Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

SRX Getting Started - Install license for Antivirus, Web Filter, IDP, or Antispam



Article ID: KB16675 KB Last Updated: 07 Dec 2020Version: 11.0

This article describes the steps involved in installing a license for Antivirus, Web Filter (URL Filter), IDP or Antispam on a SRX device.

For other topics, go to the SRX Getting Started main page.


Install subscription license.


The following features require a subscription license:

  • Antivirus
  • Web Filter
  • IDP
  • Antispam

The high memory system option is also required to use these features. UTM is not supported on the low memory version.  For ordering information, refer to the SRX datasheet.  

The instructions for installing the subscription licence via the CLI are documented below.  For J-Web instructions, refer to the Technical Documentation link below.

Install Subscription License

Perform the following steps to activate, install, and verify the subscription license:

  1. First, activate your subscription license by entering the activation code and chassis serial number into the Juniper Agile Licensing (JAL) Portal system. Refer to KB9731 - [Junos] Subscription - Register and Install for more information. If you still need help, please contact Customer Care for subscription and licensing issues.

  2. Then, install the license on the SRX in one of two ways -- automatically or manually:

    a. Automatically:  

    Confirm the SRX device has connectivity to the Internet and DNS configured.  Then run the following command to request the license from the License Management Server and install it:

     root> request system license update          

    (The output of the command show configuration system license displays the default URL for the License Management Server.)


    b. Manually

    Licenses can also be loaded manually via JWeb, NSM, or using the CLI. The CLI command is as follows:

    root> request system license add terminal
    [Type ^D at a new line to end input,
    enter blank line between each license key]

    Paste the license key and press enter
    Type Ctrl+D

    The License key should be added successfully.

  3. Verify the license is installed using the command:
    root> show system license 
    License usage: 
                                     Licenses     Licenses    Licenses    Expiry
      Feature name                       used    installed      needed 
      av_key_kaspersky_engine               0            1           0    2013-03-06 01:00:00 CET
      anti_spam_key_sbl                     1            0           1    25 days
      wf_key_surfcontrol_cpa                1            0           1    25 days
    • SRX Branch platforms support three different Anti-Virus types. For Antivirus-Express engine and Kaspersky engine look for the feature name "av_key_kaspersky_engine".   For Sophos engine, look for the feature name "av_key_sophos_engine".

    • Note: Sophos Antivirus is supported from Junos 11.1 onwards. The Antivirus Express feature is not supported on SRX100 and SRX110 platforms. 

    • SRX Branch platform supports three different Web-Filter (URL Filtering) types. For Integrated Web Filtering look for the feature name "wf_key_surfcontrol_cpa". For Enhanced Web Filtering, look for the feature name "wf_key_websense_ewf ". The Redirect Web filtering feature does not need a license on the SRX. 

    • For IDP, look for feature 'idp-sig'.  

    • For Antispam, look for feature "anti_spam_key_sbl"

NOTE: If running a Chassis Cluster, then the license needs to be installed on both nodes.

Trial licenses are available and valid for 4 weeks; you can only fetch a trial license once per year for each device serial number. Use the command:    request system license update trial

Technical Documentation

Administration Guide for Security Devices - See the section 'Licenses'

Installation and Upgrade Guide for Security Devices - See the section 'Licenses' 

Tip:  After installing the licenses, refer to the following 'getting started' articles for configuration help and technical documentation links:

Modification History:
2018-12-04:  Changed Authorization Code to Activation Code and updated the name of referenced KB9731 to [Junos] Subscription - Register and Install
2018-06-26:  Updated link to Juniper Agile Licensing (JAL) Portal

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search