JUNOS Security (JSEC)

Course IntroductionIntroduction to Junos Security

• Traditional Routing
• Traditional Security
• The Junos OS Architecture

Zones

• The Definition of Zones
• Zone Configuration
• Monitoring Security Zones

Lab 1: Configuring and Monitoring Zones

Security Policies

• Security Policy Overview
• Junos ALGs
• Policy Components
• Verifying Policy Operation
• Policy Scheduling and Rematching
• Policy Case Study

Lab 2: Security Policies

Firewall User Authentication

• Firewall User Authentication Overview
• Pass-Through Authentication
• Web Authentication
• Client Groups
• Using External Authentication Servers
• Verifying Firewall User Authentication

Lab 3: Configuring Firewall Authentication

Screen Options

• Multilayer Network Protection
• Stages and Types of Attacks
• Using Junos Screen Options - Reconnaissance Attack Handling
• Using Junos Screen Options - Denial of Service Attack Handling
• Using Junos Screen Options - Suspicious Packets Attack Handling
• Applying and Monitoring Screen Options

Lab 4: Implementing Screen Options

Network Address Translation

• NAT Overview
• Source NAT Operation and Configuration
• Destination NAT Operation and Configuration
• Static NAT Operation and Configuration
• Proxy ARP
• Monitoring and Verifying NAT Operation

Lab 5: Network Address Translation

IPsec VPNs

• VPN Types
• Secure VPN Requirements
• IPsec Details
• Configuration of IPsec VPNs
• IPsec VPN Monitoring

Lab 6: Implementing IPsec VPNs

Introduction to Intrusion Detection and Prevention

• Introduction to Junos IDP
• IDP Policy Components and Configuration
• Signature Database
• Case Study: Applying the Recommended IDP Policy
• Monitoring IDP Operation

Lab 7: Implementing IDP

High Availability Clustering Theory

• High Availability Overview
• Chassis Cluster Components
• Advanced Chassis Cluster Topics

High Availability Clustering Implementation

• Chassis Cluster Operation
• Chassis Cluster Configuration
• Chassis Cluster Monitoring

Lab 8: Implementing High Availability Techniques

Appendix A: SRX Series Hardware and Interfaces

• Branch SRX Platform Overview
• High End SRX Platform Overview
• SRX Traffic Flow and Distribution
• SRX Interfaces