Advanced Junos Security

Day 1

Chapter 1: Course Introduction

Chapter 2: App Secure

 AppSecure Overview

 AppID

 AppTrack

 AppFW

 AppDoS

 AppQoS

o Lab 1: Implementing AppSecure

Chapter 3: Junos Layer 2 Packet Handling and Security Features

 Transparent Mode Security

 Layer 2 Ethernet Switching

o Lab 2: Implementing Layer 2 Security

Chapter 4: Virtualization

 Virtualization Overview

 Routing Instances

 Logical Systems

o Lab 3: Implementing Junos Virtual Routing

Day 2

Chapter 5: Advanced NAT Concepts

 Operational Review

 NAT: Beyond Layer 3 and Layer 4 Headers

 DNS Doctoring

 IPv6 NAT

COURSE DESCRIPTION

3

 Advanced NAT Scenarios

o Lab 4: Advanced NAT Implementations

Chapter 6: IPsec Implementations

 Standard VPN Implementations Review

 Public Key Infrastructure

 Hub-and-Spoke VPNs

o Lab 5: Hub-and-Spoke IPsec VPNs

Day 3

Chapter 7: Enterprise IPsec Technologies: Group and Dynamic VPNs

 Group VPN Overview

 GDOI Protocol

 Group VPN Configuration and Monitoring

 Dynamic VPN Overview

 Dynamic VPN Implementation

o Lab 6: Configuring Group VPNs

Chapter 8: IPsec VPN Case Studies and Solutions

 Routing over VPNs

 IPsec with Overlapping Addresses

 Dynamic Gateway IP Addresses

 Enterprise VPN Deployment Tips and Tricks

o Lab 7: Implementing Advanced IPsec VPN Solutions

Chapter 9: Troubleshooting Junos Security

 Troubleshooting Methodology

 Troubleshooting Tools

 Identifying IPsec Issues

o Lab 8: Performing Security Troubleshooting Techniques

Appendix A: SRX Series Hardware and Interfaces

 Branch SRX Platform Overview

 High End SRX Platform Overview

 SRX Traffic Flow and Distribution

 SRX Interfaces