Juniper Firewall SSG 330M vs Microsoft ISA

Posted on 2011-04-19
Last Modified: 2013-11-16
Hy Expert$$ got a layman voice !!!

apart from Layer7 and Layer3 differance between SSG n ISA

what tasks of ISA can be Done in SSG

1) can SSG be replacement of MS ISA
     1a) can we do content blocking same as MS ISA in SSG?
      1b) can we do caching same as MS ISA in SSG?
2) should we use them togather or not?

Question by:sportsboy
    LVL 51

    Accepted Solution

    Can't even find the 330M listed so can't help. Nothing (software based) does things better than ISA or the new FTMG server except maybe Sidewinder and very little on the hardware front either.

    Having a basic firewall in front of ISA that filters out unwanted traffic is always a help as the ISA/TMG only needs to inspect traffic that meets a particular criteria.
    LVL 67

    Assisted Solution

    The SSG 320M is a powerful upper-class device, providing Content Filtering, Antivirus, Deep Inspection, and many more. What it does not is act as a Web Proxy. FTMG is certainly better in the Web filtering department, and has powerful Firewall features (as Keith doesn't grow tired to emphasize).

    If you lay stress on the Web Filtering features and complex allow/deny/reduce bandwidth scenarios, using FTMG or any other Web Proxy is your choice.
    FTMG & SSG in combination sounds exaggerative and can make the setup quite complex, but help if you need to inspect many ingress connections.

    Author Comment

    can we stop specific traffic like VIDEO through SSG? how?
    LVL 67

    Expert Comment

    Deep Inspection can do that - it inspects streams, recognizes JavaScript, ... But that introduces lags for any Web traffic.
    Besides that, simple firewall rules can be used, e.g. to block specific IPs or ports or combinations of both. Blocking is fast, as it is done in hardware.

    Author Comment

    how to stop VIDEO contents ?
    LVL 67

    Expert Comment

    With all due respect - the "how-to" is a completely different question. This one is about comparing ISA, SSG and both in combination. Opinions have been posted, and since noone else chimed in yet, I reckon it is the best you can get. However, you can request attention, stating you wish to have more Experts opine.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    I have been asked to explain on many, many occasions the correct way to setup network cards and DNS settings on ISA Server 2004, 2006 and forefront Threat management gateway (FTMG) and have willing done so. I have also promised my self everytime tha…
    There are several problems reported according slow link speeds or poor performance in TMG 2010, UAG 2010 or ISA 2006. I want to collect here some of the common issues together to give a brief overview what can be the reason. Nevertheless, not all of…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now