Juniper SRX300 1000Mbit/s windscreen (hardware) - windshield (hardware) (1000 Mbit/s, 50 user(s), with cable, BGP, CLNS, is-is, OSPF, RIP-1, RIP-2, 15.4 W, 4000 MB)

Very impressive firewall with impressive build. The good is world renowned o/s. Downloaded three volumes and each was 9000_ pages. Very deep command line promoted abilities but has an graphic GUI. For some reason default had no logs to show dropped connection or ankle biter login attempts. But they were able to be added via a lot of great support blogs and their forums. This is fan-less and uses very modern composite cover as the heat sink. It gets warm and internal temps went to 120 inside and 132+ for processor. It does need a light flow of air to bring it down to better temps. 100 inside and 120-125 on the processor. Any flow is better than no flow of air. Not a unit I would sandwich as one rack space with optional rack adapter without leaving room below and above for the convection cooling requirements.. This is shown to generate around 85 btu's. Converted to 23+ watts of heat maybe to 30. Fair amount of heat. It is fast and you can cluster even groups of them for more speed. Unlimited security to a most granular amount if you want. Feels like a brick 4-5 pound easily. Would recommend an easier path to stealth port status on the outside. That has been a challenge yet to solve with quite a few that say closed only..Realize there are arguments on both sides regarding this. If you purchase from an approved re-seller then you can get updates and support, software. If you purchased from a non approved re-seller then no up dates. The trade off was 100.00 or so. I took the discount after talking to Juniper on the phone they said they sell extras to those sellers. I would think no matter what you want to support updates for all? But knowing how strong this is without the online subscriptions will take the chance. True very high security bargain. You do have to know a bit and read to get the most out of it. A+++ *****update 10/23**** Have everything stealth now but port 113 ident....Will get there. ******update 3/10/17****** My unit has to have some air blowing over it even just a little or log shows yellow and over heating? Pot metal is a terrible heat sink material and has always been. Cool in my office 70. So drilled some strategic holes and that brought it down 10 degrees But it really wants any bit of air flow. So took offline.

Mise en œuvre relativement simple. Démarrage un peu délicat au changement de mot de passe, mais après ça se passe bien, interface plutôt agréable pour un produit de sécurité de ce niveau.

This is the latest line of Juniper Firewall's. This SRX300, when not purchased from an approved Juniper reseller cannot be licensed. I already know this info, so I'm just using the base configuration, without the next-generation FW features. Mine came pre-loaded with version 15.x. This is good enough for my basic security. This Firewall can handle vlan-tagged PPPOE, which is faster than the current pfSense version. This is a direct competition with Palo Alto's PA-200, when you purchase the NGFW license. No noise and doesn't run hot. I give this Firewall high ratings due to ease of use and affordability. Also, one of the best command-line in the market.

Well, I have had this one and two others setup in my home lab for about two months now and I haven't had any hiccups with it. I have loaded a newer image on it so I could take advantage of some of the on board resources such as the larger flash and RAM. I have yet to experience any load errors or image failures, so knock knock. I have the three of them setup just like one would have if they attended one of the accredited JSEC courses. Inotherwards, two of them are setup as SRX1 and SRX2 while the third is setup with a bunch of Virtual Routing instances. That one is handling it very well. CPU doesn't appear to be taxed at all, and the processes are normal. Their is a minor heat alarm, but that is most likely due to how I have arranged: stacked on top of one another. Now, if you are going to use all eight ports, the last two ports ge-0/0/6 and ge-0/0/7 are SFP ports, so you need to have the optics available to use them. Depending on whether you want to use copper or fiber and which type of fiber determines how much you want to spend. I tend to stay with the known brands such as Axiom, Startech and 10Gtek. If you go with the Juniper branded SFPs, you will probably pay for those, but they are guaranteed to work. One thing about fiber SFPs, make sure that the SFP that you are using is for the fiber cable that you want. The rule of thumb is if the SFP has a black line on the release lever, then it is for Multi Mode/Orange fiber. If it has a blue line on the release lever, then it is for Single Mode/Yellow fiber. Now the drawbacks to this device is that it does not have access to Sky ATP, SSL Forward or Reverse Proxy, or In Service Software or Hardware Upgrade. Overall, I have no complaints so far for this device.

... but a little disappointed. Physically the unit appears in very good condition. Unfortunately the copy of Junos on it was corrupted. It would not boot and so would not work as a firewall. Fortunately I am familiar with the SRX300 and was able to re-install Junos then I had a working SRX! Power supply was shipped separately and received a day later