Re: [j-nsp] SRX1400 opinions

2013-04-28 Thread James Howlett
Hi Paul, Thank You very much for the clarification. I will have only one ASBR. As for redundancy I'll go with a single 1400 unit and add a second in the future. Still, a single SRX1400 will be probably more stable then a single J6350. On the side note - does Juniper plan to have a replacement

Re: [j-nsp] SRX1400 opinions

2013-04-28 Thread James Howlett
> > Good, you cannot run UTM on the data center SRX at the moment, branch only. > > On Apr 27, 2013, at 12:55 PM, James Howlett wrote: > > Hello, > > Thank you for the heads-up > > > Srx's have replication issues with large routing environments. Duplicatin

Re: [j-nsp] SRX1400 opinions

2013-04-27 Thread James Howlett
veat in mind > when you want clustered fail over. > I have a budget only for one 1400 at the moment. I don't plan to run UTM on it as well. Just few bgp sessions, firewall and some DDoS screening. Regards, jim > Hope this helps, > -Tim Eberhard > > > On A

[j-nsp] SRX1400 opinions

2013-04-27 Thread James Howlett
Hello, I have a network build on J4350 and SRX240 and i need to upgrade. I was thinking about switching two devices for SRX1400. My network has 2 full bgp feeds and some peerings. We use about 150-200Mbps average. Will SRX1400 be a good choice then? Best regards, jim

Re: [j-nsp] DDoS protection for J-series and SRX

2013-04-12 Thread James Howlett
Hello, > > Definitely SCREENs, as other folks have said. > > However, in the corner case where you're getting traffic for a > particular service or destination IP that isn't in use (maybe not in > this instance), a quick way of protecting the traffic from hitting the > flow module is to use a fi

Re: [j-nsp] DDoS protection for J-series and SRX

2013-04-11 Thread James Howlett
niper-nsp@puck.nether.net Have a look at the screen options on both kits, we can apply basic DDoS protection there and limit stuff like max connections over a short period etc On 11 April 2013 09:57, James Howlett wrote: Hello, I have a small network with J6350 as a border router (BGP) an

[j-nsp] DDoS protection for J-series and SRX

2013-04-11 Thread James Howlett
Hello, I have a small network with J6350 as a border router (BGP) and two SRX240H in a cluster. Since few days my network is a victim of DDoS attacks. Majority of them are high pps count attacks. Are there any methods to protect my network against such attacks. My J-series can handle quite a lo