1. Core Licenses: Base/JB or Enhanced/JE ( perpetual )

2. Features license ( subscription)

1- License: Base/JB or Enhanced/JE ( perpetual )

Usually bought with the HW ( so may be already in you BoM)

https://www.juniper.net/assets/de/de/local/pdf/datasheets/1000600-en.pdf

2-Features license ( subscription)

https://www.juniper.net/documentation/en_US/release-independent/licensing/topics/topic-map/understanding-licenses-for-srx-series.html#jd0e2422

https://www.juniper.net/assets/us/en/local/pdf/datasheets/1000600-en.pdf

Bundle option:

SRX4100-ATP-BUN-1 -3 or -5years: 

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Sky Advanced Threat Prevention

SRX4100-CS-BUN-1 -3 or -5years:

Application Security, Intrusion Prevention Signatures, Enhanced Web Filtering, Antivirus and Antispam SRX4100-A-BUN-1 -3 or -5years:

Application Security, Intrusion Detection and Prevention, Enhanced Web Filtering, and Avira antivirus

I was asking about “10G” per box, if you go above here the upgrade license

SRX4100-E-P-UPG

Enhanced performance (upgrade to firewall IMIX performance up to 20G IMIX to the base 20G IMIX firewall throughput supported and application security)

The license per feature :

Enhanced Web filtering, IPS, logical system,  Sky Advanced Threat Prevention / Threat Intelligent Feeds

And finally the IPsec tunnel termination for remote Access (Hub and Spoke architecture).