Advanced Junos Security (AJSEC) - lectures and labs - 3 days
- Demonstrate understanding of concepts covered in the prerequisite "Junos security" course
- Describe the various forms of security supported by the Junos OS
- Describe Junos security handling at layer 2 versus layer 3
- Describe the placement and traffic distribution of the various components of SRX devices
- Configure, utilize, and monitor the various interface types to the SRX series product line
- Describe Junos OS processing of Application Layer Gateways (ALGs)
- Alter the Junos default behavior of ALG and application processing
- Implement address books with dynamic addressing
- Compose security policies utilizing ALGs, custom applications, and dynamic addressing for various scenarios
- Use Junos debugging tools to analyze traffic flows and identify traffic processing patterns and problems
- Describe Junos routing instance types used for virtualization
- Implement virtual routing-instances
- Describe and configure route sharing between routing instances using logical tunnel interfaces
- Implement selective packet-based forwarding
- Implement filter-based forwarding
- Describe and implement static, source, destination, and dual NAT in complex LAN environments
- Describe and implement variations of cone, or persistent NAT
- Describe the interaction between NAT and security policy
- Implement optimized chassis clustering
- Describe IP version 6 (IPv6) support for chassis clusters
- Differentiate and configure standard point-to-point IP security (IPsec) virtual private network (VPN) tunnels, hub-and-spoke VPNs, dynamic VPNs, and group VPNs
- Implement OSPF over IPsec tunnels and utilize generic routing encapsulation (GRE) to interconnect to legacy firewalls
- Monitor the operations of the various IPsec VPN implementations
- Describe public key cryptography for certificates
- Utilize Junos tools for troubleshooting Junos security implementations
- Perform successful troubleshooting of some common Junos security issues
This three-day course, which is designed to build off of the current Junos Security (JSEC) offering, delves deeper into Junos security with advanced coverage of IPsec deployments, virtualization, high availability, advanced Network Address Translation (NAT) deployments, and layer 2 security with SRX series services gateways. Through demonstrations and hands-on labs, students will gain experience in configuring and monitoring advanced security features of the Junos operating system.
