We are a smallish shop and are going to be upgrading our incoming network to a 10Gbps pipe. We currently have a 100Mbps.
We are going to need to upgrade our firewall. Currently we have a SRX300. It’s fine for the 100Mbps but won’t be able to handle the 10Gbps network. We don’t have a ton of firewall rules but do have a couple site to site vpns. We don’t expect to get 10Gbps over ipsec.
I recommended we stick with juniper and get a SRX1500 or potentially a SRX4100. However people are talking about wanting to switch to PAN (don’t ask why). Looking at their capabilities to match say the SRX4100 we would need to be looking at a PA-3260 or even a PA-5050 which are 35k and 70k (MSRP, i know we will get some discount but not sure, if it’s comparable in price). Are the PA devices just that more expensive? Am I missing something where I would be overspeccing the devices from PAN?
No comments:
Post a Comment