Junos Security (JSEC)

Start Date	Class Duration	Session(s)	Price
Global Knowledge - Online
Dec 03, 2018	5 Days	Dec 03, 2018	$ 3,995.00	Add to Cart
Jan 07, 2019	5 Days	Jan 07, 2019	$ 3,995.00	Add to Cart
Feb 11, 2019	5 Days	Feb 11, 2019	$ 3,995.00	Add to Cart
Mar 25, 2019	5 Days	Mar 25, 2019	$ 3,995.00	Add to Cart
May 06, 2019	5 Days	May 06, 2019	$ 3,995.00	Add to Cart
Jun 03, 2019	5 Days	Jun 03, 2019	$ 3,995.00	Add to Cart
Jun 24, 2019	5 Days	Jun 24, 2019	$ 3,995.00	Add to Cart

COURSE OUTLINE:

Description

This five-day course covers the configuration, operation, and implementation of SRX Series Services Gateways in a typical network environment. Key topics within this course include security technologies such as security zones, security policies, Network Address Translation (NAT), IP Security (IPsec), and high availability clusters, as well as details pertaining to basic implementation, configuration, management, and troubleshooting. Through demonstrations and hands-on labs, students will gain experience in configuring and monitoring the Junos OS and monitoring device operations. This course uses Juniper Networks SRX Series Services Gateways and Security Director for the hands-on component.

This course is based on Junos OS Release 15.1X49-D70.3 and Junos Space Security Director 16.1.

Audience

Network engineers, administrators, support personnel, and reseller support personnel using SRX Series devices
Anyone seeking JNCIS-SEC certification

Learning Objectives

After successfully completing this course, you should be able to perform the following:

Describe traditional routing and security and the current trends in internetworking.
Provide an overview of SRX Series devices and software architecture.
Describe the logical packet flow and session creation performed by SRX Series devices.
Describe, configure, and monitor zones.
Describe, configure, and monitor security policies.
Describe, configure, and monitor user firewall authentication
Describe various types of network attacks.
Configure and monitor Screen options to prevent network attacks.
Explain, implement, and monitor NAT, as implemented on Junos security platforms.
Explain the purpose and mechanics of IP Security (IPsec) virtual private networks (VPNs).
Implement and monitor policy-based and route-based IPsec VPNs.
Describe, configure, and monitor high availability chassis clusters.
Describe how to deploy and manage vSRX.
Describe and configure Group VPNs.
Describe and configure ADVPNs.
Troubleshoot chassis clusters, IPsec VPNs, zones, and Security Policies

Day 1 Chapter 1: Course IntroductionChapter 2: Introduction to Junos Security

Traditional Routing
Traditional Security
The Junos OS Architecture

Chapter 3: Zones

The Definition of Zones
Zone Configuration
Monitoring Security Zones
Screen Options
Lab 1: Configuring and Monitoring Zones

Chapter 4: Security Policies

Security Policy Overview
Policy Components
Verifying Policy Operation
Policy Case Study
Lab 2: Security Policies

Day 2 Chapter 5: Advanced Policy Options

Session Management
Junos ALGs
Policy Scheduling
Logging

Chapter 6: Troubleshooting Security Zones and Policies

Troubleshoot Security Zones
Troubleshoot Security Policies
Case Studies
Lab 3: Troubleshooting Security Zones and Policies

Chapter 7: Network Address Translation

NAT Overview
Source NAT Operation and Configuration
Destination NAT Operation and Configuration
Static NAT Operation and Configuration
Proxy ARP
Monitoring and Verifying NAT Operation
Lab 4: Network Address Translation

Day 3 Chapter 8: Advanced NAT Concepts

NAT Interaction with Policy and ALGs
DNS Doctoring
Cone NAT
Multi-Tenant NAT
IPv4-to-IPv6 NAT
Advanced NAT Scenarios
Lab 5: Advanced NAT Implementations

Chapter 9: IPsec VPN Concepts

VPN Types
Secure VPN Requirements
IPsec Overview
IPsec Details

Chapter 10: IPsec VPN Implementation

Configuration of IPsec VPNs
IPsec VPN Case Studies
Monitoring IPsec VPN
Traffic Selectors
Lab 6: Implementing IPsec VPNs

Day 4 Chapter 11: Group VPNs

Group VPN Overview
GDOI Protocol
Group VPN Configuration and Monitoring
Lab 7: Implementing Group VPNs

Chapter 12: ADVPNs

ADVPN Overview
ADVPN Member Roles
Shortcut Termination
Routing with ADVPNs
IKEv2
ADVPN Implementation
Lab 8: Implementing ADVPNs

Chapter 13: IPsec VPN Case Studies and Solutions

Routing over VPNs
NAT with IPsec
Enterprise VPN Deployment Best Practices
Lab 9: Implementing Routing over VPN Tunnels and IPsec Best Practices

Chapter 14: Troubleshooting IPsec

IKE Phase 1 Troubleshooting
IKE Phase 2 Troubleshooting
Case Studies
Lab 10: Troubleshooting IPsec

Day 5 Chapter 15: Virtualized SRX

vSRX Overview
Installation of vSRX
Chassis Clustering
Deployment Scenarios and Use Cases
Automated Deployments Options
AWS Deployment Scenarios

Chapter 16: High Availability Clustering Theory

High Availability Overview
Chassis Cluster Components
Advanced Chassis Cluster Topics

Chapter 17: High Availability Clustering Implementation

Chassis Cluster Configuration
Chassis Cluster Monitoring
Advanced Chassis Cluster Topics
Lab 12: Implementing High Availability Techniques

Chapter 18: Troubleshooting Chassis Clusters

Chassis Cluster Troubleshooting
Case Studies
IDP Policy Components and Configuration
Lab 13: Troubleshooting Chassis Clusters

Appendix A: SRX Series Hardware and Interfaces

Branch SRX Platform Overview
High-End SRX Platform Overview
SRX Traffic Flow and Distribution
SRX Interfaces

RELATED COURSES

Technical Training
Additional Technical Training

Data Analysis Boot Camp

In this fast-paced classroom experience, you will learn how to use your data to deal with critical factors: risk, performance, quality, forecasting, estimating, simulation, business process improvement, and much more. You will learn how to perform practical analytics, modeling, and interpretation the moment you return to work. Through a combination of demonstrations and hands-on exercises, you will get practice with the sort of skills and techniques which are typically the domain of expensive consultants.

You will quickly master powerful skills and the technologies to deploy them without reliance on proprietary technology. (We teach data skills you can deploy using Excel, R, or Python). Working through these scenarios, you will learn the value of analytics in supporting decision-making processes and the management and controls of business processes. In addition to providing real-world data analysis skills and concepts, you will apply the knowledge you acquire in a number of real business scenarios to learn practical applications.

Technical Training
Additional Technical Training

Avid Media Composer Editing Essentials

In this course, you will be introduced Avid Media Composer, the non-linear video editing application used in most movie and television productions. Along with its counterpart, MC 110 – Media Composer Effects Essentials, this course provides the foundation for Avid Media Composer User Certification.

The MC 101/110 – Comprehensive Study of Editing and Effects with Avid Media Composer combined class saves you over 20% when compared to booking the classes separately.

This course leads you through the interface and basic editing techniques before moving on to trimming, fine-tuning the edit, adjusting audio, handling multi-camera editing, adding transitions, adding titles, and outputting your finished project. The training is hands-on and features project-based lessons in which you work on real-world projects ranging from extreme sports to dazzling documentary footage. This course is the first step in mastering Avid Media Composer.

Technical Training
Additional Technical Training

Configuring, Managing, and Maintaining Server 2008 R2

This course combines Windows Server 2008 training content from the NetworkInfrastructure Technology Specialist, Active Directory Technology Specialist,and IT Professional Server Administrator courses into five days.

You’ll gain the knowledge and skills to:

Manage accounts and resources
Maintain server resources
Monitor server performance
Safeguard data in a Microsoft Windows Server 2008 environment.

This course covers Server 2008 Release 2 (R2) key topics and Windows Server2008 core skills, and it incorporates material from the Official MicrosoftLearning Product 6419: Configuring, Managing, and Maintaining Server 2008.

This course can also assist you in your preparation for the following exams:

70-646: Pro: Windows Server 2008, Server Administrator
70-647: Pro: Windows Server 2008, Enterprise Administrator

Technical Training
Additional Technical Training

Junos MPLS and VPNs

In this course, you will learn about Multiprotocol Label Switching (MPLS) concepts such as control and forwarding plane, RSVP Traffic Engineering, LDP, Layer 3 VPNs, BGP Layer 2 VPNs, LDP Layer 2 Circuits, and virtual private LAN service (VPLS), carrier-of-carrier VPNs. This course also covers Junos operating system-specific implementations of Layer 2 control instances and active interface for VPLS and it is based on the Junos OS Release 12.3R2.5.

Through demonstrations and hands-on labs, you will gain experience in configuring and monitoring the Junos OS and in device operations.

Certification:

Juniper Networks Certified Internet Specialist (JNCIS-SP)