Juniper SRX is a firewall offering. It provides a variety of modular features, scaled for enterprise-level use, based on a 3-in-1 OS that enables routing, switching, and security in each product.
Cisco is a name well known in the IT field. The technology is tried and true and they have built a reputation on a solid platform. Though many people do not like the cost of the devices and the continued fees associated with long term ownership, you get what you pay for. I dont hesitate to recommend Cisco because I know people will get a solid product that will last a long time.
SRXs seem to be well suited at the enterprise level for plain routers, firewalls, and IDP/IDS. They work well on MPLS and Ethernet, including Internet. I have 3 SRXs also performing edge duty, with 2 in a high availability (HA) cluster. The Juniper line of SRXs provides a good range of scaling from small business to extremely large enterprise. Wire speed is a common comparison factor and Juniper shines in that area.
Easy setup and configuration. While the web UI has its quirks, setting up VLANs and other tasks which can be exceedingly complicated on other switches, are much easier on Cisco SG switches. You also have the ability to upload an existing configuration to switches, which can speed up the task of deploying many identical switches.
Features for the price. Getting a 48 port L3 switch with PoE+ for less than $2,000 is a great value.
Reliability. We have hundreds of the SG switches in dozens of client sites, many in harsh conditions, and they just keep going.
The web UI has taken a turn for the worse with the latest firmware on the SGx50 models -- the bifurcation between basic and advanced modes and the changes to the way VLANs are modified is a step backward in my opinion.
The power bricks on smaller models are enormous. I'm sure, however, keeping this circuitry external to the switch is what keeps my switches running year after year in hot environments.
Fans can be a bit loud on larger switches -- this is true of pretty much any 1U device though.
My only real criticism of the product is that it's hard to figure out how to upgrade the firmware from the CLI via TFTP via the docs, but it works great once you get it sorted.
This is the one area where I have a beef with Juniper. When I called into Cisco TAC, 90% of the time, the first person I spoke with was able to resolve my issue. With Juniper TAC, 90% of the time, the first person I speak with is not able to resolve my issue, seems to almost be reading from a script, and must escalate my ticket. All of which takes time.
Cisco is more enterprise level, more reliable, and generally more feature rich but also very expensive. That being said old or refurbished Cisco switches are much more affordable and in comparison to even new switches from the competitor they are still a great value even though they are used. I like Ubiquiti switches as well but Cisco is usually better overall.
Juniper SRX stands tall compared to all these products for Large Service Provider Networks, where traffic volume is larger. Also, cost comparison with SRX's few other products can also be another contributing factor while selecting this. As well as Juniper Routers, Switches, and multiple products from the same vendor to maintain one single vendor environment. As well as Juniper Support is also really good.
It is a workhorse for our field operations. It provides the last touch for an ISP to the customer. The customer has no view of the device, but with the repeatability of the device, they do not need to.
The ability to roll out a dynamic routing protocol attached to a security zone allows elasticity to the environment that supports growth.
VLAN support on the inside interfaces allow this to be the only device in some smaller deployments we install these in.
