Data Sheet

JUNIPER SECURE CONNECT

Product Description
Organizations are growing increasingly distributed, driven largely by work-from-home
initiatives, branch expansion, and growth of temporary pop-up sites. Securing this
distributed traffic requires deep network visibility and the ability to enforce policy at every
connection point—capabilities that separate secure SD-WANs from traditional network
access methods.
Juniper® Secure Connect allows organizations to provide secure end-user access across
Product Overview
their WAN fabrics. Working with Juniper Networks SRX Series Services Gateways as the
Juniper Secure Connect is a head-end SSL VPN and IPsec termination point, deployed on campus, in a data center, or in
highly flexible SSL VPN the cloud, Juniper Secure Connect enables secure access to vital resources from user
application that gives remote devices running Windows, MacOS, iOS, and Android. To simplify deployment of Juniper
workers secure access to Secure Connect, the client application ensures that the most current policy is being used,
corporate and cloud resources, with no end-user or admin interaction required to reduce deployment time and ongoing
providing reliable connectivity troubleshooting.
and consistent security to any
Architecture and Key Components
device, anywhere. Juniper
Secure Connect is available for Offered as an add-on license for SRX Series Services Gateways, Juniper Secure Connect
desktop and mobile devices provides secure access for users who need remote access to protected resources across
including Windows, Mac OS, the Internet from wherever they happen to be. SRX Series Services Gateways are available
Android, and iOS. When as physical appliances as well as in virtualized and containerized form factors, providing the
combined with the SRX Series connectivity and network security required for organizations to build a secure SD-WAN
Services Gateways, it helps fabric.
organizations quickly achieve
optimal performance and The Juniper Secure Connect application offers additional features that increase security
connectivity from client to and usability. These features include multifactor and biometric authentication, automatic
cloud, reducing risk by extending policy validation before a connection is established, and Windows pre-domain logon to
visibility and enforcement to ensure that the Windows devices are validated and update the latest Active Directory
users and devices, wherever Group Policy during logon.
they are.
Security policies can be applied to devices operating outside the corporate network via
Juniper Secure Connect, treating the traffic as if it were untrusted. Juniper Networks
AppSecure, intrusion prevention system (IPS), content security, and advanced threat
detection policies configured on SRX Series firewalls are extended to these remote devices,
ensuring that consistent security is applied to all points of presence, wherever they are
located, and providing the appropriate level of secure access for every type of connection.

1
 Juniper Secure Connect

This consistent security policy application allows users to be part of Data flows can be identified by application, user, IP address, and
a larger secure SD-WAN fabric that empowers organizations to URL, allowing IT teams to prioritize or more deeply inspect some of
deliver reliable connectivity and threat protection to and from those data flows. Individual data flows can also be routed
branch offices, temporary pop-up sites, and home offices, as well as independently where multiple WAN fabric access options exist.
employees operating remotely from within other networks such as This flexibility allows Juniper secure SD-WANs to reduce both
those at hotels or conferences. Juniper secure SD-WANs allow capital costs and administrative overhead compared to traditional
traffic management and security policies to be applied on a per-data WAN access, while providing the security needed to handle both
flow basis. known and unknown threats. With Juniper Secure Connect, policy
can be set to require all traffic to be routed through the VPN
connection or configured to support split tunneling, ensuring that
traffic can take the best and most secure path.

Features and Benefits

Feature Description Benefit
Available for desktop and Juniper Secure Connect is available for Windows, MacOS, iOS, and Android operating Provides flexible and secure access for managed and unmanaged
mobile devices systems. devices.
Zero-touch configuration Juniper Secure Connect uses a secure and automatic validation of the most current policy, Offers an always up-to-date security policy, ensuring users stay
making sure users always get the correct security policy enforced. secure and get access to the correct resources at any time.
Multifactor and biometric To increase security, Juniper Secure Connect supports multifactor authentication from Improves corporate security by leveraging a second form of
authentication authentication for remote users.
industry-leading multifactor authentication (MFA) solutions.
It also supports integrated biometric authentication on devices with the hardware support.
Comprehensive security and User access coming via Juniper Secure Connect must be subject to IPS, Juniper Advanced Reduces risk and provides the necessary visibility to ensure that
visibility Threat Prevention, and advanced security to identify and block unknown and known threats remote access users are not introducing known or unknown
that originate from non-corporate networks. threats.

Specifications
Features Windows MacOS iOS Android
OS versions 10.x or higher 10.13, 10.14, 10.15 9.3 or higher 4.4 or higher
Next-generation cryptography Yes
Client SSL VPN Yes
Dead peer detection (DPD) Yes
Split tunneling Yes
Multifactor authentication (MFA) Yes
Biometric authentication Yes
Zero-touch app configuration Yes
Windows pre-domain logon Yes No No No
Juniper Secure Connect license and support duration 1 or 3 years

2
 Juniper Secure Connect

Table 1. SRX Series Concurrent Users Supported Product Number Description

SRX Series Firewall Model Concurrent Remote Access/SSL VPN Users Supported S-RA3-250CCU-S-1 SW, Remote Access VPN - Juniper, 250 Concurrent Users, Standard,
with SW support, 1 Year
SRX300 Services Gateway 25
S-RA3-500CCU-S-1 SW, Remote Access VPN - Juniper, 500 Concurrent Users, Standard,
SRX320 Services Gateway 50
with SW support, 1 Year
SRX340 Services Gateway 150
S-RA3-1KCCU-S-1 SW, Remote Access VPN - Juniper, 1000 Concurrent Users, Standard,
SRX345 Services Gateway 250 with SW support, 1 Year

SRX380 Services Gateway 500 S-RA3-5KCCU-S-1 SW, Remote Access VPN - Juniper, 5000 Concurrent Users, Standard,
with SW support, 1 Year
SRX550M Services Gateway 500
S-RA3-SRX300-S-3 SW, Remote Access VPN - Juniper, 25 Concurrent Users, Standard,
SRX1500 Services Gateway 2000 with SW support, 3 Year
SRX4100 Services Gateway 7500 S-RA3-SRX320-S-3 SW, Remote Access VPN - Juniper, 50 Concurrent Users, Standard,
SRX4200 Services Gateway 7500 with SW support, 3 Year

SRX4600 Services Gateway 7500 S-RA3-SRX340-S-3 SW, Remote Access VPN - Juniper, 150 Concurrent Users, Standard,
with SW support, 3 Year
SRX5400 Services Gateway 25,000
S-RA3-SRX345-S-3 SW, Remote Access VPN - Juniper, 250 Concurrent Users, Standard,
SRX5600 Services Gateway 40,000 with SW support, 3 Year
SRX5800 Services Gateway 50,000 S-RA3-SRX380-S-3 SW, Remote Access VPN - Juniper, 500 Concurrent Users, Standard,
with SW support, 3 Year
vSRX Virtual Firewall 500
S-RA3-5CCU-S-3 SW, Remote Access VPN - Juniper, 5 Concurrent Users, Standard, with
SW support, 3 Year
Ordering Information
S-RA3-25CCU-S-3 SW, Remote Access VPN - Juniper, 25 Concurrent Users, Standard,
To order Juniper Secure Connect, and to access software licensing with SW support, 3 Year

information, please visit the How to Buy page on www.juniper.net. S-RA3-50CCU-S-3 SW, Remote Access VPN - Juniper, 50 Concurrent Users, Standard,
with SW support, 3 Year
The Juniper Secure Connect licenses below are stackable and S-RA3-100CCU-S-3 SW, Remote Access VPN - Juniper, 100 Concurrent Users, Standard,
license usage is based on current users connected to the head-end with SW support, 3 Year

SRX Series firewall. S-RA3-250CCU-S-3 SW, Remote Access VPN - Juniper, 250 Concurrent Users, Standard,
with SW support, 3 Year

Product Number Description S-RA3-500CCU-S-3 SW, Remote Access VPN - Juniper, 500 Concurrent Users, Standard,
with SW support, 3 Year
S-RA3-SRX300-S-1 SW, Remote Access VPN - Juniper, 25 Concurrent Users, Standard,
with SW support, 1 Year S-RA3-1KCCU-S-3 SW, Remote Access VPN - Juniper, 1000 Concurrent Users, Standard,
with SW support, 3 Year
S-RA3-SRX320-S-1 SW, Remote Access VPN - Juniper, 50 Concurrent Users, Standard,
with SW support, 1 Year S-RA3-5KCCU-S-3 SW, Remote Access VPN - Juniper, 5000 Concurrent Users, Standard,
with SW support, 3 Year
S-RA3-SRX340-S-1 SW, Remote Access VPN - Juniper, 150 Concurrent Users, Standard,
with SW support, 1 Year
S-RA3-SRX345-S-1 SW, Remote Access VPN - Juniper, 250 Concurrent Users, Standard,
About Juniper Networks
with SW support, 1 Year
Juniper Networks brings simplicity to networking with products,
S-RA3-SRX380-S-1 SW, Remote Access VPN - Juniper, 500 Concurrent Users, Standard,
with SW support, 1 Year solutions, and services that connect the world. Through engineering
S-RA3-5CCU-S-1 SW, Remote Access VPN - Juniper, 5 Concurrent Users, Standard, with innovation, we remove the constraints and complexities of
SW support, 1 Year
networking in the cloud era to solve the toughest challenges our
S-RA3-25CCU-S-1 SW, Remote Access VPN - Juniper, 25 Concurrent Users, Standard,
with SW support, 1 Year customers and partners face daily. At Juniper Networks, we believe
S-RA3-50CCU-S-1 SW, Remote Access VPN - Juniper, 50 Concurrent Users, Standard, that the network is a resource for sharing knowledge and human
with SW support, 1 Year
advancement that changes the world. We are committed to
S-RA3-100CCU-S-1 SW, Remote Access VPN - Juniper, 100 Concurrent Users, Standard,
with SW support, 1 Year imagining groundbreaking ways to deliver automated, scalable, and
secure networks to move at the speed of business.

Corporate and Sales Headquarters APAC and EMEA Headquarters

Juniper Networks, Inc. Juniper Networks International B.V. Boeing

1133 Innovation Way Avenue 240 1119 PZ Schiphol-Rijk

Sunnyvale, CA 94089 USA Amsterdam, The Netherlands

Phone: 888.JUNIPER (888.586.4737) Phone: +31.0.207.125.700

or +1.408.745.2000

www.juniper.net

Copyright 2020 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United
States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no
responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

1000682-001-EN Oct 2020 3