Re: [j-nsp] Using SRX's for BGP and Firewalling

2010-11-09 Thread Maqbool Hashim
Of Michel de Nostredame Sent: 08 November 2010 22:30 To: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] Using SRX's for BGP and Firewalling On Mon, Nov 8, 2010 at 10:54 AM, Keegan Holley keegan.hol...@sungard.com wrote: One of the things that turned us off to the SRX series was the fact

Re: [j-nsp] Using SRX's for BGP and Firewalling

2010-11-09 Thread Keegan Holley
On Mon, Nov 8, 2010 at 10:26 PM, Julien Goodwin jgood...@studio442.com.auwrote: On 09/11/10 14:17, Keegan Holley wrote: BGP full feed on an SRX650 is fine, if you disable flow mode (as much as you can, don't forget the ALG's). What's the point of doing BGP on a firewall with

Re: [j-nsp] Using SRX's for BGP and Firewalling

2010-11-09 Thread Maqbool Hashim
accordingly. From: Keegan Holley [mailto:keegan.hol...@sungard.com] Sent: 09 November 2010 03:18 To: Julien Goodwin Cc: Maqbool Hashim; juniper-nsp Subject: Re: [j-nsp] Using SRX's for BGP and Firewalling On Mon, Nov 8, 2010 at 7:47 PM, Julien Goodwin jgood...@studio442.com.aumailto:jgood

Re: [j-nsp] Using SRX's for BGP and Firewalling

2010-11-09 Thread Keegan Holley
] On Behalf Of Michel de Nostredame Sent: 08 November 2010 22:30 To: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] Using SRX's for BGP and Firewalling On Mon, Nov 8, 2010 at 10:54 AM, Keegan Holley keegan.hol...@sungard.com wrote: One of the things that turned us off to the SRX series was the fact

Re: [j-nsp] Using SRX's for BGP and Firewalling

2010-11-09 Thread Julien Goodwin
On 09/11/10 20:12, Keegan Holley wrote: On Mon, Nov 8, 2010 at 10:26 PM, Julien Goodwin jgood...@studio442.com.au mailto:jgood...@studio442.com.au wrote: On 09/11/10 14:17, Keegan Holley wrote: BGP full feed on an SRX650 is fine, if you disable flow mode (as much as

Re: [j-nsp] Using SRX's for BGP and Firewalling

2010-11-09 Thread Brett O'Hara
...@puck.nether.net] On Behalf Of Maqbool Hashim Sent: Tuesday, 9 November 2010 8:02 PM To: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] Using SRX's for BGP and Firewalling Hmmm, that's interesting. There were two reasons why I was considering the SRX's over the SSG's for this setup. 1) I had thought

[j-nsp] Using SRX's for BGP and Firewalling

2010-11-08 Thread Maqbool Hashim
Hi, I'm looking at doing a multihomed BGP setup using two upstream Internet providers. We are obtaining PI space and would like to announce our PI space via BGP to our upstreams.I'm looking at using one of the SRX range from Juniper to handle the BGP and firewalling requirement for us.

Re: [j-nsp] Using SRX's for BGP and Firewalling

2010-11-08 Thread Keegan Holley
One of the things that turned us off to the SRX series was the fact that code upgrades have to be done on both firewalls if you run them in HA mode. That's kind of a big deal if you want hitless upgrades or there are issues with the upgrade itself. BGP is one of the main reasons to use a juniper

Re: [j-nsp] Using SRX's for BGP and Firewalling

2010-11-08 Thread Julien Goodwin
On 09/11/10 02:38, Maqbool Hashim wrote: Hi, I'm looking at doing a multihomed BGP setup using two upstream Internet providers. We are obtaining PI space and would like to announce our PI space via BGP to our upstreams.I'm looking at using one of the SRX range from Juniper to handle

Re: [j-nsp] Using SRX's for BGP and Firewalling

2010-11-08 Thread Keegan Holley
On Mon, Nov 8, 2010 at 7:47 PM, Julien Goodwin jgood...@studio442.com.auwrote: On 09/11/10 02:38, Maqbool Hashim wrote: Hi, I'm looking at doing a multihomed BGP setup using two upstream Internet providers. We are obtaining PI space and would like to announce our PI space via BGP to our

Re: [j-nsp] Using SRX's for BGP and Firewalling

2010-11-08 Thread Julien Goodwin
On 09/11/10 14:17, Keegan Holley wrote: BGP full feed on an SRX650 is fine, if you disable flow mode (as much as you can, don't forget the ALG's). What's the point of doing BGP on a firewall with firewallling turned off? Because they're cheaper then the J-series. signature.asc