Thread: Junos es++ !

We today replaced our main services (website, etc) firewalls with Juniper J series we had spare using JUNOS ES (Enhanced Services).

Fantastic... we get all the features of JUNOS with a very flexible firewall sat on top. Definitely an option for those looking to protect some servers

J2320 is not that expensive a box and rated up to 600Mbps firewall throughput, so a very cost effective way of doing it also.

Not knowing Juniper I couldn't choose between the £1300 and the 4.5k options.. But I sure know a green box maker (well their firewalls are black but...) that can do a damn site more thruput than 600meg if you are at the top of that price range!

J2320 was about £1200 a pop when we bought these ones...

Originally Posted by PeteK

Not knowing Juniper I couldn't choose between the £1300 and the 4.5k options.. But I sure know a green box maker (well their firewalls are black but...) that can do a damn site more thruput than 600meg if you are at the top of that price range!

Edit: being illiterate

Ed, WTF are you on about?


And thanks for that Dan, might take a look at the features..

Originally Posted by PeteK

And thanks for that Dan, might take a look at the features..

bear in mind the USD rate will make them a bit pricier now; but still a very good deal (especially when you have a few lying around!)

Originally Posted by PeteK

Ed, WTF are you on about?


And thanks for that Dan, might take a look at the features..

No idea, I seem to have become temporarily insane

I cant find much on licensing for JunOS ES - only details on the JFlow and Advanced BGP licensing, any ideas on pricing for ES, or can you simply download it?

We are looking at investing in some SSG's, are the firewall features comparable in the J Series with ES and the SSG's?

Cheers

SSG and JUNOS ES are different

if you have a J box with support you can download ES free

Originally Posted by goscombtech

SSG and JUNOS ES are different

if you have a J box with support you can download ES free

As long as they provide similar capabilities it may fit the bill for us better than the SSG, stateful and ALG's is really all we need for these. I couldnt see any mention other than the download on the site so didnt want to presume it was free! Ta!

I would assume you can't use them in a redundant pair (share state etc)?

Not managed to get around to trying ES but will probably do so at some point.

Yes, ES does full session sharing and config sharing in Active/Active mode. Also somewhat worrying if you're using J-Series as routers is the following in the updated data-sheet:

Originally Posted by Juniper

Juniper realizes that every customer may not be ready to make the change to JUNOS software with enhanced services. We will continue to support packet based JUNOS software according to our standard lifecycle policy

The data sheet talks about ES only in relation to the J-Series, only mentioning standard track when it is saying what is different.

Originally Posted by Karl

Yes, ES does full session sharing and config sharing in Active/Active mode.

Interesting cheers - will have to look into that :-)

As of JUNOS 9.4 it appears that the "ES" release is now the only available package, the base install isnt listed on the downloads section - certainly shows the direction they are heading in!