JUNIPer SSR120 Session Router User Guide
AI-Driven SD-WAN: Building Networks with Security at Their Core
Unlike a tradiꢀonal SD-WAN soluꢀon, which follows an “allow-
by-default” policy, the AI-driven SD-WAN soluꢀon follows
the principle of “deny-by-default,” which uses a series of
checkpoints to validate legiꢀmate network traffic.
Features and Benefits
• Service-centric, tenant-based security architecture: enables
the SSR to understand sessions and perform vital business
operaꢀons.
• When a packet hits an SSR, the first check is to verify
whether the packet belongs to a tenant.
• Zero trust security: The SSR follows the principle of “deny-
by-default,” which uses a series of checkpoints to validate
legiꢀmate network traffic.
• If the packet does not belong to a tenant, the packet will
be dropped.
• Full network firewall funcꢀonality: ICSA cerꢀfied and PCI
compliant, SSR includes advanced features such as URL
filtering for control of web page access.
• When the packet belongs to a tenant, the next check is to
verify whether it is desꢀned to a service which the tenant
is allowed to access.
• Security at its core: The advanced design of SSR replaces
the tradiꢀonal rouꢀng plane with one built from the ground
up with security principles at its core.
• If the desꢀnaꢀon of the packet does not correspond to any
service within the tenant, the packet will be dropped.
Summary—Zero Trust Security at the
Network Core
• When the desꢀnaꢀon of the packet belongs to a service,
the router examines the context-specific access control list
(ACL) to determine whether the source of the packet is
allowed access to the service.
The AI-driven SD-WAN approach to zero trust security allows
the network to be built around the services it’s meant to
deliver, addressing the cyber threats that target today’s hyper-
connected environments. With naꢀve security controls that
replace obsolete perimeter-based soluꢀons, and integrated
features that would otherwise require an array of middleboxes,
AI-driven SD-WAN helps enterprises protect the assets that are
criꢀcal to their success.
• If the source is denied access to the service, the packet will
be dropped.
• Once the packet passes the preceding checks, the packet
will be forwarded to the next hop toward the desꢀnaꢀon.
Unless an enterprise explicitly allows a session to cross the
network, the SSR will drop all packets belonging to a session
that does not clear the series of checkpoints. While performing
the series of checks for every packet, the SSR maintains the rate
of traffic speed to match the line rate.
Next Steps
To find out more about the Juniper AI-driven SD-WAN soluꢀon,
please contact your Juniper account representaꢀve and go to
3
| General | Details |
|---|---|
| Name | JUNIPer SSR120 Session Router User Guide |
| Make | JUNIPer |
| Language | English |
| Filetype | PDF (Download) |
| File size | 0.25 MB |
If you have any questions regarding JUNIPer SSR120 Session Router User Guide, please ask here and describe the problem in detail.

JUNIPER SSR1300 Session Router User Guide

JUNIPER SSR1400 Session Router User Guide

JuniPer Cloud-Ready SSR1500 Session Router User Guide

JUniPer MX304 Universal Router User Guide

JUNIPer SSR120 Session Smart Router User Guide

JUNIPER SSR1400 Session Smart Router User Guide

JUNIPER SSR1300 Session Smart Router User Guide

JuniPer Cloud-Ready SSR1500 Session Smart Router User Guide

JuniPer ACX7024 Cloud Metro Router User Guide

Juniper ACX7509 Cloud Metro Router User Guide

















