I'm hoping you can help me. I'm trying to determine if there is an upgrade path from ScreenOS to Junos for the ISG-1000.
From what I can see the current version of ScreenOS will be end of life at the end of 2013 and I haven't been able to find out what the options for software are from here. I guess the possibilities would be:
1) A new version of ScreenOS - is one being developed?
2) Migrate from ScreenOS to Junos - is the ISG capable of running Junos?
3) Look to replace the devices if there is no software support/new features in the pipeline.
If anyone's got any answers as to where the ISG-1000 is going for software then I'd appreciate it greatly.
The ISG will not run Junos, it's a ScreenOS only platform.
I'm not sure what the roadmap is for the ISG series, but there hasn't been any EOL announcement for the ISG boxes yet, as such, I think ScreenOS will still be around for a while.
New versions of ScreenOS may be coming, you'd have to get that info from a Juniper employee or partner. You'd also need to get feature roadmaps from Juniper or a partner.
-kr JNCIS-SEC, JNCIA-ER, JNCIA-EX
--- If this solves your problem, please mark this post as "Accepted Solution." Kudos are always appreciated.
When you say that ISGs wont run Junos is this something that Juniper have said explicity, due to architecture issues, etc, or is this something you've read elsewhere? (If Juniper have stated this, would you have a link for this?)
There were / are only two ScreenOS based units that could be convered to run JUNOS. That was the SSG300M and SSG500M series units. These were specifically designed to be dual purpose units.
So as the ISG-1000 will not be able to run Junos in the future and as the device is not specified as end of life then the options for use beyond 2013 would be the a new version of ScreenOS (which it sounds like I'd need to find from a reseller etc) or to replace the kit.
We've actually got some, so I'm trying to work out what the options are over the next couple of years. Otherwise looking at new products would be an easier option. Although I've not heard great things about the SRX platform.
That is correct - the ISG-1000 is still supported and if you were on maintenance you could upgrade it to the latest release (6.3) - but if you are not maintenance then I would agree with Keith that it would probably not be worth the cost to get it back on versus buying a newer solution - either SSG (screenos) or SRX (junos).
Not looking to hijack the thread but it is worth mentioning that the 320/520M can run JUNOS as a router and ScreenOS as a firewall but they are not SRX style firewalls running JUNOS.
