Introduction to Juniper Security (IJSEC)

This three-day course provides students with the foundational knowledge required to work with the Junos operating system and to configure
Junos security devices. The course provides a brief overview of the Juniper security products and discusses the key architectural components of
the Junos software. Key topics include UI options with a heavy focus on CLI, configuration tasks typically associated with the initial setup of
devices, interface configuration basics with configuration examples, secondary system configuration, and the basics of operational monitoring and
maintenance of Junos Security devices.
The course then delves into foundational knowledge of security objects, security policies, and configuration examples including types of security
objects, security policies, security services NAT, site-to-site IPsec VPN, and Juniper Secure Connect VPN.
Through demonstrations and hands-on labs, students will gain experience in configuring and monitoring Junos OS and monitoring basic device
operations on the SRX Series device. This course is based on Junos OS Release 21.2R1.10.

Virtual Classroom Live

Prerequisites

The following are the prerequisites for this course: • Basic networking knowledge • Basic understanding of the Open Systems Interconnection (OSI) reference model • Basic understanding of the TCP/ IP protocol suite

Target Audience

What You’ll Learn

After successfully completing this course, you should be able to:
Identify high-level security challenges in today’s networks.
Identify products that are incorporated into the Juniper Connected Security solution.
Explain the value of implementing security solutions.
Explain how Juniper Connected Security solves the cyber security challenges of the future.
Explain the SRX Series devices and the added capabilities that next-generation firewalls provide.
Explain traffic flows through the SRX Series devices.
List the different security objects and how to create them.
Describe interface types and perform basic interface configuration tasks.
Describe the initial configuration for an SRX Series device.
Explain security zones.
Describe screens and their use.
Explain address objects.
Describe services and their use.
Describe the purpose for security policies on an SRX Series device.
Describe zone-based policies.
Describe global policies and their use.
Explain unified security policies.
Configure unified security policies with the J-Web user interface.
Describe IDP signatures.
Configure an IDP policy using predefined templates with the J-Web user interface.
Describe the use and configuration of the integrated user firewall feature.
Describe the UTM security services
List the available UTM services on the SRX Series device.
Configure UTM filtering on a security policy with the J-Web user interface.
Explain Sky ATP’s use in security.
Describe how Sky ATP and SRX Series devices operate together in blocking threats.
Describe NAT and why it is used.
Explain source NAT and when to use it.
Explain destination NAT and when to use it.
Explain static NAT and its uses.
Describe the operation and configuration the different types of NAT.
Identify various types of VPNs.
Describe IPsec VPNs and their functionality.
Describe how IPsec VPNs are established.
Describe IPsec traffic processing.
Configure IPsec VPNs with the J-Web user interface.
Describe and configure proxy IDs and traffic selectors with the J-Web user interface.
Monitor IPsec VPNs with the J-Web user interface.
Describe the J-Web monitoring features.
Explain the J-Web reporting features.
Describe the Sky Enterprise service and how it can save resources.
Explain the functionality of Junos Space Security Director.

Course Outline

COURSE CONTENTS
DAY 1
1 Course Introduction
2 Juniper Connected Security
• Identify the high-level security challenges in today’s network
• Describe basic network security design
• Identify the key factors in Juniper Networks
security focus
3. Juniper SRX Series Overview
• Describe the Junos architecture and SRX features
• Explain the traffic processing and logical packet flow on an SRX Series device
• Describe the Junos J-Web UI and its features
4. Juniper SRX Initial Configuration
• List and perform initial configuration tasks
• Perform basic interface configuration tasks
Lab 1: Initial System Configuration
5. UI Options – The Junos CLI
• Perform Junos CLI basics
• Describe Junos operational mode
• Describe Junos configuration mode
6.Security Zones and Screen Objects
• Describe and configure security zones objects
• Describe and configure screen objects
7.Address Objects and Service Objects
• Describe and configure address objects
• Describe and configure service objects
Lab 2: Creating Security Objects

DAY 2
8. Security Policies
• Describe the purpose and types of security policies
• Define the security policy components
• Configure an application firewall with unified security policies
• Implement security policy for a given use case
Lab 3: Creating Security Policies
9. Security Services—IPS
• Explain the purpose of IPS
• Define the IPS policy components
• Configure IPS policies
10. Security Services—Integrated User-Based Firewall
• Explain the purpose of user-based firewall
• Configure integrated user-based firewall
Lab 4: Security Services—IPS Integrated User Firewall
11. UTM—Antivirus and Antispam
• Describe the purpose of UTM services
• Explain antispam and its functionality
12.UTM—Content Filtering and Web Filtering
• Explain the functionality of Content filtering
• Explain the functionality of Web filtering
Lab 5: Implementing UTM Virtual SRX
13. Juniper Connected Security—JATP Cloud
• Explain the purpose of JATP
• Describe the features of JATP
• Describe the process to enroll devices with JATP Cloud
• Monitor JATP
Lab 6: JATP Overview

DAY 3
14.Source Network Address Translation
• Describe the purpose and functionality of NAT and PAT
• Configure and monitor source NAT
• Explain the purpose of proxy ARP
15. Destination Network Address Translation and Static Network Address Translation
• Configure and monitor destination NAT
• Configure and monitor static NAT
Lab 7: Implementing NAT
16. Site-to-Site IPsec VPN
• Describe the high-level overview and configuration options for IPsec VPN
• Implement IPsec VPN for a given use case
• Describe the functionality of proxy-id and traffic selectors
• Monitor site-to-site IPsec VPN
Lab 8: Implementing IPsec VPN
17. Juniper Secure Connect
• Describe Juniper Secure Connect features
• Explain Juniper Secure Connect UI options
• Deploy Juniper Secure Connect
• Monitor Juniper Secure Connect
Lab 9: Implementing Juniper Secure Connect 18 SRX Troubleshooting
• Discuss SRX and vSRX licensing
• Describe how to use packet capture
• Describe the traceoptions on the SRX Series device
• Discuss how to verify Content Security policy usage
19. Monitoring and Reporting
• Explain the basic monitoring features
• Explain the use of network utility tools on the SRX Series device
• Describe the procedure of maintaining Junos OS
• Identify the various reports available on SRX J-Webinterface
Lab 10: Monitoring and Reporting

APPENDICES
A. SRX Series Hardware and Interfaces
B. Virtual SRX
C. Juniper Sky Enterprise
D. IPsec VPN Concepts

Labs Outline

Prerequisites

Related Certifications

• Describe Juniper Networks connected security device framework
• Describe SRX Series device features
• Describe initial and basic configuration
• Describe and demonstrate the Junos CLI options
• Configure security zone and screen objects
• Configure address and service objects
• Implement security policies
• Describe IPS and implement IPS policies
• Describe user-based firewall and implement integrated user-based firewall
• Describe UTM—antivirus and antispam
• Describe UTM—content filtering and Web filtering
• Describe JATP Cloud features
• Implement Source NAT
• Implement Destination and Static NAT
• Implement site-to-site IPsec VPN
• Describe SSL VPN by using Juniper Secure Connect
• Administer and troubleshoot security services on an SRX Series device
• Describe monitoring and reporting features on the SRX Series device

Introduction to Juniper Security (IJSEC)