• Integrated security: The solution includes built-in next-

generation firewall features such as IDS/IPS, URL filtering, and

antivirus, providing robust and consistent protection across the

entire branch network.

• Security at its core: The advanced design of the SSR replaces

the traditional routing plane with one built for security from

the ground up, providing a unified security posture without

relying on separate, bolted-on appliances.

• AI-native management: When paired with Juniper® WAN

Assurance, the SSR's security is managed by Marvis® AI, which

provides a single, centralized platform for policy orchestration,

real-time threat intelligence, and AI-native troubleshooting.

Table 1 details the key features of the SSR.

Category

Features

System and network

services

SNAT/DNAT, destination NAPT, shared NAT pool, IPv4/IPv6, DHCP

client, DHCP relay, DHCP server, DHCP server extensions, DHCPv6

PD, DNS client, PPPoE, Proxy ARP, NAT traversal, BFD, inline flow

performance monitoring, extended firewall pinhole, path MTU

discovery, MSS auto adjust, DSCP based service identification for

IPsec

Advanced services

Secure Vector Routing (SVR), Multipoint SVR, IPv6 SVR, overlapping

IP service segmentation, Ethernet over SVR, application identification

Routing

Service based routing, static routing, BGPv4, BGP route reflector,

BGP graceful restart, BGP over SVR, BGP route map, BGP prefix list,

OSPFv2, BGP VRF, OSPF VRF, Services and Topology Exchange

Protocol (STEP)

Traffic engineering

Traffic scheduling and shaping, flow policing and shaping, packet

marking (DiffServ), service rate limiting

Network firewall

Distributed stateful firewall, distributed and automated access control,

fine-grained segmentation/tenancy, ICSA network firewall certified,

ICMP blackhole

IDS/IPS and URL

filtering

Intrusion Detection System/ Intrusion Prevention System (IDS/IPS)

and URL filtering capabilities are available through the Advanced

Security Pack.

Secure edge

connectors

Seamless connections to Juniper Secure Edge or third-party SSE.

Application

identification

HTTP/S domain-based identification, O365 identification, DNS based

identification, application categorization

Analytics

Session metrics, network metrics, LTE metrics, peer path SLA, MOS

score, session analytics, SSL/TLS metrics, session IPFIX records

Session encryption

Session Payload Encryption (AES-256, AES-128), session/route

authentication (HMAC-SHA1, HMAC-SHA256, HMAC-

SHA-256-128), adaptive encryption, rekeying, FIPS 140-2 validated,

enhanced replay attack protection, transport-based encryption

Session

management

Path selection, (SLA, MoS, average latency), load balancing using

proportional and hunt, session migration, session duplication, session

duplication for non-SVR, session duplication for inter-node links, MOS

for VoIP, Path of last resort, session optimization, session reliability,

service health learning, service route redundancy

Monitoring

Monitoring agent, SNMPv2, Syslog, audit logs

Management and

remote access

GUI, CLI, REST, remote access over SVR (LTE), upgrade rollback, Zero

Touch Provisioning, remote service packet capture, user-defined

configuration templates, role-based access control

AAA

Local registry, LDAP

Interface options

Ethernet, LTE support including Dual LTE and Dual SIM, T1

Platforms

Bare metal x86 server, KVM, VMWare ESXi, OpenStack, AWS, Azure,

Google Cloud

Session Smart Conductor

The Session Smart Conductor is a centralized management and

policy engine that provides orchestration, administration, Zero

Touch Provisioning (ZTP), monitoring, and analytics for distributed

SSRs while maintaining a network

‑wide, multitenant service, and

policy data model. The Session Smart Conductor features multiple,

flexible deployment models, from on

‑premises to private or public

cloud.

Juniper WAN Assurance and AI-native operations

Alternatively, SSRs can be operated and orchestrated through the

Mist cloud. Marvis AI delivers unprecedented automation using a

combination of AI, machine learning algorithms, and data science

techniques to save time, maximize IT productivity, and deliver the

best experience to digital users.

Juniper WAN Assurance is built on the Mist cloud and delivers full

life cycle management and operations, including AI

‑native insights,

automated speed tests, dynamic packet capture (dPCAP), anomaly

detection, and root cause identification that focuses on end users’

experience. For Day 0 and Day 1 operations, WAN Assurance also

provides orchestration, administration, and ZTP for SSRs. See the

WAN Assurance Datasheet for more information.

Platform options for the Session Smart Router

SSR100, SSR400, and SSR1000 Series appliances

The SSR series of appliances provide the hardware foundation for

the Juniper AI

‑native SD‑WAN solution:

• The SSR100 line includes small and medium branch platform

to support SD-WAN in distributed locations

• The SSR400 line includes small and medium branch platforms

to support SD-WAN in distributed locations as well, but also

includes integrated Wi-Fi, switching, and 5G

• The SSR1000 line includes platforms for large branch, and

small, medium, large and extra-large data center and campus

deployments

Deployment locations are shown in Table 2, along with links to the

relevant datasheets for more information.

Session Smart Networking Datasheet

2