Juniper Networks SRX300 Services Gateway - security appliance

These are what would be considered gray market in that it's a genuine product, but you don't get support and can't purchase licensing from Juniper since it doesn't come from an authorized reseller. However, if you already own or support other Juniper devices, there's nothing stopping you from grabbing the software you need to update firmware or setup your VPN connection. I was already aware of that and am not using this in a production environment, and there aren't too many features you can add to the SRX-300, so I don't really care. Unit came with the power brick and only an EU power cable, but again not an issue because really, who doesn't have a couple extra power cables laying around. No issues with setup and this shipped same day from the seller. For the pricing, I would recommend to anyone that has the knowledge to work without the ability to open a case with Juniper. There is plenty of information floating around various web sources and even Juniper's KB. If the price is right, I'll probably throw in an EX-2200 switch to complete my test environment.

Well, I have had this one and two others setup in my home lab for about two months now and I haven't had any hiccups with it. I have loaded a newer image on it so I could take advantage of some of the on board resources such as the larger flash and RAM. I have yet to experience any load errors or image failures, so knock knock.I have the three of them setup just like one would have if they attended one of the accredited JSEC courses. Inotherwards, two of them are setup as SRX1 and SRX2 while the third is setup with a bunch of Virtual Routing instances. That one is handling it very well. CPU doesn't appear to be taxed at all, and the processes are normal. Their is a minor heat alarm, but that is most likely due to how I have arranged: stacked on top of one another.Now, if you are going to use all eight ports, the last two ports ge-0/0/6 and ge-0/0/7 are SFP ports, so you need to have the optics available to use them. Depending on whether you want to use copper or fiber and which type of fiber determines how much you want to spend. I tend to stay with the known brands such as Axiom, Startech and 10Gtek. If you go with the Juniper branded SFPs, you will probably pay for those, but they are guaranteed to work. One thing about fiber SFPs, make sure that the SFP that you are using is for the fiber cable that you want. The rule of thumb is if the SFP has a black line on the release lever, then it is for Multi Mode/Orange fiber. If it has a blue line on the release lever, then it is for Single Mode/Yellow fiber.Now the drawbacks to this device is that it does not have access to Sky ATP, SSL Forward or Reverse Proxy, or In Service Software or Hardware Upgrade. Overall, I have no complaints so far for this device.

Very impressive firewall with impressive build. The good is world renowned o/s. Downloaded three volumes and each was 9000_ pages. Very deep command line promoted abilities but has an graphic GUI. For some reason default had no logs to show dropped connection or ankle biter login attempts. But they were able to be added via a lot of great support blogs and their forums. This is fan-less and uses very modern composite cover as the heat sink. It gets warm and internal temps went to 120 inside and 132+ for processor. It does need a light flow of air to bring it down to better temps. 100 inside and 120-125 on the processor. Any flow is better than no flow of air. Not a unit I would sandwich as one rack space with optional rack adapter without leaving room below and above for the convection cooling requirements.. This is shown to generate around 85 btu's. Converted to 23+ watts of heat maybe to 30. Fair amount of heat. It is fast and you can cluster even groups of them for more speed. Unlimited security to a most granular amount if you want. Feels like a brick 4-5 pound easily. Would recommend an easier path to stealth port status on the outside. That has been a challenge yet to solve with quite a few that say closed only..Realize there are arguments on both sides regarding this. If you purchase from an approved re-seller then you can get updates and support, software. If you purchased from a non approved re-seller then no up dates. The trade off was 100.00 or so. I took the discount after talking to Juniper on the phone they said they sell extras to those sellers.I would think no matter what you want to support updates for all? But knowing how strong this is without the online subscriptions will take the chance. True very high security bargain. You do have to know a bit and read to get the most out of it. A+++*****update 10/23**** Have everything stealth now but port 113 ident....Will get there.******update 3/10/17****** My unit has to have some air blowing over it even just a little or log shows yellow and over heating? Pot metal is a terrible heat sink material and has always been. Cool in my office 70. So drilled some strategic holes and that brought it down 10 degrees But it really wants any bit of air flow. So took offline.

... but a little disappointed.Physically the unit appears in very good condition.Unfortunately the copy of Junos on it was corrupted. It would not boot and so would not work as a firewall. Fortunately I am familiar with the SRX300 and was able to re-install Junos then I had a working SRX!Power supply was shipped separately and received a day later

No issues with this product, arrived on time in the original box. Juniper confirmed that the SN# was part of a larger order and might be a overstock from a project. License are included. And thou the junos is one rev behind normal, it will still work for a lab setup

The Firewall overheats, kept dropping packets.Firmware would not install properly, even after issuing a zerozise command.DHCP will fail even on a firmware downgrade to version 15.x.x and above.