Juniper SRX vs. SonicWall NSA Series

Juniper vSRX is an excellent edge gateway device. The combination of Tunneling protocols supported and the advanced routing & security features makes it perfect for this kind of deployment. It is available in physical, virtual appliances as well as support on multiple clouds so you can have the same box be your edge gateway in multiple environments for consistency.

It can also work as a Internet Gateway, DMZ Firewall/Router and it would function just fine.

While it can also work as a DC firewall (North-South), the poor GUI will make it harder in the day to day administration for the multiple policies in a DC.

Incentivized

SonicWall NSA is best suited for small to mid-size companies or small to medium K-12 school districts. It's less appropriate for larger businesses and schools. This is due to their ease of use and well-rounded feature set but lacks in advanced configuration, performance, and reliability.

Incentivized

• The Juniper SRX platform is easy to set up (out of the box).
• The support team responds to tickets quickly and with good solutions.

Incentivized

• Relatively inexpensive compared to some of the higher-end products, like Palo Alto Networks.
• Easy to set up, as the SonicWall NSA interface is consistent across all models.

Incentivized

• Some of the more complex setups (clustered HA, etc.) can be a little difficult to configure.
• The lowest-end model that supports true multi-site HA is relatively expensive. It would be nice to have that option in lower models.
• Some configuration options (particularly the way address book entries are done) can get tedious and make for very long configs.

Incentivized

• Ideal with smaller businesses. Would have to examine for more complex needs of larger businesses.
• Scalability might be an issue for super large organizations.

The usability takes a bit of training, like any firewall, but I've found that showing even Tier 1 helpdesk how to do basic things has been easy. We have entry-level IT technicians performing white-listing, IP entries, VPN access and LDAP functions, to name a few tasks. The menus in the GUI are pretty straight forward.

Incentivized

This is the one area where I have a beef with Juniper. When I called into Cisco TAC, 90% of the time, the first person I spoke with was able to resolve my issue. With Juniper TAC, 90% of the time, the first person I speak with is not able to resolve my issue, seems to almost be reading from a script, and must escalate my ticket. All of which takes time.

Incentivized

Most of the time, calling SonicWall NSA Support, you get an expert who can help resolve your issues. RMAs are pretty easy once they determine there is an issue with the hardware. Support is available 24x7, which makes emergency calls easy. The only downside is the support engineers may have thick accents; however, their expertise more than makes up for any language barriers.

Incentivized

Equipment prices ran about the same. Performance and management were also more or less equal. The biggest deciding factors for going with Juniper were (1) fewer security incidents related to SRX firewalls and (2) technical support costs were significantly less.

Incentivized

The SonicWall NSA is a lot more fluid and much less clunky than a Watchguard firewall. The Watchguard is ok for a small business-- you can buy them at retail outlets. But as you can see above, this model of Watchguard Firebox has been discontinued. The NSA classes are a more high-end and functional business-class firewall.

Incentivized

• It is a workhorse for our field operations. It provides the last touch for an ISP to the customer. The customer has no view of the device, but with the repeatability of the device, they do not need to.
• The ability to roll out a dynamic routing protocol attached to a security zone allows elasticity to the environment that supports growth.
• VLAN support on the inside interfaces allow this to be the only device in some smaller deployments we install these in.

Incentivized

• It is a firewall appliance at an affordable price compared to other firewall vendors.
• It is reliable and thus, allows our business to operate without any hiccups.

Incentivized