Cisco IPS Sensor (Discontinued) vs Juniper SRX

Likelihood to Recommend

IPS sensors are more suited for companies that do not have visibility into their network with third-party analyzing tools. Scenarios would be to place IPS sensors at the perimeter firewalls mainly. IPS sensors are less appropriate for companies that have third-party analyzing tools that will mitigate vulnerabilities and malicious traffic and activities already.

Read full review

Kenneth Ma

AVP Network Security Team Lead

East West BankFinancial Services, 1001-5000 employees

View all 2 answers on this topic

Juniper SRX is well suitable for large-scale organizations and also large service providers who use Advanced security and routing features and provide service to clients. juniper is very expensive and difficult to configure.

Read full review

Vipin Sharma

Network security engineer

MultiTech ServersInformation Technology & Services, 1-10 employees

View all 8 answers on this topic

Feature Rating Comparison

Cisco IPS Sensor (Discontinued)

Juniper SRX

Identification Technologies

Visualization Tools

Content Inspection

Policy-based Controls

Active Directory and LDAP

Firewall Management Console

Reporting and Logging

VPN

High Availability

Stateful Inspection

Proxy Server

Pros

Detects threats
Included in other Cisco tools
Feeds for automatic actualization

Read full review

Verified User

Consultant in Engineering

Computer & Network Security Company, 501-1000 employees

View all 2 answers on this topic

One JUNOS is the Juniper mantra, including for the SRXs. While not entirely true, it comes close enough that if you learn some SRX configuration tricks, they will likely work across all of your SRXs.
Out of the box, with no additional license required, you have a NextGen firewall, by default. You can turn off the firewall and have just a plain ole router.

Read full review

Verified User

Engineer in Information Technology

Financial Services Company, 201-500 employees

View all 8 answers on this topic

Cons

The web GUI is somewhat slow.
Sometimes difficult to adjust policies.
Fail open feature may not work properly all the time.

Read full review

Kenneth Ma

AVP Network Security Team Lead

East West BankFinancial Services, 1001-5000 employees

View all 2 answers on this topic

My only real criticism of the product is that it's hard to figure out how to upgrade the firmware from the CLI via TFTP via the docs, but it works great once you get it sorted.

Read full review

Bear Golightly

IT Operations Manager / IT Service Manager

Nashville WrapsWholesale, 51-200 employees

View all 8 answers on this topic

Support Rating

Cisco IPS Sensor (Discontinued) 9.0

Based on 1 answer

Cisco TAC has been great at helping with configurations and issues that may arise

Read full review

Kenneth Ma

AVP Network Security Team Lead

East West BankFinancial Services, 1001-5000 employees

View all 1 answers on this topic

Juniper SRX 6.0

Based on 4 answers

This is the one area where I have a beef with Juniper. When I called into Cisco TAC, 90% of the time, the first person I spoke with was able to resolve my issue. With Juniper TAC, 90% of the time, the first person I speak with is not able to resolve my issue, seems to almost be reading from a script, and must escalate my ticket. All of which takes time.

Read full review

Verified User

Engineer in Information Technology

Financial Services Company, 201-500 employees

View all 4 answers on this topic

Alternatives Considered

HP and Fortinet were in the PoC, too, but we decided to use Cisco IPS because it integrated with the rest of our Cisco equipment better. It was well integrated in the ACI datacenter, too. Performance and actual integration work with Cisco. Most of the workers at our company are familiar with Cisco.

Read full review

Verified User

Consultant in Engineering

Computer & Network Security Company, 501-1000 employees

View all 2 answers on this topic

The juniper is very versatile router/firewall box. it is an excellent router/edge device with zone based firewall.

The PaloAlto and the Fortinet have better GUIs and similar firewall featureset but they are not as flexible routers.

The Cisco CSR1kv is the only box that I would rank similar or higher to the Juniper SRX as it is as versatile as a router and supports the same security feature-set as the Juniper but it has better support and Cisco IOS is more widely adopted by the industry.

Read full review

Amr Momtaz

Cloud Migration Architect

IBMComputer & Network Security, 10,001+ employees

View all 8 answers on this topic

Return on Investment

Recognize virus outbreaks.
Find unauthorized administrative traffic.
Customization needs to be done to reach your objective.

Read full review

Verified User

Consultant in Engineering

Computer & Network Security Company, 501-1000 employees

View all 2 answers on this topic

It is a workhorse for our field operations. It provides the last touch for an ISP to the customer. The customer has no view of the device, but with the repeatability of the device, they do not need to.
The ability to roll out a dynamic routing protocol attached to a security zone allows elasticity to the environment that supports growth.
VLAN support on the inside interfaces allow this to be the only device in some smaller deployments we install these in.

Read full review

Eric Stephenson

Staff System Engineer

CommScopeTelecommunications, 10,001+ employees

View all 8 answers on this topic

Pricing Details

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Rating Summary

Cisco IPS Sensor (Discontinued)

Juniper SRX

Cisco IPS Sensor (Discontinued)

Juniper SRX

Cisco IPS Sensor (Discontinued)

Juniper SRX

Cisco IPS Sensor (Discontinued) vs Juniper SRX