nicklauscombs wrote:chrisj wrote:Kind of hi-jacking the thread, but any recommendations on what and where to get Juniper firewalls to learn on?
SRX100 is the cheapest you can pick up new they sit around 600 or 700 bucks.
SRX is not the cheapest you can get, and the SRX is an altogether different platform from the SSG series. If you wanted to learn say ScreenOS on the Juniper side, you can pick up an older NS25 (http://www.ebay.com/itm/Lot-of-2-Junipe ... 3375948cb6) which will run the latest versions of ScreenOS.
SRX' are more router gateways and run JunOS and if you haven't dealt with JunOS before, will give you a headache. For more on the pros/cons see the following thread: http://www.gossamer-threads.com/lists/nsp/juniper/23125
As for ASAs I try to avoid them. Checkpoint, same applies. However, since you want to tinker around, different story. VMWare had/has a checkpoint appliance you can fiddle with. It is not the same as say maintaining something like a Nokia IP series running checkpoint, but will get you familiar with it.