Juniper Networks licensing covers how Juniper Networks, Inc. grants rights to use the software on its routers, switches, firewalls and access points, and in its virtual, container and cloud products. Hewlett Packard Enterprise completed its acquisition of Juniper on 2025-07-02.[13] The juniper.net licensing guides, legal documents and portals remain in use for Juniper products. Juniper describes its licences as the “right to use” its software, and they apply to both hardware and software products.[1] The current model is called Juniper Flex. It sells licences across three groups: high-performance hardware platforms (PTX, MX, QFX, EX, SRX, NFX and ACX), virtual and cloud platforms (vMX, vSRX, cSRX and cRPD), and standalone software and services such as Paragon Automation and the Mist Wi-Fi, Wired and WAN Assurance cloud services.[1] Features are grouped into Standard, Advanced and Premium tiers.[2] Each tier is sold as a perpetual licence bound to a device, or as a term subscription.[1] All of these are governed by the Juniper Purchase and License Agreement (JPLA), which licenses software “for up to the Licensed Units” for internal business operations only.[5] For the general models, see concurrent and device licensing and subscription and consumption licensing.
Editions
Juniper sells feature tiers rather than named product editions. The Flex three-tier model uses these tiers:[2]
| Tier | What it contains (vendor description) | Term on hardware | Term on virtual, cloud and standalone software |
|---|---|---|---|
| Standard | Base feature set | Perpetual, included with the platform | Subscription |
| Advanced | Standard plus Advanced features | Subscription | Subscription |
| Premium | Advanced plus Premium features | Subscription | Subscription |
Some product families split tiers further. SRX firewalls and vSRX sell Advanced 1 to 3 and Premium 1 to 3. The numbered variants differ in the security services they bundle, such as IPS, cloud or on-box antivirus, and ATP Cloud.[11] Several families also sell perpetual Advanced and Premium licences. For example, EX switches are sold perpetually per device class, and MX routers are sold per unit of bandwidth. These are covered in Juniper Flex and Junos feature licensing. Older products still use legacy licences outside the Flex model, such as EFL and AFL switch licences and throughput-based vSRX bundles. Moving from a legacy SKU to a Flex SKU is possible only when a subscription is renewed.[12]
Mist AI is sold as cloud subscriptions: Wireless, Wired, WAN and Access Assurance, Marvis, Premium Analytics, location services and Routing Assurance. Terms are 1, 3 or 5 years, either standalone or in bundles.[16] See Juniper Mist AI subscriptions.
Metrics
The JPLA defines a License Metric as a unit of measurement that restricts use of the software or cloud service. It names Network Element or Node as an example, “or any other metric set forth in a SKU”.[5] The actual metric therefore sits in each SKU. The ones in the retrieved documents are:
| Juniper term | Catalog row | Where it applies |
|---|---|---|
| Chassis-based licence tied to the serial number | Device (chassis serial number) | Perpetual feature and tier licences on SRX, EX, QFX, MX, PTX and ACX[1] |
| Device class | Device class (switch port count) | EX Flex licences and Mist switch and WAN subscriptions |
| Number of vCPUs | vCPU (vSRX) | vSRX Flex SKUs, priced per vCPU core in public cloud with a minimum of 2[11] |
| Bandwidth | Bandwidth (Gbps) | MX Advanced and Premium bandwidth, Scale on Demand, legacy vSRX throughput |
| APs, switches, WAN edges, clients | Access point, Switch, WAN Edge, Active client | Mist cloud subscriptions |
| Concurrent users | Concurrent user (Secure Connect) | Juniper Secure Connect remote access VPN on SRX and vSRX[17] |
| Network Element or Node | Network Element or Node | Management and automation software sold per managed device[5] |
Counting / floors
Perpetual and subscription (as retrieved 2026-09-30). A Juniper perpetual licence is a “Chassis-based license tied to the serial number of the device”.[1] It is not portable except to an RMA replacement, and support is bought separately.[1] A subscription licence is term-based (1, 3 or 5 years), includes customer support, and is portable, but only between like-device classes.[1] Catalog proof: Perpetual licences are tied to the chassis serial number; Subscription licences are portable across like-device classes.
Term and renewal. A subscription term starts on the day Juniper fulfils the licence, not on activation. Initial subscriptions get an extra 30-day grace period.[3] Renewals are not automatic. When a subscription expires, the customer may no longer use the features and scale it granted, although perpetual licences keep working.[1] Catalog proof: Subscription term starts at fulfilment with a 30-day initial grace; Subscriptions do not auto-renew and lapse on expiry.
Enforcement. Soft enforcement is the default. A device without a valid licence triggers event notifications that indicate non-compliance. Hard enforcement applies to only a small number of licences.[3] An unlicensed feature may therefore keep working, so the fact that a feature runs does not show that it is licensed. Catalog proof: Soft enforcement is the default for Juniper licences.
Tier changes. Moving a device from one tier to another, for example from Advanced to Premium, is treated as moving to a different product and needs a new licence.[12] Catalog proof: Changing tier, licence type or delivery model is a new purchase.
Floors. The retrieved documents publish no general minimum purchase. Product-specific minimums include 2 vCPU cores for public-cloud vSRX.[11] Scale on Demand also has hardware-specific software minimums.[6]
Virtualization & partitioning
vSRX is licensed per instance for a vCPU size. vSRX perpetual licences “cannot be moved to a cloud environment”, and new servers need new vSRX SKUs.[11] Legacy vSRX throughput licences can be stacked on one instance but not split across several.[11] The November 2020 EULA sets the same rule for any licence of more than one Licensed Unit.[7] On SRX hardware, each logical or tenant system beyond the three included licences needs its own licence, and in a chassis cluster each node is counted separately. See Juniper vSRX and cSRX licensing and Juniper Flex and Junos feature licensing. For the cross-vendor background, see virtualization and partitioning.
Cloud / BYOL
In public cloud, vSRX supports both Pay-As-You-Go and Bring Your Own License models, priced on the number of vCPU cores.[11] On Oracle Cloud Infrastructure, BYOL licences are bought from Juniper or an authorized reseller.[11] Mist is a Juniper-hosted cloud service. Its subscriptions are tied to a device count rather than to device serial numbers, so no BYOL mapping applies.[10] Moving from an on-premise product to a cloud-hosted SaaS service counts as a new product purchase.[12]
Programs
- Juniper Flex. The three-tier model across hardware, virtual and cloud platforms and standalone software.[1][2]
- Scale on Demand (terms dated November 2023). Scale on Demand was formerly called Pay as You Grow. It is capacity licensing from the Advanced or Premium tiers, priced in proportion to current capacity.[3] Extra capacity that is used before it is bought must be purchased within 90 days. Juniper may audit quarterly.[6]
- Trial and evaluation licenses. Assisted trials come from Juniper account teams and normally run 60 days. Software-only trials come from the Juniper Trials site.[3]
- Support inspection and reinstatement and gray market reinstatement. These policies cover lapsed support and equipment sourced outside authorized channels.[9][8] See Juniper Agile Licensing, transfers and audits.
Contract terms
Governing agreement. The JPLA is made up of General Terms and Conditions, schedules and a glossary. Program terms, policies and descriptive content are incorporated from the Contracts Resources site.[5][15] The Customer Schedule grants a “non-exclusive, revocable, non-transferable” licence for the License Term, up to the Licensed Units, and only if the software was bought from an Approved Source, meaning Juniper or an Authorized Reseller.[5] Operating system software included with hardware may be used only on that hardware or its replacement.[5] Catalog proof: JPLA licence is limited to Licensed Units and internal business use; Operating system software stays with its hardware.
Legacy EULA. The support site still links the generic End User License Agreement (November 2020 Release). Its record-keeping and audit clause lets Juniper request compliance log reports once a year. It also makes a non-compliant licensee pay the audit costs.[7] Catalog proof: EULA 2020: annual compliance log reports and audit costs.
Transfer. The customer may not sublicense, transfer or assign software rights without written authorization, and the agreement itself cannot be assigned without consent.[5] Under the gray market policy, software is licensed only to the original purchaser. A second-hand device needs a Junos re-registration fee before support is reinstated.[8] Catalog proof: Juniper software licences are not transferable; Gray market devices need a new software licence.
Intellectual property. All intellectual property in Juniper Solutions stays with Juniper or its licensors. Any rights the customer acquires in them are assigned to Juniper.[5] Juniper defends third-party patent, copyright and trademark claims against the customer. If the product cannot be kept in use or made non-infringing, Juniper may refund perpetual licences depreciated over five years, or prepaid subscription fees pro rata.[5]
Audits and compliance
JPLA GTC s.12(g) requires the customer to keep accurate records for three years after the agreement ends. The customer must also give Juniper, or its independent auditor, reasonable access to information needed to verify compliance.[5] The Customer Schedule separately requires the customer to track its use of the software and to “True Up any unpurchased use”.[5] Scale on Demand customers carry stricter obligations. They must deploy a Juniper licence tracking mechanism within 90 days and accept quarterly audits. If actual use exceeds reported use by more than 5%, Juniper’s audit costs shift to the customer.[6] Because enforcement is mostly soft, the Juniper Agile Licensing (JAL) portal’s inventory of entitlements and activations is the main record for comparing entitlements with what is deployed. The portal does not show Mist or Session Smart Router entitlements.[4] Catalog proof: JPLA audit: three-year records and access for Juniper or its auditor; Customers must track use and true up unlicensed use; Scale on Demand: quarterly audit and 5% cost-shifting. The general discipline is covered in software license audit and true-up.
Litigation
No lawsuit arising from a Juniper software licence audit of a customer appears in the retrieved Juniper documents. On intellectual property, Juniper brought patent litigation against Palo Alto Networks. Juniper’s general counsel said the suit was brought to protect intellectual property reflected in Juniper’s security products. On 2014-05-28 Juniper announced a settlement under which Palo Alto Networks would pay $75 million in cash and $100 million in shares of common stock and warrants. Both companies agreed to dismiss all patent litigation pending in Delaware and California.[14] For customers, the JPLA’s intellectual property indemnity sets out what a customer can expect if a third party claims that a Juniper product infringes.[5]
Out of scope
- HPE Aruba Networking and other HPE products, including HPE Networking CX switches except where Mist subscriptions cover them.
- Hardware warranties, hardware prices and support service levels. No public Juniper price list was found; the JPLA prices orders from Juniper’s then-current price list.[5]
- Signed enterprise agreements, public-sector addenda and cloud marketplace private offers.
- Product-by-product feature lists. The Juniper Feature Explorer and License Feature Explorer are the authoritative lists.