Advanced Junos Security (partnercursus)

Doel

• Demonstrate understanding of concepts covered in the prerequisite Junos Security course.
• Describe the various forms of security supported by the Junos OS.
• Describe Junos security handling at Layer 2 versus Layer 3.
• Describe the placement and traffic distribution of the various components of SRX devices.
• Configure, utilize, and monitor the various interface types available to the SRXSeries product line.
• Describe Junos OS processing of Application Layer Gateways (ALGs).
• Alter the Junos default behavior of ALG and application processing.
• Implement address books with dynamic addressing.
• Compose security policies utilizing ALGs, custom applications, and dynamic addressing for various scenarios.
• Use Junos debugging tools to analyze traffic flows and identify traffic processing patterns and problems.
• Describe Junos routing instance types used for virtualization.
• Implement virtual routing instances.
• Describe and configure route sharing between routing instances using logical tunnel interfaces.
• Implement selective packet-based forwarding.
• Implement filter-based forwarding.
• Describe and implement static, source, destination, and dual NAT in complex LAN environments.
• Describe and implement variations of cone, or persistent NAT.
• Describe the interaction between NAT and security policy.
• Implement optimized chassis clustering.
• Describe IP version 6 (IPv6) support for chassis clusters.
• Differentiate and configure standard point-to-point IP Security (IPsec) virtual private network (VPN) tunnels, hub-and-spoke VPNs, dynamic VPNs, and group VPNs.
• Implement OSPF over IPsec tunnels and utilize generic routing encapsulation (GRE) to interconnect to legacy firewalls.
• Monitor the operations of the various IPsec VPN implementations.
• Describe public key cryptography for certificates.
• Utilize Junos tools for troubleshooting Junos security implementations.
• Perform successful troubleshooting of some common Junos security issues.