Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Software Licenses for vSRX Virtual Firewall

vSRX Virtual Firewall supports subscription licenses.

Go through the following tables:

Table 1: vSRX Virtual Firewall SKU Definition

SKU

SKU Character Description

S-VSRX-2C/5C/9C/17C-S/A1/A2/A3/P1/P2/P3-1/3/5

S—Software

VSRX—Product name vSRX Virtual Firewall

2C/5C/9C/17C—Number of vCPUs

S/A1/A2/A3/P1/P2/P3

  • S = Standard

  • A1 = Advanced 1

  • A2 = Advanced 2

  • A3 = Advanced 3

  • P1 = Premium 1

  • P2 = Premium 2

  • P3 = Premium 3

1/3/5—Subscription term 1, 3, or 5 years

For public cloud, vSRX Virtual Firewall software license supports—Pay-As-You-Go (PAYG) and Bring Your Own License (BYOL) license model. Pricing is based on the number of vCPU cores, with a minimum of 2 vCPU cores.

Note:

Advanced 3 and Premium 3 licenses are supported only on vSRX3.0.
Table 2: vSRX Virtual Firewall with 2, 5, 9, 17, or 32 virtual CPUs (vCPUs) Software Licenses

Features with Licenses

vSRX Virtual Firewall

Use Case for Premium 3 (includes Advanced 3 features): Next-generation firewall and Juniper ATP Cloud

Juniper ATP Cloud

Premium 3

Use Case for Premium 2 (includes Advanced 2 features): Next-generation firewall and Juniper ATP Cloud

Juniper ATP Cloud

Premium 2

Use Case for Premium 1 (includes Advanced 1 features): Data center security and Juniper ATP Cloud

Juniper ATP Cloud

Premium 1
Use Case for Advanced 3 (includes Standard features): Next-generation firewall with on-box antivirus

Avira antivirus, Web filtering, antispam, and content filtering

Advanced 3
Use Case for Advanced 2 (includes Standard features): Next-generation firewall with cloud-based antivirus

Sophos antivirus, Web filtering, antispam, and content filtering

Advanced 2
Use Case for Advanced 1 (includes Standard features): Data center security

IPS and Application Security

 Advanced 1
Use Case for Standard: Standard firewall and secure branch routers

Application Layer Gateways (ALGs)

Standard

BGP

Standard

Class of service (CoS)

Standard

DHCP

Standard

Diagnostics

Standard

Firewall

Standard

GRE

Standard

IP tunneling

Standard
IPv4 and IPv6 Standard
J-Flow Standard
Management (J-Web, CLI, and NETCONF) Standard
MPLS Standard
Multicast Standard
NAT Standard
On-box logging Standard
OSPF Standard
Screens Standard
Site-to-site VPN Standard
Static routing Standard
User firewall Standard
Table 3: vSRX Virtual Firewall License SKUs

vSRX

SKUs
Premium 3

S-VSRX-5C/9C/17C-P3-1/3/5
Premium 2

S-VSRX-2C/5C/9C/17C-P2-1/3/5
Premium 1

S-VSRX-2C/5C/9C/17C-P1-1/3/5
Advanced 3

S-VSRX-5C/9C/17C-A3-1/3/5
Advanced 2

S-VSRX-2C/5C/9C/17C-A2-1/3/5
Advanced 1

S-VSRX-2C/5C/9C/17C-A1-1/3/5
Standard

S-VSRX-2C/5C/9C/17C-S-1/3/5

Oracle Cloud Infrastructure (OCI) supports Bring Your Own License (BYOL) licensing model. The BYOL license model allows you to customize your license, subscription and support to fit your needs. You can purchase BYOL from Juniper Networks or Juniper Networks authorized reseller.

Legacy vSRX Virtual Firewall Licenses

The licenses used by all Juniper Networks instances are based on SKUs, which represent lists of features. Each license includes a list of features that the license enables along with information about those features.

For information about purchasing software licenses, contact your Juniper Networks sales representative at https://www.juniper.net/in/en/contact-us/.

vSRX Virtual Firewall licenses are based on application packages and processing capacity.

vSRX Virtual Firewall provides bandwidth in the following capacities (throughput per instance): 1 Gbps, 2 Gbps, and 4 Gbps. Each of these bandwidth tiers is offered with three different packages.

Table 4: Legacy Software Features for vSRX Virtual Firewall

License Type

Description

SKUs

STD

Includes the following features:

  • Core security—firewall, ALG, screens, user firewall

  • IPsec VPN (site-to-site VPN)

  • NAT

  • CoS

  • Routing services—BGP, OSPF, DHCP, J-Flow, IPv4

  • Foundation—Static routing, management (J-Web, CLI, and NETCONF), on-box logging, diagnostics

VSRX-1G/2G/4G-STD-CLD-1/3

ASCB

Includes all STD features bundled with IPS and AppSecure signatures, along with the following features:

  • AppID

  • AppFW

  • AppQoS

  • AppTrack

VSRX-1G/2G/4G-ASB-CLD-1/3

CSB

Includes all STD features, along with the features bundled with ASCB, including the addition of the following Content Security features:

  • Antivirus

  • Content filtering

  • Web filtering

VSRX-1G/2G/4G-CSB-CLD-1/3

ATP-B

vSRX-1G-ATP-B bundle includes:

  • Juniper ATP Cloud +

  • Content Security +

  • ASEC (IDP + AppFW) +

  • STD

VSRX-1G-ATP-B-1

License stacking is allowed. So, for example, to license 3 Gbps of throughput for the standard (STD) feature set for 1 year, use a VSRX-1G-STD-CLD-1 license and a VSRX-2G-STD-CLD-1.

Legacy vSRX Virtual Firewall Licenses for Contrail, KVM, Microsoft Hyper-V, and VMware

The licenses used by all Juniper Networks instances are based on SKUs, which represent lists of features. Each license includes a list of features that the license enables along with information about those features.

For information about purchasing software licenses, contact your Juniper Networks sales representative at https://www.juniper.net/in/en/contact-us/.

vSRX Virtual Firewall licenses are based on application packages and processing capacity.

Bandwidth (throughput) licenses allow you to use a single instance of the software for up to the maximum throughput specified in the license entitlement. Throughput licenses can be combined on a single instance of the software so that the maximum throughput for that instance is the aggregate of all the throughput licenses assigned to that instance. A throughput license cannot be split across multiple instances. Throughput licenses are identified in the license entitlement in megabits per second (Mbps), or gigabits per second (Gbps).

vSRX Virtual Firewall provides bandwidth in the following capacities (throughput per instance): 100 Mbps, 1 Gbps, 2 Gbps, 4 Gbps, 10 Gbps, and 20 Gbps. Each of these bandwidth tiers is offered with four different packages along with bandwidth based, a la carte, advanced Layer 7 security services SKUs.

Table 5: Legacy Software Features for vSRX Virtual Firewall on Contrail, KVM, Microsoft Hyper-V, and VMware

License Type

Description

Bandwidth

SKUs

STD

Includes the following features:

  • Core security – firewall, ALG, screens, user firewall

  • IPsec VPN (site-to-site VPN)

  • NAT

  • CoS

  • Multicast services – IP Multicast (PIM, IGMP)

  • Routing services – BGP, OSPF, DHCP, J-Flow, IPv4, and IPv6

  • High availability

  • Foundation – Static routing, management (J-Web, CLI, and NETCONF), on-box logging, diagnostics

  • Software platform – KVM, Openstack, ESXi 6.0, Contrail

100M/1G/2G/4G/10G/20G throughput—vSRX Virtual Firewall standard package (1 year, 3 years, and perpetual)

VSRX-100M/1G/2G/4G/10G/20G-STD-1/3

ASCB and ASECB

Includes all STD features bundled with the following additional AppSecure features:

  • AppID

  • AppFW

  • AppQoS

  • AppTrack

100M/1G/2G/4G/10G/20G throughput—vSRX Virtual Firewall AppSecure package includes all features in the STD package with IPS and AppSecure (1-year or 3-year subscription)

VSRX-100M-ASCB-1/3

VSRX-1G/2G/4G/10G/20G-ASECB-1/3

VSRX-100M/1G/2G/4G/10G/20G-ASEC-1/3

CS-B

Includes all STD features bundled with ASEC features and the addition of Content Security capabilities:

  • Antispam

  • Antivirus

  • Content filtering

  • Web filtering

100M/1G/2G/4G/10G/20G throughput—vSRX Virtual Firewall CS package includes all features in STD, IPS, and AppSecure, enhanced Web filtering, Sophos antivirus, antispam, content filtering, (1-year or 3-year subscription).

VSRX-100M/1G/2G/4G/10G/20G-CS-B-1/3

ATP-B

vSRX-1G-ATP-B bundle includes:

  • ATP Cloud +

  • Content Security +

  • ASEC (IDP + AppFW) +

  • STD

1G Throughput, 1 year Subscription License for vSRX Virtual Firewall ATP package, including features in Content Security (CS) package, and ATP Cloud.

This license is not supported for Contrail deployments.

 vSRX-1G-ATP-B-1

Individual (a la carte) Advanced Security Services (ASEC, S-AV, W-EWF, CS)

Individual (a la carte) Layer 7 security services licenses including:

  • Sophos antivirus

  • Websense enhanced Web filtering

  • AppSecure and IPS

  • Content Security (CS)

100M/1G/2G/4G/10G/20G throughput—vSRX Virtual Firewall S-AV license (1-year or 3-year subscription).

100M/1G/2G/4G/10G/20G throughput—vSRX W-EWF license (1-year or 3-year subscription).

VSRX-100M/1G/2G/4G/10G/20G-CS-1/3

VSRX-100M/1G/2G/4G/10G/20G-S-AV-1/3

VSRX-100M/1G/2G/4G/10G/20G-WEWF-1/3

License stacking is allowed. For example, to license 3 Gbps of throughput for the standard (STD) feature set for 1 year, use a VSRX-1G-STD-1 license and a VSRX-2G-STD-1.

Table 6: Legacy Software Features for Remote Access on vSRX Virtual Firewall

Remote Access Licenses

SKUs

Remote Access (5 Concurrent users, NCP)

VSRX-RA1-5

Remote Access (10 Concurrent users, NCP)

VSRX-RA1-10

Remote Access (25 Concurrent users, NCP)

VSRX-RA1-25

Remote Access (50 Concurrent users, NCP)

VSRX-RA1-50

Remote Access (100 Concurrent users, NCP)

VSRX-RA1-100

Remote Access (150 Concurrent users, NCP)

VSRX-RA1-150

Remote Access (250 Concurrent users, NCP)

VSRX-RA1-250

Remote Access (500 Concurrent users, NCP)

VSRX-RA1-500