Quick answer
Classify the SRX1600 as switching and routing apparatus, then review U.S. duty, FCC, origin, sanctions and EAR encryption controls for import and export.
U.S. classification and compliance answer
A Juniper SRX1600 entered with active routing and next-generation firewall functions is best supported in HTSUS 8517.62.0020, switching and routing apparatus, rather than residual 8517.62.0090. The Column 1 General rate is Free; the Column 2 rate shown for the parent provision is 35%. This does not answer Chapter 99, sanctions, origin marking or merchandise-processing fees. Importing an encrypted firewall does not by itself require a BIS import licence, but exporting, reexporting or transferring it requires an EAR classification and destination/end-user analysis.
Product facts and competing tariff lines
The as-entered record should identify SRX1600-AC or SRX1600-DC, Junos release, enabled subscriptions and whether IPsec, SSL/TLS VPN and MACsec are usable. Juniper lists 24 Gbps firewall throughput, 18 Gbps IPsec throughput, up to 2,000 tunnels, routing ports, IPS and advanced threat functions. CBP ruling H301537 explains that 8517.62.0020 reaches apparatus that actually switch or route data; H304471 and H306942 place non-routing communication devices in 8517.62.0090. The product name “firewall” is not enough: routing tables, gateway operation and packet-forwarding evidence should be in the file.
Duty, origin and entry charges
The base duty is Free under the 2026 HTSUS, but landed duty can change with origin and entry date. Check live Chapter 99 measures, including any Section 301 line for China-origin goods, and screen AD/CVD scope by the written order rather than tariff number alone. MPF applies to formal entries and HMF can apply to ocean shipments. Mark the actual country of origin under 19 U.S.C. 1304 and 19 CFR Part 134. Final assembly or firmware loading does not automatically establish origin; retain the component, board-production and substantial-transformation record.
Import controls and FCC evidence
No product-specific federal import licence was confirmed merely because the SRX1600 is a firewall. CBP still requires accurate classification, valuation and marking; UFLPA, 19 U.S.C. 1307, OFAC sanctions and government-procurement restrictions may affect particular supply chains or buyers. The wired base appliance is generally an unintentional radiator and Juniper identifies Class A FCC characteristics; keep the supplier declaration and test report. Any separately installed Wi-Fi, cellular or other intentional-radio module requires its own FCC equipment-authorization review before marketing.
EAR encryption classification and export authorization
BIS identifies firewalls as examples of items whose primary function is information security under ECCN 5A002. A network-infrastructure encryption item may use License Exception ENC under 15 CFR 740.17 only after the required classification request or CCATS process and subject to destination, end-user and reporting conditions. Mass-market treatment cannot be assumed for an enterprise appliance sold with substantial vendor support. Screen the exact hardware, software and cryptographic activation; then check the Commerce Country Chart, Entity List, Military End User restrictions, sanctioned destinations and prohibited end uses before export or reexport.
Documents, entry description and ruling strategy
Keep the contract, commercial invoice, packing list, bill of lading, product photographs, serial and country-of-origin labels, datasheet, port map, routing evidence, encryption matrix, FCC report, ECCN/CCATS, licence-exception analysis, denied-party screening and end-use statement. A proposed entry description is “Enterprise network security appliance with switching/routing, firewall, IPS and IPsec/TLS/MACsec encryption functions, Juniper SRX1600-[AC/DC], new, origin ...”. For recurring imports, request a prospective CBP ruling on 8517.62.0020 with the complete configured sample; a BIS CCATS is separate and does not decide the tariff code.
Official sources and limits
Official sources checked September 14, 2026: USITC HTS, CBP H301537, CBP CROSS, BIS 5A002 encryption controls, License Exception ENC, CCATS guidance and Juniper SRX1600 datasheet. This is conditional guidance, not a CBP ruling or BIS classification.
Editorial note
Prepared by the Global HS Code Checker Editorial Team for customs-classification, tariff and import-policy research. The correct code and applicable measures may change with the merchandise's actual characteristics, jurisdiction, entry date and supporting record. Verify the current tariff, governing measures and competent customs authority before filing an entry. A reviewer is identified only after a named expert has completed the review.