Hi everyone. So we just finished moving our edge firewalls from Cisco Firepower to a pair of SRX1500s in chassis cluster. It was... intense. I'm still pretty new to JunOS and Terraform, so I wanted to share a couple things that tripped us up, and ask if anyone has good examples.
The biggest shock was the security policy model. Going from Cisco's "intrusion policies" and all that to simple stateful firewall rules feels both simpler and more manual. I'm trying to build everything as code now. Does anyone have a Terraform example for creating a simple `security policy` that does a permit with logging? I keep messing up the `match` criteria order.
Also, the CLI is powerful but the commit model had me sweating 😅. Learned the hard way to always use `commit confirmed`. On the plus side, our config is way cleaner now and the failover worked perfectly in testing. Bandwidth costs are looking better too.