<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">I asked last week as part of customer
      negotiations. Both told me they are "investigating" however can be
      done by web page or support call. <br>
      It's possible im talking to the wrong people as other's have told
      me that  both do have bgp announced RTBH. Would love to get the
      contact's so can get a definitive yea/nae<br>
      <br>
      <br>
      <br>
      . On 8/07/13 5:36 PM, Chris Chaundy wrote:<br>
    </div>
    <blockquote
cite="mid:CABOrm95m3Y4bnk0Jqtq4dLJtOJMAnBEt2D0yZ+q4n5pBg8LKVQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">As does Nextgen...<br>
        <br>
        Does anyone know more about the Telstra and Optus RTBH options? 
        Last time I asked, you had to do it through a support call or
        web page (I don't class this as RTBH :-).<br>
        <br>
      </div>
      <div class="gmail_extra"><br>
        <br>
        <div class="gmail_quote">On Mon, Jul 8, 2013 at 4:19 PM, Ankur
          Puri <span dir="ltr"><<a moz-do-not-send="true"
              href="mailto:Ankur.Puri@au.ntt.com" target="_blank">Ankur.Puri@au.ntt.com</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div
style="word-wrap:break-word;color:rgb(0,0,153);font-size:12px;font-family:Arial,sans-serif">
              <div>
                <div>
                  <div>NTT supports RTBH and active mitigation as well.</div>
                  <div>
                    <div>
                      <div><br>
                      </div>
                      <div>Regards</div>
                      <div>Ankur Puri</div>
                      <div>Global Wholesale Manager</div>
                    </div>
                    <div>NTT Australia Pty Ltd</div>
                  </div>
                </div>
              </div>
              <div><br>
              </div>
              <span>
                <div
                  style="font-family:Calibri;font-size:11pt;text-align:left;color:black;BORDER-BOTTOM:medium
                  none;BORDER-LEFT:medium
                  none;PADDING-BOTTOM:0in;PADDING-LEFT:0in;PADDING-RIGHT:0in;BORDER-TOP:#b5c4df
                  1pt solid;BORDER-RIGHT:medium none;PADDING-TOP:3pt">
                  <span style="font-weight:bold">From: </span>James
                  Braunegg <<a moz-do-not-send="true"
                    href="mailto:james.braunegg@micron21.com"
                    target="_blank">james.braunegg@micron21.com</a>><br>
                  <span style="font-weight:bold">Date: </span>Monday, 8
                  July 2013 4:05 PM<br>
                  <span style="font-weight:bold">To: </span>Matt
                  Perkins <<a moz-do-not-send="true"
                    href="mailto:matt@spectrum.com.au" target="_blank">matt@spectrum.com.au</a>>,
                  "<a moz-do-not-send="true"
                    href="mailto:ausnog@lists.ausnog.net"
                    target="_blank">ausnog@lists.ausnog.net</a>" <<a
                    moz-do-not-send="true"
                    href="mailto:ausnog@lists.ausnog.net"
                    target="_blank">ausnog@lists.ausnog.net</a>>
                  <div>
                    <div class="h5"><br>
                      <span style="font-weight:bold">Subject: </span>Re:
                      [AusNOG] Q sonicwall and juniper<br>
                    </div>
                  </div>
                </div>
                <div>
                  <div class="h5">
                    <div><br>
                    </div>
                    <div>
                      <div bgcolor="white" link="blue" vlink="purple"
                        lang="EN-US">
                        <div>
                          <p class="MsoNormal"><span
style="font-size:11pt;color:rgb(31,73,125);font-family:Calibri,sans-serif">Both
                              Optus and Telstra support
                            </span><span
style="font-size:11pt;color:rgb(31,73,125);font-family:Calibri,sans-serif">RTBH
                              … at least that’s what my new Telstra and
                              Optus contract say…</span></p>
                          <p class="MsoNormal"><span
style="font-size:11pt;color:rgb(31,73,125);font-family:Calibri,sans-serif"> </span></p>
                          <p class="MsoNormal"><span
style="font-size:11pt;color:rgb(31,73,125);font-family:Calibri,sans-serif">Kindest
                              Regards</span><b><span
style="font-size:11pt;color:rgb(31,73,125);font-family:Calibri,sans-serif"></span></b></p>
                          <p class="MsoNormal"><span
style="font-size:11pt;color:rgb(31,73,125);font-family:Calibri,sans-serif"> </span></p>
                          <div>
                            <p class="MsoNormal"><b><span
style="font-size:11pt;color:rgb(31,73,125);font-family:Verdana,sans-serif">James
                                  Braunegg<br>
                                </span></b><b><span
style="font-size:8pt;color:rgb(31,73,125);font-family:Verdana,sans-serif">P:</span></b><span
style="font-size:8pt;color:rgb(31,73,125);font-family:Verdana,sans-serif"> 
                                1300 769 972  | 
                                <b>M:</b>  0488 997 207 |  <b>D:</b> 
                                (03) 9751 7616</span><span
style="font-size:8pt;color:rgb(31,73,125);font-family:Verdana,sans-serif"></span></p>
                            <p class="MsoNormal"><b><span
style="font-size:8pt;color:rgb(31,73,125);font-family:Verdana,sans-serif">E:</span></b><span
style="font-size:8pt;color:rgb(31,73,125);font-family:Verdana,sans-serif">  
                              </span><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><a
                                  moz-do-not-send="true"
                                  href="mailto:james.braunegg@micron21.com"
                                  target="_blank"><span
                                    style="font-size:8pt;font-family:Verdana,sans-serif">james.braunegg@micron21.com</span></a></span><span
style="font-size:8pt;color:rgb(31,73,125);font-family:Verdana,sans-serif"> 
                                |  <b>ABN:</b>  <a
                                  moz-do-not-send="true"
                                  href="tel:12%20109%20977%20666"
                                  value="+12109977666" target="_blank">12
                                  109 977 666</a>   <br>
                                <b>W:</b>  <a moz-do-not-send="true"
                                  href="http://www.micron21.com/ip-transit"
                                  target="_blank">www.micron21.com/ip-transit</a>
                                 <b>T:</b> @micron21</span><span
style="font-size:8pt;color:rgb(31,73,125);font-family:Verdana,sans-serif"></span></p>
                            <p class="MsoNormal"><span
style="font-size:8pt;color:rgb(31,73,125);font-family:Verdana,sans-serif"> </span></p>
                            <p class="MsoNormal"><span
style="font-size:8pt;color:rgb(31,73,125);font-family:Verdana,sans-serif"><br>
                                <img
                                  src="cid:part9.03080403.08030700@spectrum.com.au"
                                  alt="Description: Description:
                                  Description: Description: M21.jpg"
                                  border="0" height="39" width="250"><br>
                              </span><span
style="font-size:8pt;color:rgb(31,73,125);font-family:Verdana,sans-serif"
                                lang="EN-AU">This message is intended
                                for the addressee named above. It may
                                contain privileged or confidential
                                information. If you are not the intended
                                recipient of this message you must not
                                use, copy, distribute or disclose it to
                                anyone other than the addressee. If you
                                have received this message in error
                                please return the message to the sender
                                by replying to it and then delete the
                                message from your computer.</span><span
style="font-size:8pt;color:rgb(31,73,125);font-family:Verdana,sans-serif"></span></p>
                          </div>
                          <p class="MsoNormal"><span
style="font-size:11pt;color:rgb(31,73,125);font-family:Calibri,sans-serif"> </span></p>
                          <div>
                            <div style="border:none;border-top:solid
                              #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
                              <p class="MsoNormal"><b><span
                                    style="font-size:10pt;color:windowtext;font-family:Tahoma,sans-serif">From:</span></b><span
style="font-size:10pt;color:windowtext;font-family:Tahoma,sans-serif">
                                  AusNOG [<a moz-do-not-send="true"
                                    href="mailto:ausnog-bounces@lists.ausnog.net"
                                    target="_blank">mailto:ausnog-bounces@lists.ausnog.net</a>]
                                  <b>On Behalf Of </b>Matt Perkins<br>
                                  <b>Sent:</b> Monday, July 08, 2013
                                  3:55 PM<br>
                                  <b>To:</b> <a moz-do-not-send="true"
href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a><br>
                                  <b>Subject:</b> Re: [AusNOG] Q
                                  sonicwall and juniper</span></p>
                            </div>
                          </div>
                          <p class="MsoNormal"> </p>
                          <div>
                            <p class="MsoNormal">An update  on bgp
                              blackwholeing. I asked some transits
                              recently this exact question. Here's a
                              summary of there responses.
                              <br>
                              <br>
                              Telstra: We are considering it. Do you
                              want to buy our arbor package. <br>
                              Optus: Good idea we will consider it. Do
                              you want to buy our arbor <br>
                              Vocus: Do it and you can buy our arbor
                              package. <br>
                              Pipe & Pipe IX. Do it and i have
                              tested. <br>
                              AAPT: Confusion followed by a no. <br>
                              <br>
                              <br>
                              Matt.<br>
                              <br>
                              <br>
                              <br>
                              On 8/07/13 3:45 PM, Craig Askings wrote:</p>
                          </div>
                          <blockquote
                            style="margin-top:5.0pt;margin-bottom:5.0pt">
                            <p class="MsoNormal">I'm not aware of any,
                              but you do have companies like Vocus. Who
                              do accept blackhole bgp communities and
                              have Arbor kit within their own network
                              that will pickup on attacks.
                            </p>
                            <div>
                              <p class="MsoNormal"> </p>
                            </div>
                            <div>
                              <p class="MsoNormal">I've personally seen
                                it detect and suppress attacks on my
                                previous employer's transit connection
                                with Vocus in the 5-10 minute range from
                                the start of the attack.</p>
                            </div>
                            <div>
                              <p class="MsoNormal"> </p>
                            </div>
                            <div>
                              <p class="MsoNormal">The most effect way
                                of avoiding DDoS attacks in Australia is
                                to not have Game Servers, IRC servers or
                                gambling operations hosted on your
                                network.</p>
                            </div>
                            <div>
                              <p class="MsoNormal"> </p>
                            </div>
                            <div>
                              <p class="MsoNormal">Craig.</p>
                            </div>
                            <div>
                              <p class="MsoNormal"> </p>
                            </div>
                            <div>
                              <p class="MsoNormal"> </p>
                              <div>
                                <div>
                                  <p class="MsoNormal">On 08/07/2013, at
                                    3:40 PM, Jonathan Thorpe <<a
                                      moz-do-not-send="true"
                                      href="mailto:jthorpe@Conexim.com.au"
                                      target="_blank">jthorpe@Conexim.com.au</a>>
                                    wrote:</p>
                                </div>
                                <p class="MsoNormal"><br>
                                  <br>
                                </p>
                                <div>
                                  <div>
                                    <p class="MsoNormal"><span
style="font-size:11pt;color:rgb(31,73,125);font-family:Calibri,sans-serif"
                                        lang="EN-AU">Probably a good
                                        time to ask – who supports
                                        FlowSpec advertisements?</span><span
                                        lang="EN-AU"></span></p>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
style="font-size:11pt;color:rgb(31,73,125);font-family:Calibri,sans-serif"
                                        lang="EN-AU"> </span><span
                                        lang="EN-AU"></span></p>
                                  </div>
                                  <div>
                                    <div
                                      style="border:none;border-top:solid
                                      windowtext 1.0pt;padding:3.0pt 0in
                                      0in
                                      0in;border-top-color:rgb(181,196,223)">
                                      <div>
                                        <p class="MsoNormal"><b><span
                                              style="font-size:10pt;font-family:Tahoma,sans-serif">From:</span></b><span><span
style="font-size:10pt;font-family:Tahoma,sans-serif"> </span></span><span
style="font-size:10pt;font-family:Tahoma,sans-serif">AusNOG [<a
                                              moz-do-not-send="true"
                                              href="mailto:ausnog"
                                              target="_blank">mailto:ausnog</a>-<a
                                              moz-do-not-send="true"
                                              href="mailto:bounces@lists.ausnog.net"
                                              target="_blank"><span
                                                style="color:purple">bounces@lists.ausnog.net</span></a>]<span> </span><b>On
                                              Behalf Of<span> </span></b>Craig

                                            Askings<br>
                                            <b>Sent:</b><span> </span>Monday,
                                            8 July 2013 3:33 PM<br>
                                            <b>To:</b><span> </span>Zone
                                            Networks - Joel Nath<br>
                                            <b>Cc:</b><span> </span><a
                                              moz-do-not-send="true"
                                              href="mailto:ausnog@lists.ausnog.net"
                                              target="_blank"><span
                                                style="color:purple">ausnog@lists.ausnog.net</span></a><br>
                                            <b>Subject:</b><span> </span>Re:
                                            [AusNOG] Q sonicwall and
                                            juniper</span><span
                                            lang="EN-AU"></span></p>
                                      </div>
                                    </div>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
                                        lang="EN-AU"> </span></p>
                                  </div>
                                  <div>
                                    <p class="MsoNormal"><span
                                        lang="EN-AU">Agreed, if you want
                                        to manage DDoS attacks you
                                        really want:</span></p>
                                  </div>
                                  <div>
                                    <div>
                                      <p class="MsoNormal"><span
                                          lang="EN-AU"> </span></p>
                                    </div>
                                  </div>
                                  <div>
                                    <div>
                                      <p class="MsoNormal"><span
                                          lang="EN-AU">1) Juniper MX out
                                          front with BGP flowspec
                                          enabled on it. </span></p>
                                    </div>
                                  </div>
                                  <div>
                                    <div>
                                      <p class="MsoNormal"><span
                                          lang="EN-AU">2) Some tool to
                                          identify said DDoS and
                                          generate the flowspec rule to
                                          match it. (Arbor?)</span></p>
                                    </div>
                                  </div>
                                  <div>
                                    <div>
                                      <p class="MsoNormal"><span
                                          lang="EN-AU">3) Upstream
                                          providers who can
                                          automatically sink said
                                          traffic at their borders.</span></p>
                                    </div>
                                  </div>
                                  <div>
                                    <div>
                                      <p class="MsoNormal"><span
                                          lang="EN-AU"> </span></p>
                                    </div>
                                  </div>
                                  <div>
                                    <div>
                                      <p class="MsoNormal"><span
                                          lang="EN-AU"><a
                                            moz-do-not-send="true"
href="http://www.slideshare.net/sfouant/an-introduction-to-bgp-flow-spec"
                                            target="_blank"><span
                                              style="color:purple">http://www.slideshare.net/sfouant/an-introduction-to-bgp-flow-spec</span></a></span></p>
                                    </div>
                                  </div>
                                  <div>
                                    <div>
                                      <p class="MsoNormal"><span
                                          lang="EN-AU"> </span></p>
                                    </div>
                                  </div>
                                  <div>
                                    <div>
                                      <p class="MsoNormal"><span
                                          lang="EN-AU"> </span></p>
                                    </div>
                                    <div>
                                      <div>
                                        <div>
                                          <p class="MsoNormal"><span
                                              lang="EN-AU">On
                                              08/07/2013, at 3:27 PM,
                                              "Zone Networks - Joel
                                              Nath" <<a
                                                moz-do-not-send="true"
                                                href="mailto:joel@zonenetworks.com.au"
                                                target="_blank"><span
                                                  style="color:purple">joel@zonenetworks.com.au</span></a>>
                                              wrote:</span></p>
                                        </div>
                                      </div>
                                      <div>
                                        <p class="MsoNormal"><span
                                            lang="EN-AU"><br>
                                            <br>
                                            <br>
                                          </span></p>
                                      </div>
                                      <div>
                                        <p class="MsoNormal"><span
                                            lang="EN-AU">Firewall wont
                                            help protect you against
                                            DDOS, especially anything
                                            that is software based<br>
                                            <br>
                                            Srx 3400 + might help abit
                                            as its ASIC but a decent SYN
                                            flood will take it out as
                                            well.<br>
                                            <br>
                                            Regards<br>
                                            Joel<br>
                                            <br>
                                            -----Original Message-----<br>
                                            From: AusNOG [<a
                                              moz-do-not-send="true"
                                              href="mailto:ausnog"
                                              target="_blank">mailto:ausnog</a>-<a
                                              moz-do-not-send="true"
                                              href="mailto:bounces@lists.ausnog.net"
                                              target="_blank"><span
                                                style="color:purple">bounces@lists.ausnog.net</span></a>]
                                            On Behalf Of Alex Samad -
                                            Yieldbroker<br>
                                            Sent: Monday, 8 July 2013
                                            3:19 PM<br>
                                            To:<span> </span><a
                                              moz-do-not-send="true"
                                              href="mailto:ausnog@lists.ausnog.net"
                                              target="_blank"><span
                                                style="color:purple">ausnog@lists.ausnog.net</span></a><br>
                                            Subject: Re: [AusNOG] Q
                                            sonicwall and juniper<br>
                                            <br>
                                            Hi<br>
                                            <br>
                                            Thanks to everyone that has
                                            given me feedback,
                                            definitely seems like
                                            juniper is the router of
                                            choice.<br>
                                            This is still early days for
                                            me... more of a fact finding
                                            mission<br>
                                            <br>
                                            One of the design choices I
                                            am looking at.<span> </span><br>
                                            <br>
                                            It seems like there are
                                            units capable of looking
                                            after (in 1 HA setup) both
                                             Internet FW and internet
                                            FW.<br>
                                            <br>
                                            Currently I am using some
                                            cisco 2600's for my ext
                                            routers ... ie WAN ... BGP
                                            and basic ACL's<br>
                                            <br>
                                            The original idea was to
                                            replicate this, so outside
                                            routers, Internet FW and
                                            internal FW with similar
                                            setup<br>
                                            <br>
                                            The main reason for that is
                                            that a DDOS or any attack
                                            via BGP can only attack our
                                            outside routers. Thus
                                            reducing our foot print our
                                            external FW is exposed to
                                            the outside world.<br>
                                            <br>
                                            More background, we provide
                                            our product via the internet
                                            and via private connections
                                            (leased lines of sorts,
                                            premium service ).<br>
                                            <br>
                                            What we are trying to avoid
                                            with separate devices is
                                            internet issues affecting
                                            premium services. And to
                                            some extend our internal
                                            traffic.<br>
                                            <br>
                                            So I have thrown my eye over
                                            at the srx 550 and find it
                                            (and it seems other models /
                                            manufactures)  provide
                                            virtual routers/domains  Is
                                            this enough to protect a FW
                                            device.<br>
                                            <br>
                                            So if I replace my external
                                            routers and internet FW and
                                            internet FW, with a SRX550
                                            am I leaving myself open to
                                            the cpu of the device being
                                            taken up with BGP process or
                                            DDOS from the internet ...
                                            etc etc.<br>
                                            <br>
                                            <br>
                                            Thanks<br>
                                            Alex<br>
                                            <br>
                                            <br>
                                            <br>
                                            <br>
                                          </span></p>
                                      </div>
                                      <div>
                                        <p class="MsoNormal"><span
                                            lang="EN-AU">-----Original
                                            Message-----<br>
                                            From: AusNOG [<a
                                              moz-do-not-send="true"
                                              href="mailto:ausnog"
                                              target="_blank">mailto:ausnog</a>-<a
                                              moz-do-not-send="true"
                                              href="mailto:bounces@lists.ausnog.net"
                                              target="_blank"><span
                                                style="color:purple">bounces@lists.ausnog.net</span></a>]
                                            On Behalf Of<span> </span><br>
                                            Andrew Jones<br>
                                            Sent: Monday, 8 July 2013
                                            2:47 PM<br>
                                            To:<span> </span><a
                                              moz-do-not-send="true"
                                              href="mailto:ausnog@lists.ausnog.net"
                                              target="_blank"><span
                                                style="color:purple">ausnog@lists.ausnog.net</span></a><br>
                                            Subject: Re: [AusNOG] Q
                                            sonicwall and juniper<br>
                                            <br>
                                            I have quite a few SRX
                                            clusters running, and find
                                            them very reliable<span> </span><br>
                                            in general. Most of the
                                            issues which were there
                                            earlier have been sorted
                                            out.<br>
                                            "Commit rollback", which
                                            used not to be available in
                                            earlier versions<span> </span><br>
                                            of junos when clustering was
                                            enabled now works as well,
                                            which is a big<span> </span><br>
                                            plus in my book.<br>
                                            <br>
                                            <br>
                                            <br>
                                            On 08.07.2013 14:30, Ryan
                                            Finnesey wrote:<br>
                                            <br>
                                            <br>
                                          </span></p>
                                      </div>
                                      <div>
                                        <p class="MsoNormal"><span
                                            lang="EN-AU">Lol never
                                            worked with clustering.<br>
                                            <br>
                                            Sent from my iPad<br>
                                            <br>
                                            On Jul 7, 2013, at 9:52 PM,
                                            "Skeeve Stevens"<br>
                                            <<a
                                              moz-do-not-send="true"
                                              href="mailto:skeeve+ausnog@eintellegonetworks.com"
                                              target="_blank"><span
                                                style="color:purple">skeeve+ausnog@eintellegonetworks.com</span></a>>
                                            wrote:<br>
                                            <br>
                                            <br>
                                            <br>
                                          </span></p>
                                      </div>
                                      <div>
                                        <p class="MsoNormal"><span
                                            lang="EN-AU">+1.<br>
                                            <br>
                                            Juniper clustering was
                                            developed, coded, and not
                                            tested by Satan<span> </span><br>
                                            himself.<br>
                                            <br>
                                            ...Skeeve<br>
                                            <br>
                                            SKEEVE STEVENS - eintellego
                                            Networks Pty Ltd<br>
                                            <br>
                                            <a moz-do-not-send="true"
                                              href="mailto:skeeve@eintellegonetworks.com"
                                              target="_blank"><span
                                                style="color:purple">skeeve@eintellegonetworks.com</span></a><span> </span>;<span> </span><a
                                              moz-do-not-send="true"
                                              href="http://www.eintellegonetworks.com"
                                              target="_blank"><span
                                                style="color:purple">www.eintellegonetworks.com</span></a><span> </span>[3]<br>
                                            <br>
                                            Phone: 1300 239 038; Cell <a
                                              moz-do-not-send="true"
                                              href="tel:%2B61%20%280%29414%20753%20383"
                                              value="+61414753383"
                                              target="_blank">+61 (0)414
                                              753 383</a> ;<span> </span><a
                                              moz-do-not-send="true"><span
                                                style="color:purple">skype://skeeve</span></a><br>
                                            <br>
                                            <a moz-do-not-send="true"
                                              href="http://facebook.com/eintellegonetworks"
                                              target="_blank"><span
                                                style="color:purple">facebook.com/eintellegonetworks</span></a><span> </span>[4]
                                            ; [5]<a
                                              moz-do-not-send="true"
                                              href="http://linkedin.com/in/skeeve"
                                              target="_blank"><span
                                                style="color:purple">linkedin.com/in/skeeve</span></a><span> </span>[6]<br>
                                            <br>
                                            <a moz-do-not-send="true"
                                              href="http://twitter.com/networkceoau"
                                              target="_blank"><span
                                                style="color:purple">twitter.com/networkceoau</span></a><span> </span>[5]
                                            ; blog:<span> </span><a
                                              moz-do-not-send="true"
                                              href="http://www.network-ceo.net"
                                              target="_blank"><span
                                                style="color:purple">www.network-ceo.net</span></a><span> </span>[7]<br>
                                            <br>
                                            The Experts Who The Experts
                                            Call<br>
                                            Juniper - Cisco - Cloud<br>
                                            <br>
                                            On Mon, Jul 8, 2013 at 11:47
                                            AM, James Braunegg<span> </span><br>
                                            <<a
                                              moz-do-not-send="true"
                                              href="mailto:james.braunegg@micron21.com"
                                              target="_blank"><span
                                                style="color:purple">james.braunegg@micron21.com</span></a>>
                                            wrote:<br>
                                            <br>
                                            <br>
                                            <br>
                                          </span></p>
                                      </div>
                                      <div>
                                        <p class="MsoNormal"><span
                                            lang="EN-AU">I like the
                                            Juniper SRX 3400 / SRX 5600
                                            firewalls the nice things<span> </span><br>
                                            about these is you can run
                                            per device redundant routing
                                            engines,<span> </span><br>
                                            both of these support
                                            hardware line rate 10gbit
                                            ports and are full<span> </span><br>
                                            ASIC based.<br>
                                            <br>
                                            If you don't actually need
                                            10gbit throughput you could
                                            look at the<span> </span><br>
                                            SRX 650 which can support
                                            10gbit ports but all
                                            processing is done<span> </span><br>
                                            in software not in ASIC<br>
                                            <br>
                                            Juniper had some issues with
                                            clustering the SRX in the
                                            early days<span> </span><br>
                                            but these seem to be all but
                                            gone now...<br>
                                            <br>
                                            That being said I still
                                            avoid clustering where
                                            possible and much<span> </span><br>
                                            prefer two single devices
                                            not linked in anyway other
                                            than standard<span> </span><br>
                                            routing protocols.<br>
                                            <br>
                                            Juniper also has a fantastic
                                            CLI … one of the best I've
                                            ever used.<br>
                                            <br>
                                            Do you have a budget in mind
                                            ?<br>
                                            <br>
                                            Kindest Regards<br>
                                            <br>
                                            James Braunegg<br>
                                            P: 1300 769 972 | M: 0488
                                            997 207 | D: (03) 9751 7616<br>
                                            <br>
                                            E:<span> </span><a
                                              moz-do-not-send="true"
                                              href="mailto:james.braunegg@micron21.com"
                                              target="_blank"><span
                                                style="color:purple">james.braunegg@micron21.com</span></a><span> </span>|
                                            ABN: <a
                                              moz-do-not-send="true"
                                              href="tel:12%20109%20977%20666"
                                              value="+12109977666"
                                              target="_blank">12 109 977
                                              666</a><br>
                                            W:<span> </span><a
                                              moz-do-not-send="true"
                                              href="http://www.micron21.com/ip-transit"
                                              target="_blank"><span
                                                style="color:purple">www.micron21.com/ip-transit</span></a><span> </span>[1]
                                            T: @micron21<br>
                                            <br>
                                            <image001.jpg><br>
                                            This message is intended for
                                            the addressee named above.
                                            It may<span> </span><br>
                                            contain privileged or
                                            confidential information. If
                                            you are not the<span> </span><br>
                                            intended recipient of this
                                            message you must not use,
                                            copy,<span> </span><br>
                                            distribute or disclose it to
                                            anyone other than the
                                            addressee. If<span> </span><br>
                                            you have received this
                                            message in error please
                                            return the message<span> </span><br>
                                            to the sender by replying to
                                            it and then delete the
                                            message from<span> </span><br>
                                            your computer.<br>
                                            <br>
                                            -----Original Message-----<br>
                                            From: AusNOG [<a
                                              moz-do-not-send="true"
                                              href="mailto:ausnog"
                                              target="_blank">mailto:ausnog</a>-<a
                                              moz-do-not-send="true"
                                              href="mailto:bounces@lists.ausnog.net"
                                              target="_blank"><span
                                                style="color:purple">bounces@lists.ausnog.net</span></a>]
                                            On Behalf Of<span> </span><br>
                                            Alex Samad - Yieldbroker<br>
                                            Sent: Monday, July 08, 2013
                                            10:01 AM<br>
                                            To:<span> </span><a
                                              moz-do-not-send="true"
                                              href="mailto:ausnog@lists.ausnog.net"
                                              target="_blank"><span
                                                style="color:purple">ausnog@lists.ausnog.net</span></a><br>
                                            Subject: [AusNOG] Q
                                            sonicwall and juniper<br>
                                            <br>
                                            Hi<br>
                                            <br>
                                            Was wondering what the
                                            groups thoughts where on
                                            sonicwall and</span></p>
                                      </div>
                                      <div>
                                        <p class="MsoNormal"><span
                                            lang="EN-AU">maybe<br>
                                            <br>
                                            <br>
                                          </span></p>
                                      </div>
                                      <blockquote
                                        style="margin-top:5.0pt;margin-bottom:5.0pt">
                                        <blockquote
                                          style="margin-top:5.0pt;margin-bottom:5.0pt">
                                          <div>
                                            <p class="MsoNormal"><span
                                                lang="EN-AU">in relation
                                                to juniper.<br>
                                                <br>
                                                Most of my experience
                                                has been with Cisco and
                                                linux (firewalls)<br>
                                                <br>
                                                In particular I am
                                                looking at<br>
                                                <br>
                                                Exterior FW (facing
                                                internet)<br>
                                                <br>
                                                Or<br>
                                                <br>
                                                Interior FW (not facing
                                                Internet)<br>
                                                <br>
                                                Like to have a cluster
                                                (HA setup)<br>
                                                <br>
                                                Like to have min 2 x 10G
                                                fibre ports per dev and
                                                some 1G ports<br>
                                                <br>
                                                Don't need any sort of
                                                deep packet inspection<br>
                                                <br>
                                                I prefer CLI, my initial
                                                googling seems to
                                                suggest sonic is not<span> </span><br>
                                                very cli friendly at all<br>
                                                <br>
                                                Again my initial
                                                investigation leads me
                                                to NSA 5600 (or NSA
                                                6600),<span> </span><br>
                                                not sure what the
                                                comparably Juniper might
                                                be.<br>
                                                <br>
                                                Thanks<br>
                                                <br>
                                                Alex<br>
                                                <br>
_______________________________________________<br>
                                                <br>
                                                AusNOG mailing list<br>
                                                <br>
                                                <a
                                                  moz-do-not-send="true"
href="mailto:AusNOG@lists.ausnog.net" target="_blank"><span
                                                    style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
                                                <br>
                                                <a
                                                  moz-do-not-send="true"
href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank"><span
                                                    style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><span> </span>[2]<span> </span><br>
_______________________________________________<br>
                                                AusNOG mailing list<br>
                                                <a
                                                  moz-do-not-send="true"
href="mailto:AusNOG@lists.ausnog.net" target="_blank"><span
                                                    style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
                                                <a
                                                  moz-do-not-send="true"
href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank"><span
                                                    style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><span> </span>[2]</span></p>
                                          </div>
                                        </blockquote>
                                      </blockquote>
                                      <div>
                                        <p class="MsoNormal"><span
                                            lang="EN-AU"><br>
                                            <br>
                                            <br>
                                          </span></p>
                                      </div>
                                      <div>
                                        <p class="MsoNormal"><span
                                            lang="EN-AU">_______________________________________________<br>
                                            AusNOG mailing list<br>
                                            <a moz-do-not-send="true"
                                              href="mailto:AusNOG@lists.ausnog.net"
                                              target="_blank"><span
                                                style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
                                            <a moz-do-not-send="true"
                                              href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                                              target="_blank"><span
                                                style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><span> </span>[2]</span></p>
                                      </div>
                                      <div>
                                        <p class="MsoNormal"><span
                                            lang="EN-AU"><br>
                                            <br>
                                            Links:<br>
                                            ------<br>
                                            [1]<span> </span><a
                                              moz-do-not-send="true"
                                              href="http://www.micron21.com/ip-transit"
                                              target="_blank"><span
                                                style="color:purple">http://www.micron21.com/ip-transit</span></a><br>
                                            [2]<span> </span><a
                                              moz-do-not-send="true"
                                              href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                                              target="_blank"><span
                                                style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><br>
                                            [3]<span> </span><a
                                              moz-do-not-send="true"
                                              href="http://www.eintellegonetworks.com/"
                                              target="_blank"><span
                                                style="color:purple">http://www.eintellegonetworks.com/</span></a><br>
                                            [4]<span> </span><a
                                              moz-do-not-send="true"
                                              href="http://facebook.com/eintellegonetworks"
                                              target="_blank"><span
                                                style="color:purple">http://facebook.com/eintellegonetworks</span></a><br>
                                            [5]<span> </span><a
                                              moz-do-not-send="true"
                                              href="http://twitter.com/networkceoau"
                                              target="_blank"><span
                                                style="color:purple">http://twitter.com/networkceoau</span></a><br>
                                            [6]<span> </span><a
                                              moz-do-not-send="true"
                                              href="http://linkedin.com/in/skeeve"
                                              target="_blank"><span
                                                style="color:purple">http://linkedin.com/in/skeeve</span></a><br>
                                            [7]<span> </span><a
                                              moz-do-not-send="true"
                                              href="http://www.network-ceo.net/"
                                              target="_blank"><span
                                                style="color:purple">http://www.network-ceo.net/</span></a><br>
                                            <br>
_______________________________________________<br>
                                            AusNOG mailing list<br>
                                            <a moz-do-not-send="true"
                                              href="mailto:AusNOG@lists.ausnog.net"
                                              target="_blank"><span
                                                style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
                                            <a moz-do-not-send="true"
                                              href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                                              target="_blank"><span
                                                style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a></span></p>
                                      </div>
                                      <div>
                                        <p class="MsoNormal"><span
                                            lang="EN-AU"><br>
_______________________________________________<br>
                                            AusNOG mailing list<br>
                                            <a moz-do-not-send="true"
                                              href="mailto:AusNOG@lists.ausnog.net"
                                              target="_blank"><span
                                                style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
                                            <a moz-do-not-send="true"
                                              href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                                              target="_blank"><span
                                                style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a></span></p>
                                      </div>
                                      <div>
                                        <p class="MsoNormal"><span
                                            lang="EN-AU">_______________________________________________<br>
                                            AusNOG mailing list<br>
                                            <a moz-do-not-send="true"
                                              href="mailto:AusNOG@lists.ausnog.net"
                                              target="_blank"><span
                                                style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
                                            <a moz-do-not-send="true"
                                              href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                                              target="_blank"><span
                                                style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><br>
                                            <br>
                                            <br>
_______________________________________________<br>
                                            AusNOG mailing list<br>
                                            <a moz-do-not-send="true"
                                              href="mailto:AusNOG@lists.ausnog.net"
                                              target="_blank"><span
                                                style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
                                            <a moz-do-not-send="true"
                                              href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                                              target="_blank"><span
                                                style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a></span></p>
                                      </div>
                                    </div>
                                    <div>
                                      <p class="MsoNormal"><span
                                          lang="EN-AU"> </span></p>
                                    </div>
                                  </div>
                                  <p class="MsoNormal"><span
                                      style="font-size:13.5pt;font-family:Helvetica,sans-serif"
                                      lang="EN-AU">_______________________________________________<br>
                                      AusNOG mailing list<br>
                                      <a moz-do-not-send="true"
                                        href="mailto:AusNOG@lists.ausnog.net"
                                        target="_blank"><span
                                          style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
                                      <a moz-do-not-send="true"
                                        href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                                        target="_blank"><span
                                          style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a></span></p>
                                </div>
                              </div>
                              <p class="MsoNormal"> </p>
                            </div>
                            <p class="MsoNormal"><br>
                              <br>
                              <br>
                            </p>
                            <pre>_______________________________________________</pre>
                            <pre>AusNOG mailing list</pre>
                            <pre><a moz-do-not-send="true" href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a></pre>
                            <pre><a moz-do-not-send="true" href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a></pre>
                          </blockquote>
                          <p class="MsoNormal"><br>
                            <br>
                            <br>
                          </p>
                          <pre>-- </pre>
                          <pre>/* Matt Perkins </pre>
                          <pre>        Direct 1300 137 379     Spectrum Networks Ptd. Ltd. </pre>
                          <pre>        Office 1300 133 299     <a moz-do-not-send="true" href="mailto:matt@spectrum.com.au" target="_blank">matt@spectrum.com.au</a> </pre>
                          <pre>        Fax    1300 133 255     Level 6, 350 George Street Sydney 2000</pre>
                          <pre>        SIP <a moz-do-not-send="true" href="mailto:1300137379@sip.spectrum.com.au" target="_blank">1300137379@sip.spectrum.com.au</a> </pre>
                          <pre>        PGP/GNUPG Public Key can be found at  <a moz-do-not-send="true" href="http://pgp.mit.edu" target="_blank">http://pgp.mit.edu</a> </pre>
                          <pre>*/</pre>
                        </div>
                      </div>
                    </div>
                  </div>
                </div>
              </span>
            </div>
            <br>
            _______________________________________________<br>
            AusNOG mailing list<br>
            <a moz-do-not-send="true"
              href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
            <a moz-do-not-send="true"
              href="http://lists.ausnog.net/mailman/listinfo/ausnog"
              target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
            <br>
          </blockquote>
        </div>
        <br>
      </div>
    </blockquote>
    <br>
  </body>
</html>