Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?




Hierarchy Level


Set the deep packet inspection (DPI) in performance mode for application identification.

The application traffic throughput can be improved by setting the DPI in performance mode with default packet inspection limit as two packets, including both client-to-server and server-to-client directions. By default, performance mode is disabled on SRX Series Firewalls.

If you want to set DPI to default accuracy mode and disable the performance mode, delete the configuration statement that specifies enabling of the performance mode by using the delete services application-identification enable-performance-mode command.

Starting in Junos OS Release 15.1X49-D210R1 and Junos OS Release 19.4R1, the maximum packet threshold for DPI performance mode option is deprecated—rather than immediately removed—to provide backward compatibility and an 6 opportunity to bring your configuration into compliance with the new configuration.


max-packet-threshold number

Set the maximum packet threshold for DPI performance mode.

  • Range: 1 through 100

  • Default: 2

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 12.1X47-D10.