SSR400 Line of Routers Datasheet
Download DatasheetProduct overview
Networks today require powerful, secure, and easily manageable connectivity for distributed branches. The Juniper SSR400 is an AI-native Session Smart Router that consolidates routing, SD-WAN, and next-generation firewall capabilities into a single, compact, fanless device. This all-in-one solution simplifies IT operations, accelerates deployment, and ensures a secure, high-performance experience, all managed via the Mist cloud.
Product description
The modern enterprise demands more from its network. It needs powerful, secure, and easily manageable connectivity that can keep pace with the demands of cloud-enabled applications and a distributed workforce. Legacy routers and tunnel-based SD-WAN solutions are no longer up to the task, creating complexity and compromising performance. The Juniper SSR400 challenges this status quo.
Juniper Session Smart Routers provide the foundation for Juniper AI-native SD-WAN. They enable enterprises to build service-centric fabrics that connect users to applications with unparalleled efficiency. When deployed at branch offices the SSR400 Router, provides a service-centric control plane and a service-aware data plane. The router offers robust IP routing, a fully featured policy engine, and proactive analytics. The result is a next-generation SD-WAN solution that lets you fundamentally reimagine branch networking.
Uncompromising security
The SSR400 is built on a Zero Trust SD-WAN architecture. It includes a full-fledged next-generation firewall (NGFW) with deny-by-default access controls and military-grade encryption that protects against threats from the first packet. This unified security fabric goes beyond the limitations of add-on security solutions. It simplifies operations while delivering the protection modern enterprises demand.
Revolutionary performance and efficiency
The SSR400 harnesses the power of Session Smart™ Technology, which eliminates the need for complex, inefficient tunnels. Eliminating the tunnel-based approach lets the router deliver a more efficient service fabric that offers intelligent, sub-second traffic rerouting. This provides superior performance and ensures a quick boot-up time of under two minutes for rapid traffic recovery after an outage.
Proactive AI-native operations
The SSR400 is driven by Marvis® AI, transforming network management from reactive to proactive. It leverages AI Forensics to deliver unparalleled visibility into service level experiences (SLEs) and provide automated root cause analysis. The SSR400 can identify over 8,500 applications and ensure each one gets the performance it needs. This intelligent automation dramatically reduces operational overhead and the need for manual troubleshooting.
Streamlined simplicity
Designed with the “Branch in a Box” concept in mind, the SSR400 is a compact, fanless device ideal for quiet, small branch and retail locations. Its physical simplicity is matched by its operational elegance. With flexible templates, automated Zero Touch Provisioning (ZTP), and centralized management from the Juniper Mist™ cloud, it dramatically simplifies deployment and ongoing management.
Architecture and key components
By combining the AI-native intelligence of Juniper® WAN Assurance with the Session Smart Router, enterprises gain industry-leading automation and insight to ensure the best user, device, and application experiences in their branch and remote locations. The Juniper WAN Assurance cloud service simplifies operations, provides superior visibility into end user experiences, and reduces the mean time to repair for SD-WAN issues.
The Juniper Networks SSR400 line of routers provides the hardware foundation for this service-centric fabric. These appliances feature a service-centric control plane and service-aware data plane that offer robust IP routing, a feature-rich policy management engine, improved visibility, and proactive analytics. This architecture moves beyond the limitations of traditional, tunnel-based solutions by delivering a single, unified platform for powerful and secure connectivity.
SSR400 fixed configuration appliances
The fixed configuration appliances in the SSR400 line are designed for a variety of branch sizes:
- The SSR400: Ideal for small branches and retail locations
- The SSR440: Designed to serve the needs of medium-sized branches
These appliances run the FIPS 140-3 Level 2 compliant Session Smart Router software, which provides secure and resilient WAN connectivity as a core component of the Juniper AI-native SD-WAN solution.
Juniper WAN Assurance
WAN Assurance is a cloud service that brings AI-native automation and service levels to Juniper SSR SD-WAN routers, complementing the Juniper AI-native SD-WAN solution. WAN Assurance transforms IT operations from reactive troubleshooting to proactive
- SSR Series SD-WAN routers, deployed as secure SD-WAN edge devices, deliver the rich streaming telemetry that provides the insights needed for WAN health metrics and anomaly detection. This data is leveraged within the Mist cloud and Marvis AI engine, driving simpler operations, reducing mean time to repair (MTTR), and providing greater visibility into end user experiences.
- Insights derived from SSR Series SD-WAN gateway telemetry data allow WAN Assurance to compute unique “User Minutes” that indicate whether users are having a good experience.
- Marvis® AI Assistant for WAN allows you to ask direct questions like, “Why is my Zoom call bad?” and provides complete insights, correlation, and actions.
- Marvis Actions identify and summarize issues such as application latency conditions, congested WAN circuits, or negotiation mismatches.
For detailed features and benefits of Juniper Mist WAN Assurance, see the WAN Assurance datasheet.
Simplifying branch deployments (secure connectivity/SD-WAN)
SSR400 Routers deliver fully automated SD-WAN to both enterprises and service providers.
- Configuration templates and ZTP features simplify branch network connectivity for initial deployment and ongoing management.
- SSR400 line of SD-WAN routers offer best-in-class secure connectivity.
- The SSR400 line of SD-WAN routers efficiently utilize multiple links and load balance traffic across the enterprise WAN, blending traditional MPLS with other connectivity options such as broadband internet, leased lines, 5G/LTE, and more. Policy- and application-based forwarding capabilities enforce business rules created by the enterprise to steer application traffic toward a preferred path.
Features and benefits
Category | Features |
System and network services | SNAT/DNAT, destination NAPT, shared NAT pool, IPv4/IPv6, DHCP client, DHCP relay, DHCP server, DHCP server extensions, DHCPv6 PD, DNS client, PPPoE, Proxy ARP, NAT traversal, BFD, inline flow performance monitoring, extended firewall pinhole, path MTU discovery, MSS auto adjust, DSCP based service identification for IPsec |
Advanced services | Secure Vector Routing (SVR), Multipoint SVR, IPv6 SVR, overlapping IP service segmentation, Ethernet over SVR, application identification |
Routing | Service based routing, static routing, BGPv4, BGP route reflector, BGP graceful restart, BGP over SVR, BGP route map, BGP prefix list, OSPFv2, BGP VRF, OSPF VRF |
Traffic engineering | Traffic scheduling and shaping, flow policing and shaping, packet marking (DiffServ), service rate limiting |
Network firewall | Distributed stateful firewall, distributed and automated access control, fine-grained segmentation/tenancy, ICSA network firewall certified, ICMP blackhole |
IDS/IPS and URL filtering | Intrusion Detection System/ Intrusion Prevention System (IDS/IPS) and URL filtering capabilities are available through the Advanced Security Pack. |
Secure edge connectors | Seamless connections to Juniper Secure Edge or third-party SSE. |
Application identification | HTTP/S domain-based identification, O365 identification, DNS based identification, application categorization |
Session encryption | Session metrics, network metrics, LTE metrics, peer path SLA, MOS score, session analytics, SSL/TLS metrics, session IPFIX records Session Payload Encryption (AES-256, AES-128), session/route authentication (HMAC-SHA1, HMAC-SHA256, HMAC-SHA-256-128), adaptive encryption, rekeying, FIPS 140-3 validated, enhanced replay attack protection, transport-based encryption Path selection, (SLA, MoS, average latency), load balancing using proportional and hunt, session migration, session duplication, session duplication for non-SVR, session duplication for inter-node links, MOS for VoIP, Path of last resort, session optimization, session reliability, service health learning, service route redundancy |
Monitoring | Monitoring agent, SNMPv2, Syslog, audit logs |
Management and remote access | GUI, CLI, REST, remote access over SVR (LTE), upgrade rollback, Zero Touch provisioning, remote service packet capture, user-defined configuration templates, role-based access control |
AAA | Local registry, LDAP |
Specifications
Hardware specifications
Specification | SSR400 | SSR400-C | SSR400-W-US | SSR400-CW-US | SSR400-W-WW |
Connectivity | |||||
Total onboard ports | 10x1GbE | 10x1GbE | 10x1GbE | 10x1GbE | 10x1GbE |
Onboard RJ-45 ports | 8x1GbE | 8x1GbE | 8x1GbE | 8x1GbE | 8x1GbE |
Onboard small form-factor pluggable (SFP) transceiver ports | 2x1GbE | 2x1GbE | 2x1GbE | 2x1GbE | 2x1GbE |
MACsec capable ports | 10x1GbE | 10x1GbE | 10x1GbE | 10x1GbE | 10x1GbE |
Console (USB-C) | 1 | 1 | 1 | 1 | 1 |
USB ports (type C) | 1 | 1 | 1 | 1 | 1 |
PoE+ ports | 2 | 2 | 2 | 2 | 2 |
Wi-Fi / Cellular | N/A | 5G/LTE | 802.11ax – U.S. only | 5G/LTE and 802.11ax – U.S. only | 802.11ax – Worldwide (outside U.S.) |
Dimensions and power | |||||
Form factor | Desktop | Desktop | Desktop | Desktop | Desktop |
Size (WxHxD) | 11.81 x 1.3 x 7.52 in. (30.00 x 3.30 x 19.10 cm) | 11.81 x 1.3 x 7.52 in. (30.00 x 3.30 x 19.10 cm) | 11.81 x 1.3 x 7.52 in. (30.00 x 3.30 x 19.10 cm) | 11.81 x 1.3 x 7.52 in. (30.00 x 3.30 x 19.10 cm) | 11.81 x 1.3 x 7.52 in. (30.00 x 3.30 x 19.10 cm) |
Redundant PSU | No | No | No | No | No |
Power supply | AC (external) | AC (external) | AC (external) | AC (external) | AC (external) |
Maximum PoE power | 60 W | 60 W | 60 W | 60 W | 60 W |
Airflow/cooling | Fanless | Fanless | Fanless | Fanless | Fanless |
Specification | SSR400-CW-WW | SSR440 | SSR440-2AC | SSR440-C | SSR440-C-2AC |
Connectivity | |||||
Total onboard ports | 10x1GbE | 10x1GbE | 10x1GbE | 10x1GbE | 10x1GbE |
Onboard RJ-45 ports | 8x1GbE | 8x1GbE | 8x1GbE | 8x1GbE | 8x1GbE |
Onboard small form-factor pluggable (SFP) transceiver ports | 2x1GbE | 2x1GbE | 2x1GbE | 2x1GbE | 2x1GbE |
MACsec capable ports | 10x1GbE | 10x1GbE | 10x1GbE | 10x1GbE | 10x1GbE |
Console (USB-C) | 1 | 1 | 1 | 1 | 1 |
USB ports (type C) | 1 | 1 | 1 | 1 | 1 |
PoE+ ports | 2 | 2 | 2 | 2 | 2 |
Wi-Fi / Cellular | 5G/LTE and 802.11ax – Worldwide (outside US) | N/A | N/A | 5G/LTE | 5G/LTE |
Form factor | Desktop | Desktop | Desktop | Desktop | Desktop |
Size (WxHxD) | 11.81 x 1.3 x 7.52 in. (30.00 x 3.30 x 19.10 cm) | 11.81 x 1.3 x 7.52 in. (30.00 x 3.30 x 19.10 cm) | 11.81 x 1.3 x 7.52 in. (30.00 x 3.30 x 19.10 cm) | 11.81 x 1.3 x 7.52 in. (30.00 x 3.30 x 19.10 cm) | 11.81 x 1.3 x 7.52 in. (30.00 x 3.30 x 19.10 cm) |
Redundant PSU | No | No | No | No | No |
Power supply | AC (external) | AC (external) | 2 x redundant AC (external) | AC (external) | 2 x redundant AC (external) |
Maximum PoE power | 60 W | 60 W | 60 W | 60 W | 60 W |
Airflow/cooling | Fanless | Fanless | Fanless | Fanless | Fanless |
About Juniper Networks
Juniper Networks is leading the convergence of AI and networking. Mist™, Juniper’s AI-native networking platform, is purpose-built to run AI workloads and simplify IT operations, assuring exceptional and secure user and application experiences—from the edge to the data center to the cloud. Additional information can be found at www.juniper.net, X, LinkedIn, and Facebook.
1000811 - 001 - EN SEPTEMBER 2025