Advanced Junos Security
Course ID
40020
Course Description
In this course, you will go deeper into Junos security with advanced coverage of IPsec deployments, virtualization, high availability, advanced Network Address Translation (NAT) deployments, and Layer 2 security with Juniper Networks SRX Series Services Gateways. Through demonstrations and hands-on labs, you will gain experience configuring and monitoring advanced security features of the Junos operating system.
Prerequisites
Audience
Network technicians and engineers responsible for implementing, monitoring, and troubleshooting Junos security components
Course Content
Security supported by the Junos OS
Junos security handling at Layer 2 vs. Layer 3
Placement and traffic distribution of the various components of SRX devices
Configure, utilize, and monitor the various interface types available to the SRX Series product line
Junos OS processing of Application Layer Gateways (ALGs)
Alter the Junos default behavior of ALG and application processing
Implement address books with dynamic addressing
Compose security policies utilizing ALGs, custom applications, and dynamic addressing for various scenarios
Junos debugging tools to analyze traffic flows and identify traffic processing patterns and problems
Junos routing instance types used for virtualization
Implement virtual routing instances
Configure route sharing between routing instances using logical tunnel interfaces
Implement selective packet-based forwarding
Implement filter-based forwarding
Implement static, source, destination, and dual NAT in complex LAN environments
Implement variations of cone or persistent NAT
Interaction between NAT and security policy
Implement optimized chassis clustering
IP version 6 (IPv6) support for chassis clusters
Differentiate and configure standard point-to-point IP Security (IPsec) virtual private network (VPN) tunnels, hub-and-spoke VPNs, dynamic VPNs, and group VPNs
Implement OSPF over IPsec tunnels and utilize generic routing encapsulation (GRE) to interconnect to legacy firewalls
Monitor the operations of the various IPsec VPN implementations
Public key cryptography for certificates
Junos tools for troubleshooting Junos security implementations
Perform successful troubleshooting of some common Junos security issues
