EU customs and compliance answer
A configured Juniper SRX1600 that receives, converts, transmits and routes network data is supported in CN 8517 62 00. The conventional third-country customs duty for this information-technology line is generally 0%, but the declarant must verify TARIC on the acceptance date for origin-specific measures. Import release does not establish EU product compliance. The importer must separately address CE/EMC, RoHS and, where applicable, low-voltage or radio requirements; exports require a Category 5 Part 2 encryption assessment.
Classification and technical evidence
Identify SRX1600-AC/DC, Junos version, subscriptions, ports, routing, IPS, IPsec, SSL VPN and MACsec as placed on the market. Juniper states 24 Gbps firewall and 18 Gbps IPsec throughput with up to 2,000 tunnels. Under GIR 1 and 6, objective switching/routing and data-transmission functions support heading 8517. A computer heading is not preferred merely because the appliance has a CPU, and residual electrical machinery is displaced by the specific communications heading. Seek BTI where the configuration or recurring value justifies certainty.
TARIC duty, origin and import VAT
Check the ten-digit TARIC code, third-country duty, preferences, sanctions and trade-defence measures on the declaration date. Preferential duty needs qualifying origin and proof; shipment from an FTA partner is insufficient. Import VAT is charged at the Member State rate and the customs value can include licence fees, assists and royalties when the Union Customs Code conditions are met. The EU does not generally impose export duty on this line, but customs classification does not answer export-control classification.
CE, EMC, RoHS and cyber-resilience duties
For a wired appliance, the EMC Directive requires technical documentation, conformity assessment, an EU declaration of conformity, CE marking and ten-year record retention. RoHS and WEEE responsibilities must be allocated between manufacturer, importer and distributor. Any radio module triggers RED review. The Cyber Resilience Act applies generally from 11 December 2027, while vulnerability/incident reporting started on 11 September 2026; manufacturers and importers should already map reporting, vulnerability handling and support-period records for products with digital elements.
Encryption and dual-use export control
IPsec, TLS and MACsec make Category 5 Part 2 relevant. Annex I to Regulation 2021/821 controls 5A002 information-security and networking equipment using cryptography for data confidentiality, subject to the Cryptography Note and other decontrols. Do not assume mass-market release for an enterprise firewall sold with vendor support. Establish the applicable control entry, EU general authorisation or national licence, destination, end user, end use and sanctions position before export, re-export, brokering or technical assistance.
Customs file and proposed description
Keep the invoice, packing list, transport record, origin evidence, model/serial photos, datasheet, port and routing diagrams, encryption matrix, EU declaration, test reports, CE/RoHS/WEEE records, vulnerability process, dual-use classification and end-use statement. Proposed description: “Enterprise network firewall and routing appliance with IPS and IPsec/TLS/MACsec encryption, Juniper SRX1600-[AC/DC], new, origin ...”. A BTI decides customs classification only; it does not decide CE or export-control status.
Official sources and limits
Official sources checked 14 September 2026: TARIC, Regulation (EU) 2021/821, 2025 dual-use list update, EMC Directive 2014/30/EU, Cyber Resilience Act and Juniper datasheet. This analysis is conditional on the imported software and licence configuration and is not a BTI or export licence.