Juniper SRX Series Firewalls vs. SoftEther VPN

SRXs seem to be well suited at the enterprise level for plain routers, firewalls, and IDP/IDS. They work well on MPLS and Ethernet, including Internet. I have 3 SRXs also performing edge duty, with 2 in a high availability (HA) cluster. The Juniper line of SRXs provides a good range of scaling from small business to extremely large enterprise. Wire speed is a common comparison factor and Juniper shines in that area.

Incentivized

SoftEther VPN works easily, and extremely well through Azure, client-to-server, and in Layer 3 bridge mode between offices but it is not so easy to use from mobile devices, although we have had success, albeit with difficulty in the configuration.

Incentivized

• Edge Device (Tunneling & Routing)
• Routing Instances
• Zone Based Firewall
• L3 Gateway/Vlan termination
• DHCP Server & DHCP Relay
• Good support community & Good available documentation
• Good support by the Vendor

Incentivized

• It just works—I have never had a single call from a client or end-user complaining that their VPN wasn't working.
• It can be configured to be super easy for end-users to use—Nearly transparent to them, in fact.
• It is very lightweight on devices and works extremely fast. So fast, in fact, that about the only issue I ever have with SoftEther VPN are related to users sometimes forgetting they are working remotely.

Incentivized

• My only real criticism of the product is that it's hard to figure out how to upgrade the firmware from the CLI via TFTP via the docs, but it works great once you get it sorted.

Incentivized

• We have has some issues where their default port won't connect through an AT&T wireless AP, but creating an exception for it on the AP or changing the port always gets it working.

Incentivized

This is the one area where I have a beef with Juniper. When I called into Cisco TAC, 90% of the time, the first person I spoke with was able to resolve my issue. With Juniper TAC, 90% of the time, the first person I speak with is not able to resolve my issue, seems to almost be reading from a script, and must escalate my ticket. All of which takes time.

Incentivized

Juniper SRX stands tall compared to all these products for Large Service Provider Networks, where traffic volume is larger. Also, cost comparison with SRX's few other products can also be another contributing factor while selecting this. As well as Juniper Routers, Switches, and multiple products from the same vendor to maintain one single vendor environment. As well as Juniper Support is also really good.

I had experienced several reliability issues soon after Pertino VPN-as-a-Service was acquired by Cradlepoint where the service would go down for a supposed update but would be down for long periods. And that was just one of several issues that caused me grief. I started looking around for a suitable replacement and came across SoftEther VPN, a project by the University of Tsukuba, Japan, quite by accident. I fell in love with its ease of implementation, low device cost, ease of Admin control, and ease of use for end-users, in addition to its near-zero downtime reliability, and the fact that I have total control over its operation and maintenance.

Incentivized

• It is a workhorse for our field operations. It provides the last touch for an ISP to the customer. The customer has no view of the device, but with the repeatability of the device, they do not need to.
• The ability to roll out a dynamic routing protocol attached to a security zone allows elasticity to the environment that supports growth.
• VLAN support on the inside interfaces allow this to be the only device in some smaller deployments we install these in.

Incentivized

• I went from a Pertino/Cradlepoint VPN-as-a-Service requiring no hardware to a SoftEther VPN Client/Server configuration and that required the purchase of a tiny server to run SEVPN. It could have been a Linux box or Windows and I chose Windows, so there was a minimal cost for the Windows 10 device but it eliminated the monthly service cost and has historically been far more reliable.
• We went from about $12/user/month on Cradlepoint perimeter81 to $0/user/month after about a $500 investment in hardware, so just one of my clients has been saving $300/month after the initial $500 for the "Server" device.

Incentivized