How Does the Juniper J/SRX Firewall Download Subscription Keys from the Entitlement Server?

Environment:

• Entitlement server
• IDP
• Anti-Virus  / AV
• URL Filtering
• Anti-Spam
• Content-Filtering

In Junos, you can have the J/SRX device download the subscription key from the Entitlement Server.  These subscription keys include, Kaspersky AV, IDP, URL or Web Filtering, and Anti-Spam.  Before you can download these subscription keys, you need the following:

1. DNS configured on the device
2. System clock must be up to date.  Juniper recommends using NTP for most accurate time
3. The device must be able to access the Internet directly.  If the Internet connection is via proxy, it will not work.

To download the key:

Use the command ' request system license update '

root@SRX210> request system license update
Request to automatically update license keys from https://ae1.juniper.net has been sent, use 'show system license' to check status.

When this command is invoked, the device contacts the entitlement server.  The entitlement server looks at the serial number, and checks the contracts associated with this device.  A new subscription key is generated based on the contract for that device.  This new generated key is then pushed onto the Juniper device.

Use the command ' show system license ' to check the status.

2024-10-25: minor non tech changes