Cisco Firepower 4100 Series vs. Juniper SRX

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Cisco Firepower 4100 Series
Score 8.8 out of 10
N/A
The Cisco Firepower 4100 Series’ 1-rack-unit size is presented by the vendodr as ideal at the Internet edge and in high-performance environments. They further state that it shows what’s happening on your network, detects attacks earlier so you can act faster, and reduces management complexity.N/A
Juniper SRX
Score 8.2 out of 10
N/A
Juniper SRX is a firewall offering. It provides a variety of modular features, scaled for enterprise-level use, based on a 3-in-1 OS that enables routing, switching, and security in each product.N/A
Pricing
Cisco Firepower 4100 SeriesJuniper SRX
Editions & Modules
Firepower 4100
50,000-250,000
per appliance
No answers on this topic
Offerings
Pricing Offerings
Cisco Firepower 4100 SeriesJuniper SRX
Free Trial
NoNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details
More Pricing Information
Features
Cisco Firepower 4100 SeriesJuniper SRX
Firewall
Comparison of Firewall features of Product A and Product B
Cisco Firepower 4100 Series
8.0
3 Ratings
6% below category average
Juniper SRX
8.7
5 Ratings
2% above category average
Identification Technologies9.73 Ratings9.03 Ratings
Visualization Tools9.43 Ratings7.03 Ratings
Content Inspection7.93 Ratings8.04 Ratings
Policy-based Controls9.73 Ratings10.04 Ratings
Active Directory and LDAP7.22 Ratings8.03 Ratings
Firewall Management Console9.93 Ratings7.05 Ratings
Reporting and Logging6.13 Ratings8.05 Ratings
VPN7.03 Ratings10.04 Ratings
High Availability5.33 Ratings10.05 Ratings
Stateful Inspection9.83 Ratings10.04 Ratings
Proxy Server5.52 Ratings9.03 Ratings
Best Alternatives
Cisco Firepower 4100 SeriesJuniper SRX
Small Businesses
pfSense
pfSense
Score 9.2 out of 10
pfSense
pfSense
Score 9.2 out of 10
Medium-sized Companies
pfSense
pfSense
Score 9.2 out of 10
pfSense
pfSense
Score 9.2 out of 10
Enterprises
Next-Generation Firewalls - PA Series
Next-Generation Firewalls - PA Series
Score 9.3 out of 10
Next-Generation Firewalls - PA Series
Next-Generation Firewalls - PA Series
Score 9.3 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Cisco Firepower 4100 SeriesJuniper SRX
Likelihood to Recommend
9.8
(3 ratings)
8.0
(8 ratings)
Likelihood to Renew
-
(0 ratings)
8.0
(2 ratings)
Support Rating
-
(0 ratings)
6.4
(3 ratings)
User Testimonials
Cisco Firepower 4100 SeriesJuniper SRX
Likelihood to Recommend
Cisco
When we are asked by local partners which security equipment we use we always recommend our Cisco security products. The Firepower firewall is no exception and we can easily recommend this to others who need a fast, secure, and well built system that integrates well with all your existing hardware and software.
Read full review
Juniper Networks
SRXs seem to be well suited at the enterprise level for plain routers, firewalls, and IDP/IDS. They work well on MPLS and Ethernet, including Internet. I have 3 SRXs also performing edge duty, with 2 in a high availability (HA) cluster. The Juniper line of SRXs provides a good range of scaling from small business to extremely large enterprise. Wire speed is a common comparison factor and Juniper shines in that area.
Read full review
Pros
Cisco
  • Policy management in the GUI. I'm old-school, and still create ACLs in the CLI, but using the GUI for this is very nice.
  • Event monitoring and reporting is great, and you can get very granular when it comes to what information you are viewing.
  • I really like the troubleshooting features that are built in, especially the packet tracer and the ability to generate and download a troubleshooting package to review or send to TAC.
Read full review
Juniper Networks
  • Edge Device (Tunneling & Routing)
  • Routing Instances
  • Zone Based Firewall
  • L3 Gateway/Vlan termination
  • DHCP Server & DHCP Relay
  • Good support community & Good available documentation
  • Good support by the Vendor
Read full review
Cons
Cisco
  • When deployed as Firepower Threat Defense, configurations cannot be made within the device itself.
  • Troubleshooting can be difficult if the Cisco Firepower 4100 Series firewall is managed by the Cisco Firepower Management Center.
  • There are two operating systems in Cisco Firepower 4100 Series, firmware upgrade process will take a long time.
Read full review
Juniper Networks
  • My only real criticism of the product is that it's hard to figure out how to upgrade the firmware from the CLI via TFTP via the docs, but it works great once you get it sorted.
Read full review
Support Rating
Cisco
No answers on this topic
Juniper Networks
This is the one area where I have a beef with Juniper. When I called into Cisco TAC, 90% of the time, the first person I spoke with was able to resolve my issue. With Juniper TAC, 90% of the time, the first person I speak with is not able to resolve my issue, seems to almost be reading from a script, and must escalate my ticket. All of which takes time.
Read full review
Alternatives Considered
Cisco
As I mentioned before, the Fortigates have better failover. I think the Cisco interface is easier to use that that of the FortiGate. My only criticism would be that with multiple CLIs, it can get a bit confusing when you are trying to configure something or troubleshoot from the CLI.
Read full review
Juniper Networks
Juniper SRX stands tall compared to all these products for Large Service Provider Networks, where traffic volume is larger. Also, cost comparison with SRX's few other products can also be another contributing factor while selecting this. As well as Juniper Routers, Switches, and multiple products from the same vendor to maintain one single vendor environment. As well as Juniper Support is also really good.
Read full review
Return on Investment
Cisco
  • Positive impact would be our increased security network wide.
  • Another positive would be the increased processing power, saving us time and [from] needing more equipment.
  • A negative impact would be the increased need for having to learn a new interface.
Read full review
Juniper Networks
  • It is a workhorse for our field operations. It provides the last touch for an ISP to the customer. The customer has no view of the device, but with the repeatability of the device, they do not need to.
  • The ability to roll out a dynamic routing protocol attached to a security zone allows elasticity to the environment that supports growth.
  • VLAN support on the inside interfaces allow this to be the only device in some smaller deployments we install these in.
Read full review
ScreenShots