This self-paced On-Demand eLearning course, designed to provide students with the knowledge to configure and monitor advanced Junos OS security features for enterprise, campus, and service provider applications. Key topics include advanced Junos OS security features, next-gen Layer 2 security, EVPN VXLAN security, advanced policy-based routing, virtualization features, advanced IPsec VPNs, advanced NAT features, and multinode high availability. Through demonstrations and hands-on labs, students will gain experience with the features of SRX Series devices and vSRX Series devices. This course is based on Junos OS Release 23.2. This course includes audio in English, and closed captioning in English, and AI-generated closed captioning for German, French, Portuguese, Spanish, and Japanese. Watch a Sneak Peek

Please Note: Please note this course has been updated to the new version on August 30, 2024.
Purchase Includes: 365 Days of Access
Certification Track: Security
Difficulty Level: Advanced
Additional Details
Course Modules
#ModuleDurationLabRequired
1
How to Use this On Demand Course

To launch the course, click the module titles below. Please be patient as the content downloads to your system. As you complete each module, close the module window and launch the next module from this page. You will need to launch all required modules for the course to be considered complete.

If the module has a lab component, you will have access to our virtual lab environment. In order to use the lab portion of the training you will need to enable your lab access. Click the "Enable Lab Access" button to enable your lab access and follow the instructions in the individual training modules to access the labs when instructed. If this is your first time using the On Demand lab environment, please Watch a Quick Lab Tutorial.

Important: For the best experience with this course we recommend that you use the latest version of Firefox, Chrome, Safari or Microsoft Edge. Older versions of Internet Explorer have been shown to have issues, therefore, we do not recommend using this browser.

If you have any technical problems with the course modules or the lab environment please open a ticket.

5m
2
Course Introduction
This module provides an introduction to the course and course features.
2m
3
Junos Layer 2 Packet Handling and Security Features
This module explains transparent mode security operations, defines secure wire implementation, and discusses MACsec use cases.

LAB 1: Implementing Layer 2 Security
1h 15m
4
Packet-Based Security
This modules explains routing instances and describes filter-based forwarding.

LAB 2: Implementing Packet-Based Security
1h 35m
5
Troubleshooting Zones and Policies
This module describes troubleshooting tools available in Junos OS and shows how to apply them for troubleshooting issues related to security zones and policies with case studies.

LAB 3: Troubleshooting Zones and Policies
1h 41m
6
AJSEC Activity 1
This activity contains review questions for modules 2 through 4.
10m
7
Hub-and-Spoke VPNs
This module describes the hub-and-spoke VPN topology and shows how to configure and verify the operation of hub-and-spoke VPNs.

LAB 4: Implementing Hub-and-Spoke VPNs
1h 8m
8
Advanced NAT
This module explains address persistence, persistent NAT, DNS doctoring, and then covers advanced NAT scenarios and NAT troubleshooting.

LAB 5: Implementing Advanced NAT Features
1h 24m
9
Logical and Tenant Systems
This module describes the logical systems and tenant systems.

LAB 6: Implementing Tenant Systems
1h 34m
10
AJSEC Activity 2
This activity contains review questions for modules 5 through 7.
15m
11
PKI and ADVPNs
This module describes PKI and how to configure PKI for Junos security devices. It then covers how ADVPNs function and how to configure and monitor ADVPNs.

LAB 7: Implementing ADVPNs
2h 8m
12
Advanced IPsec
This module explains NAT interoperability with IPsec, CoS features with IPsec VPNs, and IPsec best practices. It continues with how to configure OSPF over IPsec, IPsec with overlapping addresses, and IPsec with dynamic gateway IP addresses.

LAB 8: Implementing Advanced IPsec Solutions
1h 26m
13
Troubleshooting IPsec
This module describes general troubleshooting for IPsec VPNs, how to troubleshoot IKE Phase 1 and Phase 2, and how to configure and analyze logging for IPsec VPNs. It reinforces concepts by examining IPsec troubleshooting case studies.

LAB 9: Troubleshooting IPsec VPNs
1h 17m
14
AJSEC Activity 3
This activity contains review questions for modules 8 through 10.
10m
15
Advanced Policy-Based Routing
This module defines advanced policy-based routing and how to configure and verify it, and then explains quality of experience.

LAB 10: Implementing APBR
42m
16
EVPN-VXLAN Security
This module describes the EVPN-VXLAN protocols and explains VXLAN tunnel security. The module also explains how to configure security on VXLAN tunnels.

LAB 11: Securing Traffic Between Data Centers
55m
17
Multinode High Availability
This module highlights the benefits of high availability and security, and then explains the use of multinode high availability. It also describes how to identify multinode high availability modes and discusses services redundancy groups.

LAB 12: Implementing Multinode HA
1h 12m
18
Automated Threat Mitigation
This module explains automated threat mitigation, and how Juniper Connected Security integrates with third-party applications and multicloud.
24m
19
AJSEC Activity 4
This activity contains review questions for modules 11 through 14.
10m
$4,000 USD