Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Juniper ATP Cloud User Guide
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Manage the Juniper Advanced Threat Prevention Cloud License

date_range 27-Sep-24

This topic describes how to install the Juniper ATP Cloud license onto your SRX Series Firewalls and vSRX Virtual Firewall deployments. For more information, see Software Licenses for ATP Cloud.

When installing the license key, you must use the license that is specific your device type.

Obtaining the License Key

The Juniper ATP Cloud license can be found on the Juniper Networks product price list. The procedure for obtaining the license entitlement is the same as for all other Juniper Network products. The following steps provide an overview.

  1. Contact your local sales office or Juniper Networks partner to place an order for the Juniper ATP Cloud license.

    After your order is complete, an authorization code is e-mailed to you. An authorization code is a unique 16-digit alphanumeric used in conjunction with your device serial number to generate a license entitlement.

  2. (SRX Series Firewalls only) Use the show chassis hardware CLI command to find the serial number of the SRX Series Firewalls that are to be tied to the Juniper ATP Cloud license.
    content_copy zoom_out_map
    [edit]
     root@SRX# run show chassis hardware
    Hardware inventory:
    Item             Version  Part number  Serial number     Description
    Chassis                                CM1915AK0326      SRX1500
    Midplane         REV 09   750-058562   ACMH1590          SRX1500
    Pseudo CB 0
    Routing Engine 0          BUILTIN      BUILTIN           SRX Routing Engine
    FPC 0            REV 08   711-053832   ACMG3280          FEB
      PIC 0                   BUILTIN      BUILTIN           12x1G-T-4x1G-SFP-4x10G

    Look for the serial number associated with the chassis item. In the above example, the serial number is CM1915AK0326.

  3. Open a browser window and go to https://license.juniper.net.
  4. Click Login to Generate License Keys and follow the instructions.
    Note:

    You must have a valid Juniper Networks Customer Support Center (CSC) account to log in.

License Management and SRX Series Firewalls

Unlike other Juniper Networks products, Juniper ATP Cloud does not require you to install a license key onto your SRX Series Firewall. Instead, your entitlement for a specific serial number is automatically transferred to the cloud server when you generate your license key. It may take up to 24 hours for your activation to be updated in the Juniper ATP Cloud cloud server.

Juniper ATP Cloud Premium Evaluation License for vSRX Virtual Firewall

The 30-day Juniper ATP Cloud countdown premium evaluation license allows you to protect your network from advanced threats with Juniper ATP Cloud. The license allows you to use Juniper ATP Cloud premium features for 30-days without having to install a license key. After the trial license expires, the connection to the Juniper ATP Cloud cloud is broken and you will no longer be able to use any Juniper ATP Cloud features.

Instructions for downloading the trial license are here: https://www.juniper.net/us/en/dm/free-vsrx-trial/.

Note:

The 30-day trial license period begins on the day you install the evaluation license.

To continue using Juniper ATP Cloud features after the optional 30-day period, you must purchase and install the date-based license; otherwise, the features are disabled.

After installing your trial license, set up your realm and contact information before using Juniper ATP Cloud. For more information, see Register a Juniper Advanced Threat Prevention Cloud Account.

License Management and vSRX Virtual Firewall Deployments

Unlike with physical SRX Series Firewalls, you must install Juniper ATP Cloud licenses onto your vSRX Virtual Firewall. Installing the Juniper ATP Cloud license follows the same procedure as with most standard vSRX Virtual Firewall licenses.

The following instructions describe how to install a license key from the CLI. You can also add a new license key with J-Web (see Managing Licenses for vSRX.)

Note:

If you are reinstalling a Juniper ATP Cloud license key on your vSRX Virtual Firewall, you must first remove the existing Juniper ATP Cloud license. For information on removing licenses on the vSRX Virtual Firewall, see Managing Licenses for vSRX.

To install a license key from the CLI:

  1. Use the request system license add command to manually paste the license key in the terminal.
    content_copy zoom_out_map
    user@vsrx> request system license add terminal
     
    [Type ^D at a new line to end input, 
     enter blank line between each license key] 
    
    JUNOS123456  aaaaaa bbbbbb cccccc dddddd eeeeee ffffff 
    	   		cccccc bbbbbb dddddd aaaaaa ffffff aaaaaa 
    			   aaaaaa bbbbbb cccccc dddddd eeeeee ffffff 
    	   		cccccc bbbbbb dddddd aaaaaa ffffff
    
    JUNOS123456: successfully added 
    add license complete (no errors)
    Note:

    You can save the license key to a file and upload the file to the vSRX Virtual Firewall file system through FTP or Secure Copy (SCP), and then use the request system license add file-name command to install the license.

  2. (Optional) Use the show system license command to view details of the licenses.

    Examples of license outputs:

    content_copy zoom_out_map
    root@host> show system license 
    
      License identifier: JUNOS123456
      License version: 4
      Software Serial Number: 1234567890
      Customer ID: JuniperTest
      Features:
        ATP Cloud          - Cloud Based Advanced Threat Prevention on SRX firewalls
          date-based, 2016-07-19 17:00:00 PDT - 2016-07-30 17:00:00 PDT
    
    content_copy zoom_out_map
    root@host> show system license 
    
      License identifier: JUNOS123456
      License version: 4
      Software Serial Number: 1234567890
      Customer ID: JuniperTest
      Features:
        Virtual Appliance - Virtual Appliance permanent
    
  3. The license key is installed and activated on your vSRX Virtual Firewall.

High Availability

Before enrolling your devices with the Juniper ATP Cloud cloud, set up your HA cluster as described in your product documentation. For vSRX Virtual Firewall deployments, make sure the same license key is used on both cluster nodes. When enrolling your devices, you only need to enroll one node. The Juniper ATP Cloud cloud will recognize this is an HA cluster and will automatically enroll the other node.

footer-navigation