CJFV Course

Configuring Juniper Networks Firewall/IPSec VPN Products

Course Overview

This course is the first in the ScreenOS curriculum. It is a three-day, instructor-led course that focuses on configuration of the Juniper Networks firewall/VPN products in a variety of situations, including basic administrative access, routing, firewall policies and policy options, attack prevention features, address translation, and VPN implementations.

The course combines both lecture and labs, with significant time allocated for hands-on experience. Students completing this course should be confident in their ability to configure Juniper Networks firewall/VPN products in a wide range of installations.

After successfully completing this course, students should be able to:

• Explain the Juniper Networks security architecture.
• Configure administrative access and options.
• Back up and restore configuration and ScreenOS files.
• Configure a Juniper Networks device in transparent, route, and NAT modes.
• Discuss the applications of multiple virtual routers.
• Configure the Juniper Networks firewall to permit and deny traffic based on user defined policies.
• Configure advanced policy options.
• Identify and configure network designs for various types of network address translation.
• Configure policy-based and route-based VPN tunnels.

Target audience

Network engineers, support personnel, reseller support, and others responsible for implementing Juniper firewall products.

Prerequisites

This course assumes that students have basic networking knowledge and experience.

CJSA Course

Configuring Juniper Networks Secure Access

Course Overview

This two-day course discusses the configuration of Secure Access (SA) products in a typical network environment. Key topics include SSL access technologies, basic implementation, and configuration and management options. Through demonstrations and hands-on labs, students will gain experience in configuring, testing, and troubleshooting basic facets of the SA products.

After successfully completing this course, you should be able to deploy the SA products to support common environments. Specific topics include the following:

• Introduction to the SA platform
• Introduction to Secure Sockets Layer (SSL) Protocol and Public Key Infrastructure (PKI)
• Typical deployment scenarios
• SA Terminology
• Roles
• Role Restrictions
• Realms
• Resource Policies
• Sign-in Policies
• Authentication Servers
• Local
• Lightweight Directory Access Protocol (LDAP)
• RADIUS (including two-factor)
• NT
• Network Information Service (NIS)
• Authentication Policies
• Host Checker
• Cache Cleaner
• Client/Server Support
• J-SAM
• W-SAM
• Network Connect
• Troubleshooting

Target audience

Network engineers, support personnel, reseller support, and anyone responsible for implementing SA products.

Prerequisites

This course assumes that students have moderate background in internetworking basics, security concepts, network administration, and application support.

IIDP Course

Implementing Juniper IDP Products

Course Overview

This three-day course discusses the configuration of Juniper Intrusion Detection and Prevention (IDP) sensors in a typical network environment. Key topics include: sensor configuration, creating and fine-tuning security policies, managing attack objects, creating custom signatures, and troubleshooting. This course is based upon IDP software version 4.0, and Security Manager 2006.1.

Through demonstrations and hands on labs, students will gain experience in configuring, testing, and troubleshooting the IDP sensor.

Target audience

Network engineers, support personnel, reseller support, and others responsible for implementing Juniper IDP products.

Prerequisites

This course assumes that students have basic networking knowledge and experience in the following areas:

• Internetworking basics
• TCP/IP Operations
• Network security concepts
• Network administration
• Application support
• Also assumes that students have attended the Security Manager Fundamentals (2 day course)

Security Manager Fundamentals

Course Overview

This two-day course discusses the basic operations of Security Manager. Key topics include server and domain administration, device configuration, template creation and management, policy creation and management, logging, and report generation. Through demonstrations and hands-on labs, students gain experience in configuring, testing, and troubleshooting features of Security Manager.

After successfully completing this course, students should be able to:

• Explain Security Manager concepts and terminology.
• Set up and administer Security Manager servers.
• Configure domains and administrators.
• Add devices using modeling and importing.
• Work with objects and templates.
• Configure policies.
• Perform routine device management tasks.
• Work with logs and reports.
• Generate statistical reports using the Statistical Report Server.
• Configure VPNs with the VPN Manager tool.

Target audience

Network engineers, support personnel, reseller support, and anyone else needing a working knowledge of Security Manager.

Prerequisites

This course assumes that students have basic networking knowledge and experience in the following areas:

• Ethernet
• TCP/IP
• Routing