The Juniper Networks Session Smart Router (SSR) Series, including the SSR1200 model, powers Juniper’s AI-native SD-WAN solution designed to deliver exceptional user experiences. Built on an application-aware and Zero Trust secure network fabric, the SSR1200 meets stringent enterprise performance, security, and availability requirements.
The SSR1200 overcomes inefficiencies of conventional solutions with a tunnel-free architecture using Secure Vector Routing (SVR), enabling improved application performance, rapid scalability to thousands of sites, and inherent Zero Trust access policies. It supports diverse use cases such as SD-WAN, SD-Branch, multicloud, and IoT, scaling from small branches to high-capacity edge routers and hyper-scale data centers.
Key Architecture and Capabilities
The SSR1200 features a service-centric control plane and session-aware data plane, providing IP routing, robust policy management, enhanced visibility, and proactive analytics. Native Zero Trust security leverages hypersegmentation with service-centric, tenant-based architecture that secures connectivity based on user, application, and location. It follows a deny-by-default principle with checkpoints for traffic validation.
Deployment Flexibility
The SSR1200 is part of the SSR1000 series, suited for large branch or small data center/campus deployments with 10 Gbps maximum unencrypted throughput. It runs on dedicated appliances, certified white box platforms, Juniper NFX Series Network Services Platforms as VNFs using VirtIO and SRIOV, bare metal x86 servers, KVM, VMware ESXi, OpenStack, AWS, Azure, and Google Cloud.
Management options include the Session Smart Conductor for centralized orchestration, administration, ZTP, monitoring, and analytics, or the Mist cloud platform with Juniper WAN Assurance for full lifecycle management, AI-native insights, automated speed tests, dynamic packet capture, anomaly detection, and root cause analysis focused on user experience.
Advanced Security Pack
The optional Advanced Security Pack integrates URL filtering to block specific sites and IDS/IPS for protection against advanced threats directly into the routing fabric. It eliminates needs for additional branch appliances and supports SASE journeys by offloading to Secure Edge SSE. Compatible standalone or alongside SRX Series Firewalls.
Branch in a Box with SSR400 Series
Related SSR400 series offers consolidated Wi-Fi, switching, SD-WAN, and security in a single platform, reducing footprint and TCO, though SSR1200 focuses on higher-capacity routing.