Cisco Catalyst SD-WAN gives users the ability to manage connectivity across their WAN from a single dashboard that simplifies day to day monitoring and operations. Cisco Catalyst SD-WAN can be cloud-managed or deployed on premise offering comprehensive routing, security and policy control, along with advanced analytics with the flexibility to connect to multiple clouds with greater speed, reliability, and efficiency. According to the vendor, it can be deployed across a small number of…
N/A
Juniper SRX
Score 8.2 out of 10
N/A
Juniper SRX is a firewall offering. It provides a variety of modular features, scaled for enterprise-level use, based on a 3-in-1 OS that enables routing, switching, and security in each product.
It is a flexible tool for managing and optimizing WAN connections, but it does require some technical expertise to manage. It excels in its ability to integrate multiple WANs. It will however be a not-so-useful purchase if your company has few locations as it will be more expensive and complex for nothing.
SRXs seem to be well suited at the enterprise level for plain routers, firewalls, and IDP/IDS. They work well on MPLS and Ethernet, including Internet. I have 3 SRXs also performing edge duty, with 2 in a high availability (HA) cluster. The Juniper line of SRXs provides a good range of scaling from small business to extremely large enterprise. Wire speed is a common comparison factor and Juniper shines in that area.
It does appear to be a little glitchy when you go from template mode to CLI mode and try to do testing on certain areas. The configuration tends to get hung in that old session when you drop it from being controlled by the controller to making changes in CLI. I've had a lot of instances where you try to put it back into controller mode for review management and it holds on to your items you've had in CLI mode , it gets a little confused at which config it needs to use. You end up having to reset the whole number environment.
My only real criticism of the product is that it's hard to figure out how to upgrade the firmware from the CLI via TFTP via the docs, but it works great once you get it sorted.
Al ser soluciones integradas del portafolio de soluciones de Cisco, el soporte es transversal a cada uno de los componentes implementados, teniendo el cliente la capacidad de resolver sus inconvenientes bajo una misma infraestructura que está totalmente homologada, satisfacciendo de esta manera, las necesidades del cliente asi como permitiendo, que este se concentre en su negocio. Since the Cisco SD-WAN tools are a part of Cisco’s broader portfolio of solutions, support cross-cuts to each of our deployed components, with our company as the customer having the ability to solve our problems through the same, approved infrastructure. Their support team easily satisfies the customer’s needs so that they continue to focus on business functions.
This is the one area where I have a beef with Juniper. When I called into Cisco TAC, 90% of the time, the first person I spoke with was able to resolve my issue. With Juniper TAC, 90% of the time, the first person I speak with is not able to resolve my issue, seems to almost be reading from a script, and must escalate my ticket. All of which takes time.
The proof-of-concept setup that was done at a client site did provided a greater positive impression by Cisco Catalyst SD-WAN than Fortinet Secure SD-WAN for sure. It makes sense to use Cisco Catalyst SD-WAN while the major client is a Cisco house where more than 95% of network equipment used at their global networks are Cisco's.
Juniper SRX stands tall compared to all these products for Large Service Provider Networks, where traffic volume is larger. Also, cost comparison with SRX's few other products can also be another contributing factor while selecting this. As well as Juniper Routers, Switches, and multiple products from the same vendor to maintain one single vendor environment. As well as Juniper Support is also really good.
It's definitely decreased the amount that we spend on really expensive circuits every year. We're moving to cheaper broadband circuits with much higher throughput, being able to leverage those and still get the performance that we want, the quality of service that we want.
It is a workhorse for our field operations. It provides the last touch for an ISP to the customer. The customer has no view of the device, but with the repeatability of the device, they do not need to.
The ability to roll out a dynamic routing protocol attached to a security zone allows elasticity to the environment that supports growth.
VLAN support on the inside interfaces allow this to be the only device in some smaller deployments we install these in.
