Cisco vs Juniper Firewalls

Posted on 2009-12-18
Last Modified: 2013-11-22
I am looking for some education about the differences in ios systems of cisco and juniper networks. I have a some knowledge and experinces in configuring cisco asa, pix and other routers and switches but i have not done any junipers, so in an attempt not to look like a complete idiot i am looking for some good sites i can look at to learn about juniper and its ios. Any suggestions, i have done a traditional google search.
Question by:jasonpiper01
    LVL 34

    Expert Comment

    by:Istvan Kalmar

    Please refer this page about coparsion:

    I like ASA, I advise to use it if you have deep knowledge...

    Best regards,
    LVL 4

    Expert Comment

    for Junos visit this site:

    after registration you can download more study materials, and after passing the preassesment test you can get 50% discount on the prometric exam (JNCIS-SEC)

    you can also find some other tracks there.

    if you need docu on juniper netscreen boxes i will ask my colleague i think he has some learning stuff.


    Author Comment

    Thanks guys, i actually have a CCNA but the upper management wants to use juniper equipment. So i am forced to learn this equipment on the fly. I just want to get a head up on learning about them before we start to deploy them.
    LVL 67

    Accepted Solution

    For ScreenOS (Juniper SSG devices), you can have several looks at the Concepts & Examples ( Each part can be read (almost) independently from the others. You get a good impression how that OS is structured in relation to definitions.
    LVL 25

    Assisted Solution

    keep in mind that ScreenOS is on the way out in favor of JUNOS-ES.  Also, their SNMP isn't as good as Cisco.  The Juniper SRX appears to be the replacement for the Netscreens and so far doesn't support IPv6 last I checked (some one correct me if I'm wrong).

    Personally, I would go with the ASA.  Junipers are cheaper and personally I do like their JUNOS devices.  However, their SSL VPN and their firewalls worth the price difference IMHO.  If you don't care about management or monitoring of the devices, but only the functionality, then Junipers may be for you though.

    Finally, if you are planning on using the Juniper configuration management platform, NSM, it is not very good either for non-firewall devices.

    Author Comment

    Sorry guys, i just havent had a chance to actually use the knowledge here, tomorrow i will have a meeting with the boss and i hope to award points this week.
    LVL 18

    Assisted Solution

    To add to some of the comments above.

    SRX does support IPv6
    Screenos is not quite on its way out as yet, although Juniper have definitely preferred junos and is throwing most of its resources to junos.  Screenos will have to be around for another couple of years as a minimum as there are some pretty big customers out that use screenos as its security certified (EAL et al) and given that any new certification can take up to 2 years to acquire, juniper will need to support screenos for a wee while yet.

    So for Juniper we have the following:

    SSG/ISG running screenos
    NS 5000 series running screenos
    J series running junos
    SRX running junos

    If you are getting new kit, I would recommend going for the Junos based, with SRX preferred

    I also agree that sadly neither junos nor screenos offers SSL VPN functionality at all, Junipers answer is that they sell a very good SSL VPN appliance.  TBH, it is a great piece of kit and knocks the socks off any competitor, but the lack of SSL VPN on a firewall can make a difference to a tender.


    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Join & Write a Comment

    Suggested Solutions

    Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
    Let’s list some of the technologies that enable smooth teleworking. 
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now