Does anyone have experience with NSM from Juniper? I'm trying to get geek to geek information, not sales speak. I'm trying to figure out if I need this or not. They're telling me that I can only have basic control of the IDP modules without this thing. I'm just trying to figure out what functionality I wont get... Let me know if anyone has experience with this.

But what if we're talking about 1 SRX to manage, overkill it seems?

They were trying to tell me that I only got "basic IDP configuration abilities" on the native device and that if I wanted more advanced configuration abilities I needed NSM. None of their literature states that though. NSM does look awesome I just don't think we can justify it for this client on one device.