Course Level
IJSEC is an introductory-level course.
Intended Audience
This course benefits individuals responsible for configuring and monitoring Juniper Security devices.
Prerequisites
The prerequisites for this course include:
- Basic networking knowledge
- Basic understanding of the Open Systems Interconnection (OSI) reference model
- Basic understanding of the TCP/IP protocol suite
Objectives
After successfully completing this course, you should be able to:
- Describe Juniper Networks connected security device framework
- Describe SRX Series device features
- Describe initial and basic configuration
- Describe and demonstrate the Junos CLI options
- Configure security zone and screen objects
- Configure address and service objects
- Implement security policies
- Describe IPS and implement IPS policies
- Describe user-based firewall and implement integrated user-based firewall
- Describe UTM—Antivirus and Antispam
- Describe UTM—Content Filtering and Web Filtering
- Describe JATP Cloud Features
- Implement Source NAT
- Implement Destination and Static NAT
- Implement Site-to-Site IPsec VPN
- Describe SSL VPN by using Juniper Secure Connect
- Administer and Troubleshoot Security Services on an SRX Series Device
- Describe Monitoring and Reporting Features on the SRX Series Device
Course Contents
Day 1
Module 1: Course Introduction
Module 2: Juniper Connected Security
- Identify the high-level security challenges in today’s network
- Describe basic network security design
- Identify the key factors in Juniper Networks security focus
Module 3: Juniper SRX Overview
- Describe the Junos architecture and SRX features
- Explain the traffic processing and logical packet flow on an SRX Series device
- Describe the Junos J-Web UI and its features
Module 4: Juniper SRX Initial Configuration
- List and perform initial configuration tasks
- Perform basic interface configuration tasks
- Lab 1: Initial System Configuration
Module 5: UI Options—The Junos CLI
- Perform Junos CLI basics
- Describe Junos operational mode
- Describe Junos configuration mode
Module 6: Security Zones and Screen Objects
- Describe and configure security zones objects
- Describe and configure screen objects
Module 7: Address Objects and Service Objects
- Describe and configure address objects
- Describe and configure service objects
- Lab 2: Creating Security Objects
Day 2
Module 8: Security Policies
- Describe the purpose and types of security policies
- Define the security policy components
- Configure an application firewall with unified security policies
- Implement security policy for a given use case
- Lab 3: Creating Security Policies
Module 9: Security Services—IPS
- Explain the purpose of IPS
- Define the IPS policy components
- Configure IPS policies
Module 10: Security Services—Integrated User-Based Firewall
- Explain the purpose of user-based firewall
- Configure integrated user-based firewall
- Lab 4: Security Services—IPS, Integrated User Firewall
Module 11: UTM—Antivirus and Antispam
- Describe the purpose of UTM services
- Explain antispam and its functionality
Module 12: UTM—Content Filtering and Web Filtering
- Explain the functionality of Content filtering
- Explain the functionality of Web filtering
- Lab 5: Implementing UTM
Module 13: Juniper Connected Security—JATP Cloud
- Explain the purpose of JATP
- Describe the features of JATP
- Describe the process to enroll devices with JATP cloud
- Monitor JATP
- Lab 6: Demonstrate JATP Overview
Day 3
Module 14: Source Network Address Translation
- Describe the purpose and functionality of NAT and PAT
- Configure and monitor source NAT
- Explain the purpose of proxy ARP
Module 15: Destination Network Address Translation and Static Network Address Translation
- Configure and monitor destination NAT
- Configure and monitor static NAT
- Lab 7: Implementing NAT
Module 16: Site-to-Site IPsec VPN
- Describe the high-level overview and configuration options for IPsec VPN
- Implement IPsec VPN for a given use case
- Describe the functionality of proxy-id and traffic selectors
- Monitor site-to-site IPsec VPN
- Lab 8: Implementing IPsec VPN
Module 17: Juniper Secure Connect
- Describe Juniper Secure Connect features
- Explain Juniper Secure Connect UI options
- Deploy Juniper Secure Connect
- Monitor Juniper Secure Connect
- Lab 9: Demonstrate implementing Juniper Secure Connect
Module 18: SRX Troubleshooting
- Discuss SRX and vSRX licensing
- Describe how to use packet capture
- Describe the traceoptions on the SRX Series device
- Discuss how to verify Content Security policy usage
Module 19: Monitoring and Reporting
- Explain the basic monitoring features
- Explain the use of network utility tools on the SRX Series device
- Describe the procedure of maintaining Junos OS
- Identify the various reports available on SRX J-Web interface
- Lab 10: Monitoring and Reporting
Appendix A: SRX Series Hardware
Appendix B: Virtual SRX
Appendix C: Juniper Sky Enterprise
Appendix D: IPsec VPN Concepts