juniper srx branch series hot sheet july 2010

Upload: constantinescu-dragos

Post on 14-Oct-2015

8 views

Category:

Documents


0 download

TRANSCRIPT

  • Confidential - Not for External Distribution Fortinet and Authorized Partners Only

    Fortinet versus Juniper SRX Branch Office series Summary Products: Juniper SRX Branch series consists of the SRX100, 210, & 240 Target market: SMB and Distributed Enterprise Price: $950-$4,500 Key features: Juniper combined a group of partner technologies to create a UTM

    solution: SurfControl (Web Filtering) Sophos (Antispam) Kaspersky (antivirus scanning) Analysis: Juniper is positioning itself as a infrastructure/ router vendor,

    although it offers fewer security technologies and at a higher price than Fortinet.

    What they say: Multiple security technologies on a single platform Reality: Multiple vendors, Very limited certifications, Slow to innovate Juniper Disadvantages

    1. Hidden Costs & Inconsistent Features Customers must purchase additional licenses for the IPSec VPN and SSL VPN clients. There are a number of features, which only exists on the higher end SRX 3000/5000 series.

    2. Limited Security Technologies: Juniper does not offer the following integrated technologies on a single security gateway: Application Control, Data Leak Prevention, Endpoint Control, Virtualization, WAN optimization, or vulnerability assessment

    3. No Certifications: The Juniper SRX branch office products do not have the following certifications, ICSA, NSS UTM, VB100, FIPS-140, or Common Criteria.

    What is the media saying about Juniper?

    Networld Review: SRX Manageability problems, David Newman and Joel Snyder 137 Gbps firewall with 1518 byte packets, whereas it drops to 6.9 Gbps and 29 Gbps when using 64- and 256-

    byte frames. 78 Gbps IPS performance drops to 30 Gbps with no attack traffic present

    Vulnerabilities Juniper SRX Critical Denial of Service Vulnerability Juniper JUNOS Routing Engine Denial of Service Juniper JUNOS JWeb Multiple Vulnerabilities Juniper NetScreen ScreenOS Script Insertion Vulnerability Juniper SSL VPN Security Vulnerabilities

    How to Beat Juniper SRX Price

    Fortinet makes it simple and inexpensive to deploy the most comprehensive threat protection on the market today. One price beats Juniper complex licensing or need for customers to fill gaps in Juniper products from other vendors

    Performance Fortinet delivers faster throughput than Juniper, meaning that your customers network security wont become a network bottleneck. Fortinets purpose-built hardware and software improves security without affecting network or application performance.

    Security Fortinet makes it easy for your customers to deploy exactly the right mix of security technologies to fit their environment. Fortinets unmatched multi-threat security protects against todays sophisticated

  • FORTINET Fortinet vs. Juniper SRX 100, 210, and 240

    Confidential - Not for External Distribution Fortinet and Authorized Partners Only

    Juniper IPv6 vulnerability Juniper TLS/SSL Renegotiation Vulnerability Secure Access (SA)

    Juniper JUNOS PSN-2010-01-623 Exploit and Firewalls Hacking the Juniper 5GT

    Key Feature Fortinet

    FG-50B Fortinet FG-60C

    Fortinet FG-80C

    Fortinet FG-200B

    Juniper SRX 100

    Juniper SRX 210

    Juniper SRX 240

    Application Control

    Yes Yes Yes Yes No No No

    Data Loss Prevention

    Yes Yes Yes Yes No No No

    SSL Content Inspection

    Yes Yesi Yes Yes No No No

    Endpoint Control Yes Yes Yes Yes No No No

    WAN Optimization N/A Yesii Model Model No No No

    Wireless Controller

    Yes Yes Yes Yes Yes Yes Yes

    Virtualization Yes Yes Yes Yes No No No

    Performance Fortinet FG-50B

    Fortinet FG-60C

    Fortinet FG-80C

    Fortinet FG-200B

    Juniper SRX 100

    Juniper SRX 210

    Juniper SRX 240

    Firewall Throughput

    100 Mbps 1 Gbps 700 Mbps 5 Gbps 650 Mbps 750 Mbps 1.5 Gbps

    IPSec VPN Throughput

    48 Mbps 70 Mbps 80 Mbps 2.5 Gbps 65 Mbps 75 Mbps 250 Mbps

    Antivirus Throughput

    19 Mbps 20 Mbps 50 Mbps 95 Mbps 25 Mbps 30 Mbps 85 Mbps

    IPS Throughput 30 Mbps 60 Mbps 100 Mbps 500 Mbps 60 Mbps 80 Mbps 250 Mbps

    Price (US List) $495 $595 $895 $2,995 $950 $1,700 $4,500

  • FORTINET Fortinet vs. Juniper SRX 100, 210, and 240

    Confidential - Not for External Distribution Fortinet and Authorized Partners Only

    Positioning Fortinet against Juniper SRX 100, 210, and 240 1. Lower TCO x Lower cost appliances and simple, per-device licensing for wide range of security technologies

    2. Better Scalability x Fortinet delivers faster throughput, sessions, and IPSec tunnel support x Per-device licensing eliminates need to purchase additional licenses as network or technology needs change

    3. Easier Management x Web-based management from anywhere, as well as FortiGuard Analysis & Management Services (FAMS) and

    advanced management, reporting, and audit tools 4. Security without Compromise x Industry-certified protection: ICSA Firewall, VPN, NIPS, and Antivirus; NSS Labs & VB 100, FIPS-140, and

    Common Criteria x Advanced security technologies like application control, SSL content inspection, and endpoint control are

    essential for detecting and blocking todays sophisticated, multi-vector threats.

    i Support in FortiOS 4.2.2 ii Requires 16GB/ 32GB SDHC