between those two platforms is not insignificant. My personal experience is with the SSG family, and it will be the one that I would expect to be more applicable to the original post. For the money of the SRX platform, I would go with one of the other vendors... Compare the Fortigate 60C, for example, with the Juniper SRX210 http://www.fortinet.com/products/fortigate/60C.html (look at the specs tab) http://www.juniper.net/as/en/products-services/security/srx-series/srx210/#specs Similar pricing for the base models, but the Fortigate has a bit more functionality at that price point, IMO. Regards, ASB http://XeeMe.com/AndrewBaker<http://xeeme.com/AndrewBaker> Providing Virtual CIO Services (IT Operations & Information Security) for the SMB market... On Tue, Mar 26, 2013 at 12:18 PM, Richard McClary <richard.mccl...@aspca.org<mailto:richard.mccl...@aspca.org>> wrote: Interesting, thanks! As for Juniper, might you have any opinions on the Juniper SRX line (uses JunOS) vs the SSG line (uses ScreenOS)? I know the SRX has about 4 times the throughput of the SSG line. Thanks again... -- richard From: Andrew S. Baker [mailto:asbz...@gmail.com<mailto:asbz...@gmail.com>] Sent: Tuesday, March 26, 2013 8:22 AM To: NT System Admin Issues Subject: Re: Semi OT: Cisco versus Checkpoint & Juniper At the low to mid-range, Juniper (with their SSG line) is more than price/feature competitive with CheckPoint, et al. Things get dicier when you get up into the multi Gbit range, but for the scope of what was requested, they are a good fit. Juniper messed up Netscreen from an organizational standpoint. That's why some of them left (at the time of the acquisition) and formed Fortinet. PA is more feature rich than the others, but the pricing is not for the faint of heart, especially at the lower-end of the scale. Fortinet has a really good mix of feature and pricing, but I'm not happy with what they did at the low end with their last OS release -- allegedly in the name of performance/stability. (Mind you, the features they took out of v5 all work with version 4 of their OS) Sophos has done really well with their acquisition of Astaro, and their looking to take on the mid-market with their pricing and feature bundles. Cisco strength, IMO, remains in core switch networking. If they had to sell the ASAs without the benefit of the Catalyst family as a tie-in, they'd have given up that business long ago. Same for their load-balancing prowess. Neither their pricing nor their feature set are appealing in areas outside of their core. CheckPoint licensing has still not been simplified to the degree that I would like, and their strengths are more suited to large enterprises than SMB or the mid-market space. Not a bad product by any stretch of the imagination, but you can get more for your money elsewhere. That's just my view of the landscape... ASB http://XeeMe.com/AndrewBaker<http://xeeme.com/AndrewBaker> Providing Virtual CIO Services (IT Operations & Information Security) for the SMB market... On Mon, Mar 25, 2013 at 10:47 PM, Patrick Salmon <psal...@gmail.com<mailto:psal...@gmail.com>> wrote: Yes. YMMV but the last client I worked with who looked hard at the very compelling PA story changed their mind after the sticker shock hit. Oh and ASB, you quite sure about that? This came out last month at the MWC in Barcelona. http://www.reuters.com/article/2013/02/26/us-juniper-review-idUSBRE91P0S220130226?feedType=RSS&feedName=technologyNews&utm_source=dlvr.it&utm_medium=twitter&dlvrit=56505 On Mon, Mar 25, 2013 at 10:29 PM, Kurt Buff <kurt.b...@gmail.com<mailto:kurt.b...@gmail.com>> wrote: I haven't priced the PA stuff, but I had somehow picked up the idea that they were less expensive than Cisco. Am I wrong about that? I hope not, because everything I've heard about their products is tantalizing... Kurt On Mon, Mar 25, 2013 at 7:03 PM, Andrew S. Baker <asbz...@gmail.com<mailto:asbz...@gmail.com>> wrote: I would have mentioned the PA devices, but Pierre did indicate some price sensitivity... :) ASB http://XeeMe.com/AndrewBaker<http://xeeme.com/AndrewBaker> Providing Virtual CIO Services (IT Operations & Information Security) for the SMB market... On Mon, Mar 25, 2013 at 9:56 PM, Kurt Buff <kurt.b...@gmail.com<mailto:kurt.b...@gmail.com>> wrote: And I'm quite anxious to lay my hands upon a Palo Alto device and see what it can do. EZ can probably talk your ear off about that... Kurt On Mon, Mar 25, 2013 at 6:50 PM, Andrew S. Baker <asbz...@gmail.com<mailto:asbz...@gmail.com>> wrote: Hi Pierre, I'm not that fond of Cisco in the UTM space... I would definitely select Juniper over Cisco, and Juniper will be better priced than CheckPoint. Are you able to get Sophos UTM devices? They have a very robust UTM line, and the pricing is better than many. There's also Fortinet, although I'm not happy about what they've done with v5 in taking away some of the features from the lower-end of the product line. Regards, ASB http://XeeMe.com/AndrewBaker<http://xeeme.com/AndrewBaker> Providing Virtual CIO Services (IT Operations & Information Security) for the SMB market... On Mon, Mar 25, 2013 at 7:22 AM, Pierre-Marie Camilleri <pmcamill...@laferla.com.mt<mailto:pmcamill...@laferla.com.mt>> wrote: Hi all Thought of posting this here in order to obtain some feedback. I am planning to replace our old firewall and have been looking at both Checkpoint and Juniper UTM appliances. Prices aren't cheap and was wondering how Cisco compares with these products (pricewise and features). What we need is a UTM appliance offering Firewall, IPS, VPN and Web Filtering. Does Cisco sell such an appliance and what are your experiences (good/bad) of using Cisco for your network security. TIA Pierre ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals® (ASPCA®) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
