Juniper SSG 5, couple of Q's if I may

mike1210

mike1210

mike1210

Associate
Joined
20 Jan 2006
Posts
313
Hi all,
Looking to get one of these 2nd hand to have a play with it at home, already have a Cisco 877W and always wondered how these compare.

To run this with ADSL I'm guessing I would need a PPPoE/PPPoA bridge in front of it like the draytek Vigor 110. I then plan to trunk it down to a Cisco 2940 switch.

Is there anything I need to be aware of when buying one with regards to spec and the like, has this superseeded the Netscreen 5 GT?

How much is an account with Juniper so I can get ScreenOS updates? I assume this is a yearly fee a la Cisco IOS updates

Anyone used this and the 877 before? If so which do you prefer?

Mike:)
 
J Care support on my SSG 140 was just over 100 quid for a year I think

I am pretty sure it superspeeds the 5GT but willing to be proven wrong on that

You are correct in that you would need a pppoe bridge, not sure if the SSG 5 has an exspanion slot for an ADSL module or not?
 
hi there,

if your dead set on an ssg5 then yeah you will need to put an adsl modem infront of it, unless you can stump up the readies for a 20 which does have an expansion slot for you to put an expansion card in.

if your purely looking to get your hands a bit dirty on some netscreen kit then i would just go for a 5gt with an adsl modem built-in. i look after about 30 of them at work, and with 5.4.0r10 code on them they are rock solid and support way more than you are ever likely to need. they are also soooo easy to configure!

in order to get screenos updates (legally) you would need to buy a 12 month maintenance contract which will also cover advance replacement in the event of failure. this will cost you a couple of hundred quid.

if it were me, i would be getting a 5gt adsl off the bay with 5.4.0r10 already on it... if you hold out, you might even find one of the wireless enabled ones too! your only looking at between £50-100 for a 5gt adsl, and a bit more for a wireless enabled one.

give me a shout if you need any help, i work with juniper kit all day long!
 
Forget the 20, the adsl module seems to be a real achilles heal, we must have returned 4 of the bloody things and we've only recently started selling them!
 
Sp00n said:
Forget the 20, the adsl module seems to be a real achilles heal, we must have returned 4 of the bloody things and we've only recently started selling them!
Click to expand...

hmmm, that's quite interesting...would be grateful if you could let me know if this continues to be a problem since a 20 with an adsl module is our only upgrade path when the 5gt-adsl becomes end-of-life...if we want a single appliance vs. a 5 + external modem that is...really don't want to move away from juniper! <3
 
atomiser said:
hmmm, that's quite interesting...would be grateful if you could let me know if this continues to be a problem since a 20 with an adsl module is our only upgrade path when the 5gt-adsl becomes end-of-life...if we want a single appliance vs. a 5 + external modem that is...really don't want to move away from juniper! <3
Click to expand...

i thought the NS5gt series is already EOL since june this year.
 
Peace said:
i thought the NS5gt series is already EOL since june this year.
Click to expand...

Sort of. The EOL announcement was made at the end of June:

The EOL announcement for these products is effective 30-June-2008 with a last order date of 31-December-2008. Effective 1-January-2009, the above products will be removed from the price list and will no longer be orderable.
Click to expand...

However, Juniper did release ScreenOS 6.2r1 for the 5GT yesterday. Apparently a big customer really needed some ScreenOS 6 features so they must've whinged quite a lot at Juniper before they eventually caved in ;) I have been told by Juniper that this really is the last ScreenOS the 5GT will ever see. I guess it'll get a few new revisions, but 6.2 is the highest it'll get.

6.2 seems to be working fine on my 5GT at home so far :)
 
Last edited:
Phemo said:
Sort of. The EOL announcement was made at the end of June:



However, Juniper did release ScreenOS 6.2r1 for the 5GT yesterday. Apparently a big customer really needed some ScreenOS 6 features so they must've whinged quite a lot at Juniper before they eventually caved in ;) I have been told by Juniper that this really is the last ScreenOS the 5GT will ever see. I guess it'll get a few new revisions, but 6.2 is the highest it'll get.

6.2 seems to be working fine on my 5GT at home so far :)
Click to expand...

Nice, I always assumed they wouldn't run it. I swapped my 5GT for an SSG20 at home pretty much because of that...
 
Yeah, they always said that 5.4 would be the last for the 5GT, but I can only assume this customer (the Juniper SEs wouldn't tell me who it was) kicked off big time about having a lot of 5GTs they'd be forced to upgrade to SSG5s. They're clearly big to be able to influence Juniper's decision on a product announced as EOL though :)
 
this is an interesting development, i'll definitely give that a go! thanks for the heads up!

edit: should there be a schema update for nsm to accompany this screenos update?
 
Last edited:
You'd think there would be but that doesn't seem to be available yet :) No idea how long that's going to take to appear.
 
hmmm, not even sure the version of nsm that i am using (2007.1) supports screenos 6 or not...just tried to add that firmware and i get an 'upgrade path not supported'...
 
I know 2007.3 is required for a schema update to support 6.1 but I can't remember what version supports 6.0 - don't think 2007.1 will unfortunately.

It's a shame NSM is such a pain to upgrade :)
 
Hi,

I have a netscreen 5GT Wireless at home and I trying to get the version 6.2 to install... Can someone help me?
I currently at 5.4r3 and to upgrade to 6.2 I will need 5.4r8 and 6.2...
Thanks in advance.

Regards
 
spolf said:
Hi,

I have a netscreen 5GT Wireless at home and I trying to get the version 6.2 to install... Can someone help me?
I currently at 5.4r3 and to upgrade to 6.2 I will need 5.4r8 and 6.2...
Thanks in advance.

Regards
Click to expand...

Legally unless the firewall is fairly new (3 months I think is Juniper's cut off for free software updates) you need a support contract. If you don't have one you're not entitled to screenos updates.
 
You must log in or register to reply here.
Back
Top Bottom