Cisco Firepower 4100 Series vs Juniper SRX

Likelihood to Recommend

When we are asked by local partners which security equipment we use we always recommend our Cisco security products. The Firepower firewall is no exception and we can easily recommend this to others who need a fast, secure, and well built system that integrates well with all your existing hardware and software.

Read full review

Verified User

Engineer in Information Technology

Government Administration Company, 501-1000 employees

View all 1 answers on this topic

Juniper SRX is well suitable for large-scale organizations and also large service providers who use Advanced security and routing features and provide service to clients. juniper is very expensive and difficult to configure.

Read full review

Vipin Sharma

Network security engineer

MultiTech ServersInformation Technology & Services, 1-10 employees

View all 8 answers on this topic

Feature Rating Comparison

Cisco Firepower 4100 Series

Juniper SRX

Identification Technologies

Visualization Tools

Content Inspection

Policy-based Controls

Active Directory and LDAP

Firewall Management Console

Reporting and Logging

VPN

High Availability

Stateful Inspection

Proxy Server

Pros

Lots of expansion modules available for add-ons.
SFP ports are fast and plentiful.
Well designed hardware blends in with our other modern Cisco equipment.

Read full review

Verified User

Engineer in Information Technology

Government Administration Company, 501-1000 employees

View all 1 answers on this topic

One JUNOS is the Juniper mantra, including for the SRXs. While not entirely true, it comes close enough that if you learn some SRX configuration tricks, they will likely work across all of your SRXs.
Out of the box, with no additional license required, you have a NextGen firewall, by default. You can turn off the firewall and have just a plain ole router.

Read full review

Verified User

Engineer in Information Technology

Financial Services Company, 201-500 employees

View all 8 answers on this topic

Cons

Initial install and configuration can be complex.
May need to learn the new interface if coming from ASA.
Buggy web interface can at time cause issues.

Read full review

Verified User

Engineer in Information Technology

Government Administration Company, 501-1000 employees

View all 1 answers on this topic

My only real criticism of the product is that it's hard to figure out how to upgrade the firmware from the CLI via TFTP via the docs, but it works great once you get it sorted.

Read full review

Bear Golightly

IT Operations Manager / IT Service Manager

Nashville WrapsWholesale, 51-200 employees

View all 8 answers on this topic

Support Rating

No score

No answers yet

No answers on this topic

Juniper SRX 6.0

Based on 4 answers

This is the one area where I have a beef with Juniper. When I called into Cisco TAC, 90% of the time, the first person I spoke with was able to resolve my issue. With Juniper TAC, 90% of the time, the first person I speak with is not able to resolve my issue, seems to almost be reading from a script, and must escalate my ticket. All of which takes time.

Read full review

Verified User

Engineer in Information Technology

Financial Services Company, 201-500 employees

View all 4 answers on this topic

Alternatives Considered

No answers on this topic

The juniper is very versatile router/firewall box. it is an excellent router/edge device with zone based firewall.

The PaloAlto and the Fortinet have better GUIs and similar firewall featureset but they are not as flexible routers.

The Cisco CSR1kv is the only box that I would rank similar or higher to the Juniper SRX as it is as versatile as a router and supports the same security feature-set as the Juniper but it has better support and Cisco IOS is more widely adopted by the industry.

Read full review

Amr Momtaz

Cloud Migration Architect

IBMComputer & Network Security, 10,001+ employees

View all 8 answers on this topic

Return on Investment

Positive impact would be our increased security network wide.
Another positive would be the increased processing power, saving us time and [from] needing more equipment.
A negative impact would be the increased need for having to learn a new interface.

Read full review

Verified User

Engineer in Information Technology

Government Administration Company, 501-1000 employees

View all 1 answers on this topic

It is a workhorse for our field operations. It provides the last touch for an ISP to the customer. The customer has no view of the device, but with the repeatability of the device, they do not need to.
The ability to roll out a dynamic routing protocol attached to a security zone allows elasticity to the environment that supports growth.
VLAN support on the inside interfaces allow this to be the only device in some smaller deployments we install these in.

Read full review

Eric Stephenson

Staff System Engineer

CommScopeTelecommunications, 10,001+ employees

View all 8 answers on this topic

Pricing Details

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Cisco Firepower 4100 Series Editions & Modules

Edition

Firepower 4100	50,000-250,000¹

per appliance

Additional Pricing Details

—

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Juniper SRX Editions & Modules

—

Additional Pricing Details

—

Rating Summary

Cisco Firepower 4100 Series

Juniper SRX

Cisco Firepower 4100 Series

Juniper SRX

Cisco Firepower 4100 Series

Juniper SRX