Normally, engineers scoff the products when they find out ridiculous limitations, cursing the developers… right?. Without any idea of how to verify the correct operations and identify the problems, the only option is to call support! Luckily, this has been taken into account too, and each chapter has a nice part with commands and expected output.Įvery complex product has its own limitations, and Juniper SRX is no exception. It’s nice to understand how a feature works and how to configure it, but we all know what happens when you’ll deploy it in production. this should be best practice for any book talking about a product or technology! I ran a search and I found more than 100 occurrence of the term “best practice”…. Unfortunately, those best practices are more often results of one’s experience than stated by the vendor… but in this book, Brad and Rob are sharing in each chapter very valuable advises. One of the expectation of any customer talking to a product expert is to gain access to some “best practices” to follow in their networks. Here are some of the things I really liked reading: Their long time involvement with both Juniper Engineering teams and customers made them real experts of this product. Oh, if this book would have been available couple of years ago… □īrad and Rob’s passion for this product is really coming out on the pages of this book. I personally worked with SRX in Enterprise, Data Center, Service Provider and Mobile Operators environments, and it all boils down to the few scenarios presented here. All the configuration examples are using a clear network scenario defined as “reference networks” early in the book, and it’s great because in a simple diagram there are almost all the deployment options you can find in the real world! The remaining chapters dig deep into specific features and are ordered by the popularity of the feature itself. They basically require no technical knowledge and are great for anyone who wants to know more about SRX or is involved in making technology decisions within a company. The first five chapters are designed to get you started using SRX and Junos. It’s a collection of 15 chapters for a total of over 1.000 pages… it’s difficult not to call this a comprehensive guide. The first thing that struck me was the structure of this book. The SRX5800 supports more than 200 Gbps firewall and 100 Gbps IPS, as well as 400,000 connections per second, and an industry record-breaking 60 million concurrent user sessions. Maybe the most impressive part is the performance of the high-end devices: The product has been developed thinking ahead… hence including not only classic firewall services, such as Statefull Inspection, NAT, and VPN, but also Antivirus, URL-filtering, Intrusion Prevention, and Application Firewall capabilities. The SRXs are the natural successor of the mighty NetScreen firewalls, and they represent a revolution because they’re based on the Juniper flagship operating system, JunOS. If you’re not familiar with it, the Juniper SRX Series is the family of next-generation firewall products released in 2010 by Juniper Networks. What you read here is an exclusive review of the book “ Juniper SRX Series“, only for ! So, when I saw this upcoming book on SRX written by Brad Woodberg together with Rob Cameron, another pillar of the development on this product, I jumped immediately on the possibility to get a review-copy. I remember well how active he was in supporting the Juniper community on IDP first (the Intrusion Prevention solution) and SRX (the next-generation firewall family) later. I met Brad, co-author of “ Juniper SRX Series”, a few years ago when I was also working for Juniper Networks.
0 Comments
Leave a Reply. |