Juniper WAN Assurance Datasheet

Know exactly how SSRs or SRX Series Firewalls are performing with metrics and insights down to the port level. These include CPU, memory utilization, bytes transferred, traffic utilization, and power draw. WAN Assurance also logs gateway events like configuration changes and system alerts. WAN and IPsec utilization insights tell you how much traffic traverses your encrypted tunnel versus your local breakout. You also gain visibility into per-user and per-application performance and experiences (Figure 3).

The Congestion SLE lets operators know if their network interfaces are being overutilized and causing poor user experience. With App Routing Insights, operators can figure out what is disproportionally using bandwidth and the best way to remediate the problem. Options could be to purchase more bandwidth, adjust capacity planning, or throttle certain traffic types (Figure 4).

Dynamic packet capture (dPCAP) gives operators insights on how to shorten MTTR and easily search for needle-in-a-haystack issues. Instead of recreating issues on the network to capture the right packets, Marvis AI will notice when an issue is occurring and automatically capture the appropriate packets for analysis.

Marvis AI Assistant moves IT operations closer to the Self-Driving Network^™ with simplified troubleshooting and performance analysis for helpdesk staff and network administrators.

Marvis Actions is a one-stop information center that provides visibility into site-wide network issues that need immediate attention. Use Marvis Actions to find issues affecting user experience and get recommendations into resolutions (Figure 5).

The Marvis Conversational Interface service allows IT teams to quickly get answers to troubleshooting questions. Simply ask a question in natural language, such as, “Why is my user’s video call experience bad?” and Marvis AI Assistant will provide recommendations to improve those experiences. Figure 6 shows Marvis AI Assistant informing IT of a WAN issue causing the CEO to have a poor video call experience.

Marvis Minis perform automated speed tests that give enterprises the ability to see if they are getting the full bandwidth that they purchased. Even when users aren’t present, operators are alerted to upstream network issues. This gives operators the opportunity to work on resolving issues before end users show up to the office.

In addition to providing AIOps for Day 2 operations, WAN Assurance delivers life cycle management and operations. This includes Day 0 and Day 1 operations for the Juniper AI‑native SD‑WAN solution with Session Smart Routers that fuel an advanced, service‑centric networking solution. Session Smart technology delivers an experience‑based SD‑WAN with deep session visibility and insights and fine‑grained session control. Its tunnel‑free approach enables agile, secure, and resilient WAN connectivity with breakthrough economics and simplicity. operations, WAN Assurance delivers life cycle management and operations. This includes Day 0 and Day 1 operations for the Juniper AI‑native SD‑WAN solution with Session Smart Routers that fuel an advanced, service‑centric networking solution. Session Smart technology delivers an experience‑based SD‑WAN with deep session visibility and insights and fine‑grained session control. Its tunnel‑free approach enables agile, secure, and resilient WAN connectivity with breakthrough economics and simplicity.

With WAN Assurance, IT teams can onboard, configure, and deploy SSRs and SRX Series Firewalls with operations such as:

• Zero Touch Provisioning (ZTP) and easy onboarding with Mist Claim Code
• Easy templating for rapid scale deployments
• Path and peering preferences
• Service and application policies
• Security policies
• Network and NAT configuration

Session Smart Routers are available on dedicated appliances (Table 1).

The hardware datasheets provide standard specifications such as interface options, number of interfaces, encrypted throughput, memory, and hard drive capacity.

SSRs are also available in other form factors, including certified white boxes (see the Session Smart Routing datasheet) or the Juniper^® NFX Series Network Services Platforms.

WAN Assurance also supports the following SRX Series Firewalls when deployed as WAN gateways:

• vSRX
• SRX 300
• SRX 320
• SRX 340
• SRX 345
• SRX 380
• SRX 1500
• SRX 1600
• SRX 2300
• SRX 4100
• SRX 4200
• SRX 4300
• SRX 4600

When choosing a WAN edge platform within Juniper WAN Assurance, SSRs are generally recommended for their efficiency in network utilization, quick failover, rich telemetry, and integrated security, leveraging Secure Vector Routing and AI‑enhanced cloud management.

However, for networks already using Juniper's SRX Series Firewalls, integrating these with Mist enhances their capabilities and offers a more gradual transition to SD‑WAN. This enables immediate AI and cloud management benefits while accommodating familiar environments.

Additionally, organizations can configure their security capabilities directly on the SSR and/or the SRX through Mist.

Ultimately, the choice between SSR and SRX should align with your specific needs and goals, ensuring a seamless integration with Mist.

The SSR400 line of routers offers a “Branch in a box” solution. It consolidates multiple branch functions, including Wi-Fi, switching, SD-WAN, and security into a single, unified, and easy-to-manage platform. This simplifies operations by eliminating the need to deploy and manage a complex array of separate devices from various vendors, significantly reducing a branch's physical footprint and lowering its total cost of ownership.

Session Smart Router’s Advanced Security Pack (Figure 7) integrates further security functionality into the routing fabric:

• URL filtering prevents access to and from specific sites and to meet special business requirements
• An Intrusion Detection and Prevention System (IDS/IPS) protects against advanced malicious attacks

These features eliminate the need for additional security appliances at the branch, providing this enhanced functionality within the Mist ecosystem of wired, wireless, and SD‑WAN. If more cloud‑integrated security is needed, customers have can add Juniper Secure Edge to the environment.

When it comes to your network security, we want to help you on your terms. You can install the Advanced Security Pack standalone or alongside a Juniper SRX Series Firewall at your branch or data center.

The Advanced Security Pack can also be used to help you with your SASE Journey, giving you protection in the branch or data center before easily offloading that traffic to an SSE such as Juniper Secure Edge.

WAN Assurance is a key component of the Risk Profiling solution that brings network security to the distributed network edge. Risk Profiling provides visibility into infected wired or wireless clients that’s observable within the cloud and assigns a threat score determined by the Juniper ATP cloud. From within the cloud, you can geospatially locate infected devices and take one‑touch mitigation actions like ban or deauthenticate.

Juniper Networks is leading the convergence of AI and networking. Juniper’s Mist^™ AI-native networking platform is purpose-built to run AI workloads and simplify IT operations assuring exceptional secure user and application experiences—from the edge, to the data center, to the cloud. Additional information can be found at www.juniper.net, X, LinkedIn, and Facebook.

1000696 - 007 - EN SEPTEMBER 2025