Confidential - Not for External Distribution

Fortinet and Authorized Partners Only

Fortinet versus Juniper SRX Branch Office series



Summary
Products: Juniper SRX Branch series consists of the SRX100, 210, & 240
Target market: SMB and Distributed Enterprise
Price: $950-$4,500
Key features: Juniper combined a group of partner technologies to create a UTM
solution:
SurfControl (Web Filtering)
Sophos (Antispam) Kaspersky (antivirus scanning)
Analysis: Juniper is positioning itself as a infrastructure/ router vendor,
although it offers fewer security technologies and at a higher price
than Fortinet.
What they say: Multiple security technologies on a single platform
Reality: Multiple vendors, Very limited certifications, Slow to innovate

Juniper Disadvantages
1. Hidden Costs & Inconsistent Features Customers must purchase
additional licenses for the IPSec VPN and SSL VPN clients. There are a
number of features, which only exists on the higher end SRX 3000/5000
series.
2. Limited Security Technologies: Juniper does not offer the following
integrated technologies on a single security gateway: Application Control,
Data Leak Prevention, Endpoint Control, Virtualization, WAN
optimization, or vulnerability assessment
3. No Certifications: The Juniper SRX branch office products do not have
the following certifications, ICSA, NSS UTM, VB100, FIPS-140, or
Common Criteria.

What is the media saying about Juniper?


Networld Review: SRX Manageability problems, David Newman and Joel Snyder
137 Gbps firewall with 1518 byte packets, whereas it drops to 6.9 Gbps and 29 Gbps when using 64- and 256-
byte frames.
78 Gbps IPS performance drops to 30 Gbps with no attack traffic present
Vulnerabilities
Juniper SRX Critical Denial of Service Vulnerability
Juniper JUNOS Routing Engine Denial of Service
Juniper JUNOS JWeb Multiple Vulnerabilities
Juniper NetScreen ScreenOS Script Insertion Vulnerability
Juniper SSL VPN Security Vulnerabilities
How to Beat Juniper
SRX
Price
Fortinet makes it simple
and inexpensive to
deploy the most
comprehensive threat
protection on the market
today. One price beats
Juniper complex
licensing or need for
customers to fill gaps in
Juniper products from
other vendors

Performance
Fortinet delivers faster
throughput than Juniper,
meaning that your
customers network
security wont become a
network bottleneck.
Fortinets purpose-built
hardware and software
improves security
without affecting
network or application
performance.

Security
Fortinet makes it easy
for your customers to
deploy exactly the right
mix of security
technologies to fit their
environment. Fortinets
unmatched multi-threat
security protects against
todays sophisticated
FORTINET Fortinet vs. Juniper SRX 100, 210, and 240
Confidential - Not for External Distribution
Fortinet and Authorized Partners Only
Juniper IPv6 vulnerability
Juniper TLS/SSL Renegotiation Vulnerability Secure Access (SA)


Juniper JUNOS PSN-2010-01-623 Exploit and Firewalls
Hacking the Juniper 5GT

Key Feature
Fortinet
FG-50B
Fortinet
FG-60C
Fortinet
FG-80C
Fortinet
FG-200B
Juniper
SRX 100
Juniper
SRX 210
Juniper
SRX 240
Application
Control
Yes Yes Yes Yes No No No
Data Loss
Prevention
Yes Yes Yes Yes No No No
SSL Content
Inspection
Yes Yes
i
Yes Yes No No No
Endpoint Control Yes Yes Yes Yes No No No
WAN Optimization N/A Yes
ii
Model Model No No No
Wireless
Controller
Yes Yes Yes Yes Yes Yes Yes
Virtualization Yes Yes Yes Yes No No No
Performance Fortinet
FG-50B
Fortinet
FG-60C
Fortinet
FG-80C
Fortinet
FG-200B
Juniper
SRX 100
Juniper
SRX 210
Juniper
SRX 240
Firewall
Throughput
100 Mbps 1 Gbps 700 Mbps 5 Gbps 650 Mbps 750 Mbps 1.5 Gbps
IPSec VPN
Throughput
48 Mbps 70 Mbps 80 Mbps 2.5 Gbps 65 Mbps 75 Mbps 250 Mbps
Antivirus
Throughput
19 Mbps 20 Mbps 50 Mbps 95 Mbps 25 Mbps 30 Mbps 85 Mbps
IPS Throughput 30 Mbps 60 Mbps 100 Mbps 500 Mbps 60 Mbps 80 Mbps 250 Mbps
Price (US List) $495 $595 $895 $2,995 $950 $1,700 $4,500
FORTINET Fortinet vs. Juniper SRX 100, 210, and 240
Confidential - Not for External Distribution
Fortinet and Authorized Partners Only



Positioning Fortinet against Juniper SRX 100, 210, and 240

1. Lower TCO
Lower cost appliances and simple, per-device licensing for wide range of security technologies

2. Better Scal abili ty
Fortinet delivers faster throughput, sessions, and IPSec tunnel support
Per-device licensing eliminates need to purchase additional licenses as network or technology needs change

3. Easi er Management
Web-based management from anywhere, as well as FortiGuard Analysis & Management Services (FAMS) and
advanced management, reporting, and audit tools

4. Security without Compromise
Industry-certified protection: ICSA Firewall, VPN, NIPS, and Antivirus; NSS Labs & VB 100, FIPS-140, and
Common Criteria
Advanced security technologies like application control, SSL content inspection, and endpoint control are
essential for detecting and blocking todays sophisticated, multi-vector threats.


i
Support in FortiOS 4.2.2
ii
Requires 16GB/ 32GB SDHC