Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Licenses for SRX Series

 

Software Feature Licenses for SRX Series Devices

Each feature license is tied to exactly one software feature, and that license is valid for exactly one device. Each license allows you to run the specified advanced software features on a single device. Platform support depends on the Junos OS release in your installation.

Note

To understand more about Junos OS Software Licensing, see the Juniper Licensing Guide. Please refer to the product Data Sheets accessible from Products & Services for details, or contact your Juniper Account Team or Juniper Partner.

Sky Advanced Threat Prevention, ThreatFeed and Enhanced Web Filtering individual license are available. This is not a complete list of licenses. For the most up-to-date license models available, contact your Juniper Networks representative for license information.

Features Requiring a License on SRX100 and SRX110 Devices

Table 1 lists the licenses you can purchase for each SRX Series software feature.

Table 1: SRX100 and SRX110 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security and Intrusion Prevention Signatures (1 year and 3 years subscription)

SRX100

SRX110

SRX100-APPSEC-A-1

SRX100-APPSEC-A-3

SRX1XX-APPSEC-A-1

SRX1XX-APPSEC-A-3

Kaspersky antivirus (1 year and 3 years subscription)

SRX100

SRX110

SRX1XX-K-AV

SRX1XX-K-AV-3

Sophos antispam (1 year and 3 years subscription)

SRX100

SRX110

SRX1XX-S2-AS

SRX1XX-S2-AS-3

Sophos antivirus (1 year and 3 years subscription)

SRX100

SRX110

SRX1XX-S-AV

SRX1XX-S-AV-3

Kaspersky antivirus, Enhanced Web Filtering, Sophos antispam, Application Security and Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX100

SRX110

SRX1XX-SMB4-CS

SRX1XX-SMB4-CS-3

Sophos antivirus, Enhanced Web Filtering, Sophos antispam, Application Security and Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX100

SRX110

SRX1XX-S-SMB4-CS

SRX1XX-S-SMB4-CS-3

Websense Enhanced Web Filtering (1 year and 3 years subscription)

SRX100

SRX110

SRX1XX-W-EWF

SRX1XX-W-EWF-3

Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX100

SRX110

SRX1XX-IDP

SRX1XX-IDP-3

Features Requiring a License on SRX210 Devices

Table 2 lists the licenses you can purchase for each SRX Series software feature.

Table 2: SRX210 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security and Intrusion Prevention Signatures (1 year and 3 years subscription)

SRX210

SRX210-APPSEC-A-1

SRX210-APPSEC-A-3

Kaspersky antivirus (1 year and 3 years subscription)

SRX210

SRX210-K-AV

SRX210-K-AV-3

Sophos antispam (1 year and 3 years subscription)

SRX210

SRX210-S2-AS

SRX210-S2-AS-3

Sophos antivirus (1 year and 3 years subscription)

SRX210

SRX210-S-AV

SRX210-S-AV-3

Kaspersky antivirus, Enhanced Web Filtering, Sophos antispam, Application Security and Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX210

SRX210-SMB4-CS

SRX210-SMB4-CS-3

Sophos antivirus, Enhanced Web Filtering, Sophos antispam, Application Security and Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX210

SRX210-S-SMB4-CS

SRX210-S-SMB4-CS-3

Websense Enhanced Web Filtering (1 year and 3 years subscription)

SRX210

SRX210-W-EWF

SRX210-W-EWF-3

Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX210

SRX210-IDP

SRX210-IDP-3

Features Requiring a License on SRX220 Devices

Table 3 lists the licenses you can purchase for each SRX Series software feature.

Table 3: SRX220 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security and Intrusion Prevention Signatures (1 year and 3 years subscription)

SRX220

SRX220-APPSEC-A-1

SRX220-APPSEC-A-3

Kaspersky antivirus (1 year and 3 years subscription)

SRX220

SRX220-K-AV

SRX220-K-AV-3

Sophos antispam (1 year and 3 years subscription)

SRX220

SRX220-S2-AS

SRX220-S2-AS-3

Sophos antivirus (1 year and 3 years subscription)

SRX220

SRX220-S-AV

SRX220-S-AV-3

Kaspersky antivirus, Enhanced Web Filtering, Sophos antispam, Application Security and Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX220

SRX220-SMB4-CS

SRX220-SMB4-CS-3

Sophos antivirus, Enhanced Web Filtering, Sophos antispam, Application Security and Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX220

SRX220-S-SMB4-CS

SRX220-S-SMB4-CS-3

Websense Enhanced Web Filtering (1 year and 3 years subscription)

SRX220

SRX220-W-EWF

SRX220-W-EWF-3

Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX220

SRX220-IDP

SRX220-IDP-3

Features Requiring a License on SRX240 Devices

Table 4 lists the licenses you can purchase for each SRX Series software feature.

Table 4: SRX240 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security and Intrusion Prevention Signatures (1 year and 3 years subscription)

SRX240

SRX240-APPSEC-A-1

SRX240-APPSEC-A-3

Kaspersky antivirus (1 year and 3 years subscription)

SRX240

SRX240-K-AV

SRX240-K-AV-3

Sophos antispam (1 year and 3 years subscription)

SRX240

SRX240-S2-AS

SRX240-S2-AS-3

Sophos antivirus (1 year and 3 years subscription)

SRX240

SRX240-S-AV

SRX240-S-AV-3

Kaspersky antivirus, Enhanced Web Filtering, Sophos antispam, Application Security and Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX240

SRX240-SMB4-CS

SRX240-SMB4-CS-3

Sophos antivirus, Enhanced Web Filtering, Sophos antispam, Application Security and Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX240

SRX240-S-SMB4-CS

SRX240-S-SMB4-CS-3

Websense Enhanced Web Filtering (1 year and 3 years subscription)

SRX240

SRX240-W-EWF

SRX240-W-EWF-3

Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX240

SRX240-IDP

SRX240-IDP-3

Features Requiring a License on SRX300 Devices

Table 5 lists the licenses you can purchase for each SRX Series software feature.

Table 5: SRX300 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security, Intrusion Detection and Prevention, Enhanced Web Filtering, Antivirus and Sky Advanced Threat Prevention (1 year, 3 years and 5 years subscription)

SRX300

SRX300-ATP-BUN-1

SRX300-ATP-BUN-3

Application Security, Intrusion Prevention Signatures, Antivirus, Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX300

SRX300-CS-BUN-1

SRX300-CS-BUN-3

SRX300-CS-BUN-5

Intrusion Detection and Prevention (1 year, 3 years and 5 years subscription)

SRX300

SRX300-IPS-1

SRX300-IPS-3

SRX300-IPS-5

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX300

SRX300-W-EWF-1

SRX300-W-EWF-3

SRX300-W-EWF-5

Features Requiring a License on SRX320 Devices

Table 6 lists the licenses you can purchase for each SRX Series software feature.

Table 6: SRX320 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security, Intrusion Detection and Prevention, Enhanced Web Filtering, Antivirus and Sky Advanced Threat Prevention (1 year and 3 years subscription)

SRX320

SRX320-ATP-BUN-1

SRX320-ATP-BUN-3

Application Security, Intrusion Prevention Signatures, Antivirus, Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX320

SRX320-CS-BUN-1

SRX320-CS-BUN-3

SRX320-CS-BUN-5

Intrusion Detection and Prevention (1 year, 3 years and 5 years subscription)

SRX320

SRX320-IPS-1

SRX320-IPS-3

SRX320-IPS-5

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX320

SRX320-W-EWF-1

SRX320-W-EWF-3

SRX320-W-EWF-5

Features Requiring a License on SRX340 Devices

Table 7 lists the licenses you can purchase for each SRX Series software feature.

Table 7: SRX340 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security, Intrusion Detection and Prevention, Enhanced Web Filtering, Antivirus and Sky Advanced Threat Prevention (1 year, 3 years and 5 years subscription)

SRX340

SRX340-ATP-BUN-1

SRX340-ATP-BUN-3

SRX340-ATP-BUN-5

Sky Advanced Threat Prevention (1 year, 3 years and 5 years subscription)

SRX340

SRX340-ATP-1

SRX340-ATP-3

SRX340-ATP-5

Application Security, Intrusion Prevention Signatures, Antivirus, Enhanced Web Filtering (1 year and 3 years subscription)

SRX340

SRX340-CS-BUN-1

SRX340-CS-BUN-3

SRX340-CS-BUN-5

Sky Advanced Threat Prevention Threat Intelligence Feeds only (1 year and 3 years subscription)

SRX340

SRX340-THRTFEED-1

SRX340-THRTFEED-3

SRX340-THRTFEED-5

Intrusion Detection and Prevention (1 year, 3 years and 5 years subscription)

SRX340

SRX340-IPS-1

SRX340-IPS-3

SRX340-IPS-5

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX340

SRX340-W-EWF-1

SRX340-W-EWF-3

SRX340-W-EWF-5

Features Requiring a License on SRX345 Devices

Table 8 lists the licenses you can purchase for each SRX Series software feature.

Table 8: SRX345 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security, Intrusion Detection and Prevention, Enhanced Web Filtering, Antivirus and Sky Advanced Threat Prevention (1 year, 3 years and 5 years subscription)

SRX345

SRX345-ATP-BUN-1

SRX345-ATP-BUN-3

SRX345-ATP-BUN-5

Sky Advanced Threat Prevention (1 year, 3 years and 5 years subscription)

SRX345

SRX345-ATP-1

SRX345-ATP-3

SRX345-ATP-5

Application Security, Intrusion Prevention Signatures, Antivirus, Enhanced Web Filtering (1 year and 3 years subscription)

SRX345

SRX345-CS-BUN-1

SRX345-CS-BUN-3

SRX345-CS-BUN-5

Sky Advanced Threat Prevention Threat Intelligence Feeds only (1 year and 3 years subscription)

SRX345

SRX345-THRTFEED-1

SRX345-THRTFEED-3

SRX345-THRTFEED-5

Intrusion Prevention Signature (1 year, 3 years and 5 years subscription)

SRX345

SRX345-IPS-1

SRX345-IPS-3

SRX345-IPS-5

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX345

SRX345-W-EWF-1

SRX345-W-EWF-3

SRX345-W-EWF-5

Features Requiring a License on SRX550 Devices

Table 9 lists the licenses you can purchase for each SRX Series software feature.

Table 9: SRX550 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security and Intrusion Prevention Signature (1 year, 3 years and 5 years subscription)

SRX550

SRX550-APPSEC-A-1

SRX550-APPSEC-A-3

SRX550-APPSEC-A-5

Sky Advanced Threat Prevention Threat Intelligence Feeds only (1 year, 3 years and 5 years subscription)

SRX550

SRX550-THRTFEED-1

SRX550-THRTFEED-3

SRX550-THRTFEED-5

Intrusion Detection and Prevention (1 year, 3 years and 5 years subscription)

SRX550

SRX550-IDP

SRX550-IDP-3

SRX550-IDP-5

Sky Advanced Threat Prevention (1 year, 3 years and 5 years subscription)

SRX550

SRX550-ATP-1

SRX550-ATP-3

SRX550-ATP-5

Kaspersky antivirus (1 year, 3 years and 5 years subscription)

SRX550

SRX550-K-AV

SRX550-K-AV-3

SRX550-K-AV-5

Sophos antispam (1 year, 3 years and 5 years subscription)

SRX550

SRX550-S2-AS

SRX550-S2-AS-3

SRX550-S2-AS-5

Sophos antivirus (1 year and 3 years subscription)

SRX550

SRX550-S-AV

SRX550-S-AV-3

SRX550-S-AV-5

Kaspersky antivirus, Enhanced Web Filtering, Sophos antispam, Application Security and Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX550

SRX550-SMB4-CS

SRX550-SMB4-CS-3

SRX550-SMB4-CS-5

Sophos antivirus, Enhanced Web Filtering, Sophos antispam, Application Security and Intrusion Detection and Prevention (1 year, 3 years and 5 years subscription)

SRX550

SRX550-S-SMB4-CS

SRX550-S-SMB4-CS-3

SRX550-S-SMB4-CS-5

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX550

SRX550-W-EWF

SRX550-W-EWF-3

SRX500-W-EWF-5

Features Requiring a License on SRX650 Devices

Table 10 lists the licenses you can purchase for each SRX Series software feature.

Table 10: SRX650 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security and Intrusion Prevention Signature (1 year and 3 years subscription)

SRX650

SRX650-APPSEC-A-1

SRX650-APPSEC-A-3

Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX650

SRX650-IDP

SRX650-IDP-3

Kaspersky antivirus (1 year and 3 years subscription)

SRX650

SRX650-K-AV

SRX650-K-AV-3

Sophos antispam (1 year and 3 years subscription)

SRX650

SRX650-S2-AS

SRX650-S2-AS-3

Sophos antivirus (1 year and 3 years subscription)

SRX650

SRX650-S-AV

SRX650-S-AV-3

Kaspersky antivirus, Enhanced Web Filtering, Sophos antispam, Application Security and Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX650

SRX650-SMB4-CS

SRX650-SMB4-CS-3

Sophos antivirus, Enhanced Web Filtering, Sophos antispam, Application Security and Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX650

SRX650-S-SMB4-CS

SRX650-S-SMB4-CS-3

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX650

SRX650-W-EWF

SRX650-W-EWF-3

Features Requiring a License on SRX1400 Devices

Table 11 lists the licenses you can purchase for each SRX Series software feature.

Table 11: SRX1400 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security and Intrusion Prevention Signature (1 year and 3 years subscription)

SRX1400

SRX1400-APPSEC-A-1

SRX1400-APPSEC-A-3

Application Security, Intrusion Detection and Prevention, Enhanced Web Filtering, Antivirus and Antispam (1 year and 3 years subscription)

SRX1400

SRX1400-CS-BUN-1

SRX1400-CS-BUN-3

Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX1400

SRX1400-IDP

SRX1400-IDP-3

SRX Content Security (1 Incremental Logical Systems License for NetSecure)

SRX1400

SRX-1400-LSYS-1

Sophos antispam (1 year and 3 years subscription)

SRX1400

SRX1400-S-AS-1

SRX1400-S-AS-3

Sophos antivirus (1 year and 3 years subscription)

SRX1400

SRX1400-S-AV-1

SRX1400-S-AV-3

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX1400

SRX1400-W-EWF-1

SRX1400-W-EWF-3

Features Requiring a License on SRX1500 Devices

Table 12 lists the licenses you can purchase for each SRX Series software feature.

Table 12: SRX1500 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security, Intrusion Detection and Prevention, Enhanced Web Filtering, Antivirus and Sky Advanced Threat Prevention (1 year, 3 years and 5 years subscription)

SRX1500

SRX1500-ATP-BUN-1

SRX1500-ATP-BUN-3

SRX1500-ATP-BUN-5

Application Security, Intrusion Prevention Signatures, Antivirus, Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX1500

SRX1500-CS-BUN-1

SRX1500-CS-BUN-3

SRX1500-CS-BUN-5

Sky Advanced Threat Prevention Threat Intelligence Feeds only (1 year, 3 years and 5 years subscription)

SRX1500

SRX1500-THRTFEED-1

SRX1500-THRTFEED-3

SRX1500-THRTFEED-5

Sky Advanced Threat Protection (1 year, 3 years and 5 years subscription)

SRX1500

SRX1500-ATP-1

SRX1500-ATP-3

SRX1500-ATP-5

Intrusion Prevention Signature (1 year, 3 years and 5 years subscription)

SRX1500

SRX1500-IPS-1

SRX1500-IPS-3

SRX1500-IPS-5

Logical System License (1, 5, and 25 Incremental)

SRX1500

SRX-1500-LSYS-1

SRX-1500-LSYS-5

SRX-1500-LSYS-25

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX1500

SRX1500-W-EWF-1

SRX1500-W-EWF-3

SRX1500-W-EWF-5

Features Requiring a License on SRX3400 Devices

Table 13 lists the licenses you can purchase for each SRX Series software feature.

Table 13: SRX3400 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security, Intrusion Detection and Prevention, Enhanced Web Filtering, Antivirus and Sky Advanced Threat Prevention (1 year and 3 year subscription)

SRX3400

SRX3400-ATP-BUN-1

SRX3400-ATP-BUN-3

SRX3400-ATP-BUN-5

Application Security, Intrusion Prevention Signatures, Antivirus, Enhanced Web Filtering (1 year and 3 years subscription)

SRX3400

SRX3400-CS-BUN-1

SRX3400-CS-BUN-3

Application Security and Intrusion Prevention Signature (1 year and 3 year subscription)

SRX3400

SRX3400-APPSEC-A-1

SRX3400-APPSEC-A-3

Sophos antispam (1 year and 3 year subscription)

SRX3400

SRX3400-S-AS-1

SRX3400-S-AS-3

Sophos antivirus (1 year and 3 year subscription)

SRX3400

SRX3400-S-AV-1

SRX3400-S-AV-3

Logical System License (1, 5, and 25 Incremental)

SRX3400

SRX-3400-LSYS-1

SRX-3400-LSYS-5

SRX-3400-LSYS-25

Enhanced Web Filtering (1 year and 3 years subscription)

SRX3400

SRX3400-W-EWF-1

SRX3400-W-EWF-3

Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX3400

SRX3K-IDP

SRX3K-IDP-3

Features Requiring a License on SRX3600 Devices

Table 14 lists the licenses you can purchase for each SRX Series software feature.

Table 14: SRX3600 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security, Intrusion Prevention Signatures, Antivirus, Enhanced Web Filtering (1 year and 3 years subscription)

SRX3600

SRX3600-CS-BUN-1

SRX3600-CS-BUN-3

Application Security and Intrusion Prevention Signature (1 year and 3 year subscription)

SRX3600

SRX3600-APPSEC-A-1

SRX3600-APPSEC-A-3

Sophos antispam (1 year and 3 year subscription)

SRX3600

SRX3600-S-AS-1

SRX3600-S-AS-3

Sophos antivirus (1 year and 3 year subscription)

SRX3600

SRX3600-S-AV-1

SRX3600-S-AV-3

Logical System License (1, 5, and 25 Incremental)

SRX3600

SRX-3600-LSYS-1

SRX-3600-LSYS-5

SRX-3600-LSYS-25

Enhanced Web Filtering (1 year and 3 years subscription)

SRX3600

SRX3600-W-EWF-1

SRX3600-W-EWF-3

Intrusion Detection and Prevention (1 year and 3 years subscription)

SRX3600

SRX3K-IDP

SRX3K-IDP-3

Features Requiring a License on SRX4100 Devices

Table 15 lists the licenses you can purchase for each SRX Series software feature.

Table 15: SRX4100 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Sky Advanced Threat Prevention (1 year, 3 years and 5 years subscription)

SRX4100

SRX4100-ATP-BUN-1

SRX4100-ATP-BUN-3

SRX4100-ATP-BUN-5

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Antispam (1 year, 3 years and 5 years subscription)

SRX4100

SRX4100-CS-BUN-1

SRX4100-CS-BUN-3

SRX4100-CS-BUN-5

Sky Advanced Threat Prevention Threat Intelligence Feeds only (1 year, 3 years and 5 years subscription)

SRX4100

SRX4100-THRTFEED-1

SRX4100-THRTFEED-3

SRX4100-THRTFEED-5

Sky Advanced Threat Protection (1 year, 3 years and 5 years subscription)

SRX4100

SRX4100-ATP-1

SRX4100-ATP-3

SRX4100-ATP-5

Intrusion Prevention Signature (1 year, 3 years and 5 years subscription)

SRX4100

SRX4100-IPS-1

SRX4100-IPS-3

SRX4100-IPS-5

Logical System License (1, 5, and 25 Incremental)

SRX4100

SRX-4100-LSYS-1

SRX-4100-LSYS-5

SRX-4100-LSYS-25

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX4100

SRX4100-W-EWF-1

SRX4100-W-EWF-3

SRX4100-W-EWF-5

Features Requiring a License on SRX4200 Devices

Table 16 lists the licenses you can purchase for each SRX Series software feature.

Table 16: SRX4200 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Sky Advanced Threat Prevention (1 year, 3 years and 5 years subscription)

SRX4200

SRX4200-ATP-BUN-1

SRX4200-ATP-BUN-3

SRX4200-ATP-BUN-5

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Antispam (1 year, 3 years and 5 years subscription)

SRX4200

SRX4200-CS-BUN-1

SRX4200-CS-BUN-3

SRX4200-CS-BUN-5

Sky Advanced Threat Prevention Threat Intelligence Feeds only (1 year, 3 years and 5 years subscription)

SRX4200

SRX4200-THRTFEED-1

SRX4200-THRTFEED-3

SRX4200-THRTFEED-5

Sky Advanced Threat Protection (1 year, 3 years and 5 years subscription)

SRX4200

SRX4200-ATP-1

SRX4200-ATP-3

SRX4200-ATP-5

Intrusion Prevention Signature (1 year, 3 years and 5 years subscription)

SRX4200

SRX4200-IPS-1

SRX4200-IPS-3

SRX4200-IPS-5

Logical System License (1, 5, and 25 Incremental)

SRX4200

SRX-4200-LSYS-1

SRX-4200-LSYS-5

SRX-4200-LSYS-25

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX4200

SRX4200-W-EWF-1

SRX4200-W-EWF-3

SRX4200-W-EWF-5

Features Requiring a License on SRX4600 Devices

Table 17 lists the licenses you can purchase for each SRX Series software feature.

Table 17: SRX4600 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Sky Advanced Threat Prevention (1 year, 3 years and 5 years subscription)

SRX4600

SRX4600-ATP-BUN-1

SRX4600-ATP-BUN-3

SRX4600-ATP-BUN-5

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Antispam (1 year, 3 years and 5 years subscription)

SRX4600

SRX4600-CS-BUN-1

SRX4600-CS-BUN-3

SRX4600-CS-BUN-5

Sky Advanced Threat Prevention Threat Intelligence Feeds only (1 year, 3 years and 5 years subscription)

SRX4600

SRX4600-THRTFEED-1

SRX4600-THRTFEED-3

SRX4600-THRTFEED-5

Sky Advanced Threat Protection (1 year, 3 years and 5 years subscription)

SRX4600

SRX4600-ATP-1

SRX4600-ATP-3

SRX4600-ATP-5

Intrusion Prevention Signature (1 year, 3 years and 5 years subscription)

SRX4600

SRX4600-IPS-1

SRX4600-IPS-3

SRX4600-IPS-5

Logical System License (1, 5, and 25 Incremental)

SRX4600

SRX-4600-LSYS-1

SRX-4600-LSYS-5

SRX-4600-LSYS-25

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX4600

SRX4600-W-EWF-1

SRX4600-W-EWF-3

SRX4600-W-EWF-5

Features Requiring a License on SRX5400 Devices

Table 18 lists the licenses you can purchase for each SRX Series software feature.

Table 18: SRX5400 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Sky Advanced Threat Prevention (1 year, 3 years and 5 years subscription)

SRX5400

SRX5400-ATP-BUN-1

SRX5400-ATP-BUN-3

SRX5400-ATP-BUN-5

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Antispam (1 year, 3 years and 5 years subscription)

SRX5400

SRX5400-CS-BUN-1

SRX5400-CS-BUN-3

SRX5400-CS-BUN-5

Sky Advanced Threat Prevention Threat Intelligence Feeds only (1 year, 3 years and 5 years subscription)

SRX5400

SRX5400-THRTFEED-1

SRX5400-THRTFEED-3

SRX5400-THRTFEED-5

Application Security and Intrusion Prevention Signature (1 year, 3 years and 5 years subscription)

SRX5400

SRX5400-APPSEC-1

SRX5400-APPSEC-3

SRX5400-APPSEC-5

Sky Advanced Threat Protection (1 year, 3 years and 5 years subscription)

SRX5400

SRX5400-ATP-1

SRX5400-ATP-3

SRX5400-ATP-5

Logical System License (1, 5, and 25 Incremental)

SRX5400

SRX-5400-LSYS-1

SRX-5400-LSYS-5

SRX-5400-LSYS-25

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX5400

SRX5400-W-EWF-1

SRX5400-W-EWF-3

SRX5400-W-EWF-5

Intrusion Detection and Prevention (1 year, 3 years and 5 years subscription)

SRX5400

SRX5K-IDP

SRX5K-IDP-3

SRX5K-IDP-5

Features Requiring a License on SRX5600 Devices

Table 19 lists the licenses you can purchase for each SRX Series software feature.

Table 19: SRX5600 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Sky Advanced Threat Prevention (1 year, 3 years and 5 years subscription)

SRX5600

SRX5600-ATP-BUN-1

SRX5600-ATP-BUN-3

SRX5600-ATP-BUN-5

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Antispam (1 year, 3 years and 5 years subscription)

SRX5600

SRX5600-CS-BUN-1

SRX5600-CS-BUN-3

SRX5600-CS-BUN-5

Sky Advanced Threat Prevention Threat Intelligence Feeds only (1 year, 3 years and 5 years subscription)

SRX5600

SRX5600-THRTFEED-1

SRX5600-THRTFEED-3

SRX5600-THRTFEED-5

Application Security and Intrusion Prevention Signature (1 year, 3 years and 5 years subscription)

SRX5600

SRX5600-APPSEC-A-1

SRX5600-APPSEC-A-3

SRX5600-APPSEC-A-5

Sky Advanced Threat Protection (1 year, 3 years and 5 years subscription)

SRX5600

SRX5600-ATP-1

SRX5600-ATP-3

SRX5600-ATP-5

Logical System License (1, 5, and 25 Incremental)

SRX5600

SRX-5600-LSYS-1

SRX-5600-LSYS-5

SRX-5600-LSYS-25

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX5600

SRX5600-W-EWF-1

SRX5600-W-EWF-3

SRX5600-W-EWF-5

Intrusion Detection and Prevention (1 year, 3 years and 5 years subscription)

SRX5600

SRX5K-IDP

SRX5K-IDP-3

SRX5K-IDP-5

Features Requiring a License on SRX5800 Devices

Table 20 lists the licenses you can purchase for each SRX Series software feature.

Table 20: SRX5800 Junos OS Feature License Model Number

Licensed Software Feature

Supported Devices

Model Number

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Sky Advanced Threat Prevention (1 year, 3 years and 5 years subscription)

SRX5800

SRX5800-ATP-BUN-1

SRX5800-ATP-BUN-3

SRX5800-ATP-BUN-5

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Antispam (1 year, 3 years and 5 years subscription)

SRX5800

SRX5800-CS-BUN-1

SRX5800-CS-BUN-3

SRX5800-CS-BUN-5

Sky Advanced Threat Prevention Threat Intelligence Feeds only (1 year, 3 years and 5 years subscription)

SRX5800

SRX5800-THRTFEED-1

SRX5800-THRTFEED-3

SRX5800-THRTFEED-5

Application Security and Intrusion Prevention Signature (1 year, 3 years and 5 years subscription)

SRX5800

SRX5800-APPSEC-A-1

SRX5800-APPSEC-A-3

SRX5800-APPSEC-A-5

Sky Advanced Threat Protection (1 year, 3 years and 5 years subscription)

SRX5800

SRX5800-ATP-1

SRX5800-ATP-3

SRX5800-ATP-5

Logical System License (1, 5, and 25 Incremental)

SRX5800

SRX-5800-LSYS-1

SRX-5800-LSYS-5

SRX-5800-LSYS-25

Enhanced Web Filtering (1 year, 3 years and 5 years subscription)

SRX5800

SRX5800-W-EWF-1

SRX5800-W-EWF-3

SRX5800-W-EWF-5

Intrusion Detection and Prevention (1 year, 3 years and 5 years subscription)

SRX5800

SRX5K-IDP

SRX5K-IDP-3

SRX5K-IDP-5

Understanding Chassis Cluster Licensing Requirements

There is no separate license required for chassis cluster. However, some Junos OS software features require a license to activate the feature. To configure and use the licensed feature in a chassis cluster setup, you must purchase one license per feature per device and the license needs to be installed on both nodes of the chassis cluster. Both devices (which are going to form a chassis cluster) must have the valid, identical features licenses installed on them. If both devices do not have an identical set of licenses, then after a failover, a particular feature (that is, a feature that is not licensed on both devices) might not work or the configuration might not synchronize in chassis cluster formation. Licensing is usually ordered when the device is purchased, and this information is bound to the chassis serial number. For example, Intrusion Detection and Prevention (IDP) is a licensed feature and the license for this specific feature is tied to the serial number of the device.

For information about how to purchase software licenses, contact your Juniper Networks sales representative at https://www.juniper.net/in/en/contact-us/.

Installing Licenses on the SRX Series Devices in a Chassis Cluster

You can add a license key from a file or a URL, from a terminal, or from the J-Web user interface. Use the filename option to activate a perpetual license directly on the device. Use the url option to send a subscription-based license key entitlement (such as unified threat management [UTM]) to the Juniper Networks licensing server for authorization. If authorized, the server downloads the license to the device and activates it.

Before adding new licenses, complete the following tasks:

  • Purchase the required licenses.

  • Set the chassis cluster node ID and the cluster ID. See Example: Setting the Node ID and Cluster ID for Security Devices in a Chassis Cluster .

  • Ensure that your SRX Series device has a connection to the Internet (if particular feature requires Internet or if (automatic) renewal of license through internet is to be used). For instructions on establishing basic connectivity, see the Getting Started Guide or Quick Start Guide for your device.

To install licenses on the primary node of an SRX Series device in a chassis cluster:

  1. Run the show chassis cluster status command and identify which node is primary for redundancy group 0 on your SRX Series device.
    {primary:node0}
    user@host> show chassis cluster status redundancy-group 0

    Output to this command indicates that node 0 is primary and node 1 is secondary.

  2. From CLI operational mode, enter one of the following CLI commands:
    • To add a license key from a file or a URL, enter the following command, specifying the filename or the URL where the key is located:

    • To add a license key from the terminal, enter the following command:

  3. When prompted, enter the license key, separating multiple license keys with a blank line.

    If the license key you enter is invalid, an error appears in the CLI output when you press Ctrl+d to exit license entry mode.

  4. Verify the installed licenses.

    For more details, see Adding New Licenses (CLI Procedure).

To install licenses on the secondary node of an SRX Series device in a chassis cluster:

  1. Initiate a failover to change node 1 (secondary node) to be the primary node:

    {primary:node0}

    user@host> request chassis cluster failover redundancy-group 0 node 1
    Note

    Initiating a failover to the secondary node is not required if you are installing licenses manually on the device. However, if you are installing the license directly from the Internet, you must initiate a failover.

  2. Repeat the steps described in Step-by-Step Procedure to install licenses on the secondary node.
  3. Reboot the device for licenses to take effect.
Note

You must install the updated license on both nodes of the chassis cluster before the existing license expires.

Note

In a chassis cluster configuration, when one device has a license installed, and the other device does not have the same license installed, an error message is displayed when you try to configure that specific feature as shown in the following example:

[edit security utm feature-profile web-filtering type]
Tip

If you are not using any specific feature or license , you can delete the license from both devices in a chassis cluster. You need to connect to each node separately to delete the licenses. For details, see Example: Deleting a License Key.

Verifying Licenses on an SRX Series Device in a Chassis Cluster

Purpose

You can verify the licenses installed on both the devices in a chassis cluster setup by using the show system license installed command to view license usage.

Action

Licenses details on node 0.

user@host> show system license installed

Licenses details on node 1.

Meaning

Use the fields License version and Features to make sure that licenses installed on both the nodes are identical.

Understanding Licenses for Logical Systems and Tenant Systems on SRX Series Devices

This topic provides licensing information for SRX Series devices running logical systems and tenant systems.

Starting in Junos OS Release 18.3R1, an SRX Series device running logical systems or tenant systems includes three licenses by default. One license for a master logical system and the other two licenses for user-defined logical system or tenant system. The system does not allow you to configure additional logical systems or tenant systems if the number of logical systems and tenant systems exceeds the number of available licenses. In the earlier releases, the system allowed you to configure an additional logical system even if the number of logical systems exceeds the number of available licenses, but with a warning message of non-licensed logical-systems do not pass traffic. You can purchase licenses for additional logical systems and tenant systems that you intend to create. If you intend to configure an interconnect logical system or interconnect tenant system to use as a switch, it also requires separate licenses.

We enforce that you do not configure more logical systems or tenant systems than the number of licenses you have purchased. If the number of logical systems or tenant systems that you attempt to configure exceeds the number of licenses that you have purchased, then the system displays an error message similar to the following:

You can use the show system license status all-logical-systems-tenants or show system license usage commands to view the active logical systems and tenant systems on the device.

When you use SRX Series devices running logical systems or tenant systems in a chassis cluster, you must purchase and install the same number of licenses for each node in the chassis cluster. Logical systems or tenant systems licenses pertain to a single chassis, or node, within a chassis cluster and not to the cluster collectively.

Understanding UTM Licensing

The majority of UTM features function as a subscription service requiring a license. You can redeem this license once you have purchased your subscription license SKUs. You redeem your license by entering your authorization code and chassis serial number into the Customer Service license portal interface. Once your entitlement is generated, you can use the CLI from your device to send a license update request to the license portal. The license portal then sends your subscription license directly to the device.

Note

The products supported by the Juniper Agile Licensing (JAL) portal includes: QFX series, SRX Series, EX Series, NFX, vBNG, vMX, vSRX, and ACX. For other Juniper products (SPACE, JSA, SBR Carrier, Screen OS and so on) access the License Management System (LMS).

Note

UTM requires 1 GB of memory.

Table 21: UTM Feature Subscription Service License Requirements

UTM FeatureRequires License

Antispam

Yes

Antivirus: sophos

Yes

Content Filtering

No

Web Filtering: integrated

Yes

Web Filtering: redirect

No

Web Filtering: local

No

Web Filtering: enhanced

Yes

Note

License enforcement is supported on all SRX Series devices. Licensed features including anti-virus or Enhanced Web Filtering will not function until a license has been installed. The license must be installed after installing or upgrading to a new Junos OS Release version. Unlicensed features such as UTM blacklists and whitelists will continue to function without a license.

Updating UTM Licenses (CLI Procedure)

To apply the UTM subscription license to SRX Series devices, use the following CLI command:

After you install the license for SRX300, SRX320, SRX340, SRX345, SRX550M, and SRX1400 devices, reboot the device. The device reserves additional memory for UTM features and hence decreases the session capacity.

For SRX3400, SRX3600, SRX4600, SRX5600 and SRX5800 devices, use the following command to manually reallocate the memory for UTM features:

Reboot the device for the configuration to take effect.

Note

SRX1500, SRX4100 and SRX4200 devices have enough memory for UTM. These devices do not require any command for memory allocation.

Installing the IPS License (CLI)

You can either download an IPS license from the license server, or manually install IPS if you received a license from Juniper Networks.

Access the SRX Series device console through the serial cable plugged into the console port on the device or by using a terminal session such as SSH.

To apply your IPS subscription license to the device, use the following CLI command:

If you received a license for manual installation, perform the following tasks:

  1. Access the SRX Series Services Gateway console either by plugging the serial cable into the console port on the device or by using a terminal session such as SSH.
  2. Check for an IPS license (required for all IPS updates):
  3. If there are no licenses installed, obtain the chassis serial number by using the following CLI command:
  4. A serial number is needed to generate the IPS license. You can add a license key from a file or URL or from the terminal.
    • From a file or URL:

    • From the terminal:

  5. When prompted, enter the license key, separating multiple license keys with a blank line. If the license key you enter is invalid, an error is generated when you press Ctrl-D to exit license entry mode.
  6. Verify the system license by entering the show system license command.

Installing and Verifying Licenses for an Application Signature Package

The Junos OS application signature package update is a separately licensed subscription service. You must install the application signature package update license key on your device to download and install the signature database updates provided by Juniper Networks. If your license key expires, you can continue to use the locally stored application signature package content.

Licensing is usually ordered when the device is purchased, and this information is bound to the chassis serial number. These instructions assume that you already have the license. If you did not order the license during the purchase of the device, contact your account team or Juniper customer care for assistance. For more information, refer to the Knowledge Base article KB9731 at https://kb.juniper.net/InfoCenter/index?page=home.

Starting from Junos OS 15.1X49-D30 and Junos OS Release 17.3R1, on SRX1500 devices, AppSecure is part of Junos Software Enhanced (JSE) software license package. There is no separate license key for AppSecure is available. You must use JSE software license on your device to download and install the AppID signature database updates, or to use other AppSecure features such as AppFW, AppQoS, and AppTrack.

Starting from Junos OS 15.1X49-D30 and Junos OS Release 17.3R1, on SRX300, SRX320, SRX340, and SRX345 devices, AppSecure is part of Junos Software Enhanced (JSE) software license package. There is no separate license key for AppSecure is available. You must use JSE software license on your device to download and install the AppID signature database updates, or to use other AppSecure features such as AppFW, AppQoS, and AppTrack.

Starting from 15.1X49-D65 and Junos OS Release 17.3R1, on SRX4100, and SRX4200 devices, AppSecure is part of Junos Software Enhanced (JSE) license package. There is no separate license key for AppSecure is available. You must use JSE software license on your device to download and install the AppID signature database updates, or to use other AppSecure features such as AppFW, AppQoS, and AppTrack.

Starting from Junos OS Release 17.4R1, for SRX4600, application signatures are included by default.

Junos Software Base (JSB) package does not include application signatures. Please refer to the product Data Sheets at SRX Series Services Gateways for details, or contact your Juniper Account Team or Juniper Partner.

You can install the license on the SRX Series device using either the automatic method or manual method as follows:

  • Install your license automatically on the device.

    To install or update your license automatically, your device must be connected to the Internet .

  • Install the licenses manually on the device.

    Paste the license key and press Enter to continue.

  • Verify the license is installed on your device.

    Use the show system license command command to view license usage, as shown in the following example:

    The output sample is truncated to display only license usage details.

Release History Table
Release
Description
Starting in Junos OS Release 18.3R1, an SRX Series device running logical systems or tenant systems includes three licenses by default.
Starting from Junos OS Release 17.4R1, for SRX4600, application signatures are included by default.
Starting from 15.1X49-D65 and Junos OS Release 17.3R1, on SRX4100, and SRX4200 devices, AppSecure is part of Junos Software Enhanced (JSE) license package.
Starting from Junos OS 15.1X49-D30 and Junos OS Release 17.3R1, on SRX300, SRX320, SRX340, and SRX345 devices, AppSecure is part of Junos Software Enhanced (JSE) software license package.
Starting from Junos OS 15.1X49-D30 and Junos OS Release 17.3R1, on SRX1500 devices, AppSecure is part of Junos Software Enhanced (JSE) software license package.