We help IT Professionals succeed at work.

Juniper SRX100B vs SSG-5-SH

Hello Guys,

I am looking to purchase one of the above devices. Currently using IPCop.

Please guide which device is better in functionality, advanced in configuration capabilities, etc.

I will also be purchasing the surfcontrol license for web filtering.

Thanks
Comment
Watch Question

Commented:
Keep IPCop or migrate to untangle.

Author

Commented:
I am experienced with squid, so while using the URL filter with the advanced proxy, I am unab

Author

Commented:
Sorry about the previous comment...

I am not experienced with squid, so while using the URL filter with the advanced proxy, I am unable to do any custom filtering/unfiltering.

Only option available is filter or unfilter.

Thanks

Commented:
What is the motivation to move from IPcop?  More users?  requirement of management?  Need to move to a different web filter option?

Looks like surfcontrol is now owned by Websense.  So is the motivation to change device driven by a need to integrate with Websense?

Understanding your motivation will help in recommending a solution.
Commented:
Looking at the 2 boxes, It seems the SRX is more targeted to enterprise small branch and the SSG is more SOHO.  

The SRX looks a bit beefier, but I don't have the experience with these boxes to provide a recommendation based on personal use.

I'd go with the SRX based on the datasheets...
Commented:
I think that in your motivations for moving away from IPCop, there is a misunderstanding on how to configure squid. You don't need at all to configure the filter. Instead of configuring manually squid for filtering in IPCop, it is easier to install some filtering addon (based upon squid) where the configuration is already done. You only have to enable these addons, without customizing if you don't want.

I am using DansGuardian 3.0 (not DansGuardian 2.8 included in Copplus) in some locations, Squidguard 1.2 in other locations, and other addons elsewhere.
SRX and SSG's are both great boxes by itself, there are some differences in the chipset/hardware between 2, but that is not the constraint though.

So the questions/answers you need to first know are;

1. How many users are you having behind this?

2. What is the total packet output you're looking at?

3. Do you need VPN, if so - what is the throughput you need through the VPN?

4. Finally the cost factor, SRX boxes are costlier?

Cheers,
rsivanandan

Author

Commented:
VPN is not needed,
30 users.
Only 50Mbps is the total throughput realistically required
Cost for both is within the budget,
I'd suggest to go with SSG 20, it'll serve good and would have some future growth as well.

http://www.juniper.net/us/en/products-services/security/ssg-series/ssg20/#specifications

Look at the spec above, it is way over your requirement. Else try out the SSG -5;

http://www.juniper.net/us/en/products-services/security/ssg-series/ssg5/

Cheers,
rsivanandan

Author

Commented:
Thank You