[NEW] Juniper JNCIA-SEC JN0-231 with hands-on labs

Explore how host inbound traffic controls device-bound traffic by zone or interface, detailing system services and protocols. Understand how interface overrides differ from zone defaults for ping and SSH.

Apply screens on ingress packets to detect and block anomalies early, with statistics-based and signature-based screens covering attacks like icmp flood and tcp syn flood.

Configure screens on the device to apply icmp, ip, tcp, and udp controls and attach the screen to a security zone, then simulate attacks to verify drops and logs.

Configure security policies with actions like permit, reject, deny, count, and logging; use reject for internal assets and deny for internet facing resources, with session-init or session-close logging.

Use address objects in security policies to control traffic across trust and untrust zones. Learn how address books, including DNS name objects, select sources and destinations for policies.

Contrast traditional security policies with an application firewall that uses application id and signatures to block specific apps, as unified policies integrate dynamic applications in junos os 18 and later.

Learn how intrusion detection and prevention (IDP) monitors and analyzes network events to identify threats and stop them, using per-policy security configurations, licenses, and signature databases.

Learn to configure IDP policies on the SARS device by installing licenses, downloading and applying security packages and predefined policy templates, and enabling IDP inspection.

Learn blocking mechanisms, including allow and block lists, email scanning with smtp and imap actions (quarantine, warning, or permit), file inspection profiles, threat profiling, and sec intel feeds.

Learn how network address translation translates private IPs to public ones, using source, destination, and static NAT with port translation to conserve IPv4 addresses and enable internet access.

Master source nat, a common technique that translates private source ips to a public ip for outgoing traffic. It covers interface-based nat and pool-based nat with port address translation.

Configure destination nat on the acars device to translate a public address to the server’s private address using a pool and ruleset, with a proxy and DMZ policy.

Configure and monitor system and security logs on Junos devices by choosing event mode for local logging or stream mode for remote logging, and selecting text or binary formats.