Advanced Junos Security

Course IntroductionJunos Security Review

• Junos Security Components Overview and Selective Packet-Based Forwarding
• Junos Layer 2 Packet Handling

Lab 1: Selective Forwarding

Security Policy Components

• ALG Overview
• Junos ALGs
• Custom Application Definitions
• Advanced Addressing
• Policy Matching

Lab 2: Implementing Advanced Security Policy

Virtualization

• Virtualization Overview
• Routing Instances
• Filter-Based Forwarding

Lab 3: Implementing Junos Virtual Routing

Advanced NAT Concepts

• Operational Review
• NAT: Beyond Layer 3 and Layer 4 Headers
• Advanced NAT Scenarios

Lab 4: Advanced NAT Implementations

High Availability Clustering

• High Availability Overview
• Chassis Clustering Implementations
• Advanced HA Topics

Lab 5: Implementing Advanced High Availability Techniques

IPsec Implementations

• Standard VPN Implementations Review
• Public Key Infrastructure
• Hub-and-Spoke VPNs

Lab 6: Hub-and-Spoke IPsec VPNs

Enterprise IPsec Technologies: Group and Dynamic VPNs

• Group VPN Overview
• GDOI Protocol
• Group VPN Configuration and Monitoring
• Dynamic VPN Overview
• Dynamic VPN Implementation

Lab 7: Configuring Group VPNs

IPsec VPN Case Studies and Solutions

• Routing over VPNs
• IPsec with Overlapping Addresses
• Dynamic Gateway IP Addresses
• Enterprise VPN Deployment Tips and Tricks

Lab 8: OSPF over GRE over IPsec VPNs

Troubleshooting Junos Security

• Troubleshooting Methodology
• Troubleshooting Tools
• Identifying IPsec Issues

Lab 9: Performing Security Troubleshooting Techniques

Appendix: SRX Series Hardware and Interfaces

• Branch SRX Platform Overview
• High End SRX Platform Overview
• SRX Traffic Flow and Distribution
• SRX Interfaces