[NEW] Juniper JNCIA-SEC JN0-231 with hands-on labs

Explore security zones as logical network segments with trust, DMZ, and untrust, where interfaces, address books, and security policies govern traffic and support out-of-band management via the management functional zone.

Explore how host inbound traffic controls device-bound traffic by zone or interface, detailing system services and protocols. Understand how interface overrides differ from zone defaults for ping and SSH.

Understand that an address book is a container for addresses and address sets. The global address book is default; include IP prefix, IP range, DNS address, and wildcard address.

Configure address objects in Juniper SRS devices by building global and zone address books, creating addresses, sets, and ranges, and attaching them to zones for policy matching.

Configure application objects and sets to classify traffic by transport protocol and destination ports, using predefined or custom applications with application protocols for deep packet inspection in security policies.

Apply screens on ingress packets to detect and block anomalies early, with statistics-based and signature-based screens covering attacks like icmp flood and tcp syn flood.

Configure screens on the device to apply icmp, ip, tcp, and udp controls and attach the screen to a security zone, then simulate attacks to verify drops and logs.

Security policies enforce rules on transit traffic between zones in a zone-based firewall, evaluated top-to-bottom within each context and kept stateful through session awareness.

Configure security policies with actions like permit, reject, deny, count, and logging; use reject for internal assets and deny for internet facing resources, with session-init or session-close logging.

Learn to monitor security policies with commands like show security policies, show security flow session, show log, and show security match policies, and configure local logging for troubleshooting.

Policy precedence acts as a tie breaker by evaluating same-zone policies first, then interzone policies, then global policies, before applying the default action.

Use address objects in security policies to control traffic across trust and untrust zones. Learn how address books, including DNS name objects, select sources and destinations for policies.

Configure global policies to regulate traffic across zones, consolidating multiple context policies into a single rule, ordered top to bottom, and enforce default deny when no match.

Configure schedulers to activate policies only during specific times, such as Monday to Friday all day. Attach the scheduler to the policy and verify its active state for correct lookup.

Policy rematch re-evaluates an active session when its security policy changes, dropping the session if the updated policy no longer allows it, and enabling re-validation via set policy rematch.

Contrast traditional security policies with an application firewall that uses application id and signatures to block specific apps, as unified policies integrate dynamic applications in junos os 18 and later.

Discover how unified security policies expand match criteria to include dynamic applications, enabling layer four to seven traffic classification and granular, easy-to-create controls using predefined Juneau's signatures.

Learn how intrusion detection and prevention (IDP) monitors and analyzes network events to identify threats and stop them, using per-policy security configurations, licenses, and signature databases.

Learn to configure IDP policies on the SARS device by installing licenses, downloading and applying security packages and predefined policy templates, and enabling IDP inspection.

Enable user-based security policies by integrating user identity as a match criterion through the user firewall, mapping AD users to IP addresses and building an authentication table with group membership.

Configure integrated user firewall on the acars device to fetch domain controller user mappings and enforce source-identity based policies that allow only one user internet access.

Protects hosts with cloud-based Juniper ATP, integrated with SRS firewalls, to monitor traffic. It blocks malware, quarantines infected hosts, and disrupts lateral movement, including protection against zero-day threats.

Juniper ATP malware analysis uses cash lookup, antivirus scanning, static analysis, and dynamic analysis to assess files in real time, generating a threat score and enabling alerting and block policies.

Learn blocking mechanisms, including allow and block lists, email scanning with smtp and imap actions (quarantine, warning, or permit), file inspection profiles, threat profiling, and sec intel feeds.

Learn how network address translation translates private IPs to public ones, using source, destination, and static NAT with port translation to conserve IPv4 addresses and enable internet access.

Master source nat, a common technique that translates private source ips to a public ip for outgoing traffic. It covers interface-based nat and pool-based nat with port address translation.

Configure interface-based source nat by defining a trust-to-dmz ruleset that translates source addresses to the egress interface IP. Validate translations with sessions and logs.

Configure pool-based source nat by creating a source pool, enabling pool-based translation, and implementing proxy arp, pat, and an overflow pool to ensure connectivity.

Learn destination net, the translation of the destination ip address for incoming connections using a pool of addresses, mapping a public ip to private servers and optionally translating ports.

Configure destination nat on the acars device to translate a public address to the server’s private address using a pool and ruleset, with a proxy and DMZ policy.

Create a one-to-one mapping between internal and public IP subnets that translates source addresses outbound and destination addresses inbound, enabling DMZ servers to receive and initiate connections.

Explore virtual private networks, including why they exist, IPsec standards, and the difference between site-to-site and remote access VPNs, with emphasis on authentication, integrity, confidentiality, and replay protection.

Explore how IPsec VPN uses encryption and authentication to secure data, overviewing DES, 3DES, AES, and MD5/SHA-1; learn phase one and phase two tunnels and IKE.

Explore ipsec vpn concepts, including ike versions, phase one and two, diffie-hellman, pfs, esp vs ah, and tunnel versus transport modes.

Compare policy based vpn and route based vpn, where policy based uses security policies to encrypt traffic, while route based relies on a virtual tunnel interface to route encrypted traffic.

Configure policy-based ip vpn end-to-end using ike phase one and phase two, with ipsec proposals, gateways, security policies, and verification in a lab topology.

Configure route-based vpn by creating a secure tunnel interface, attaching it to a vpn security zone, and defining static routes and ipsec phase one and two policies to enable traffic.

Discover unified threat management, a single device providing antivirus, antispam, content filtering, and web filtering—on-device or in the cloud—to protect users from viruses, trojans, malware, and unapproved websites.

Explore antivirus protection in UTM, comparing on-device antivirus with Sophos cloud protection and SSL forward proxy for HTTPS traffic, and review the high-level configuration steps.

Explore how antispam filtering blocks or tags spam at connection or email level using local allow and block lists and a server based SBL, and configure a UTM policy.

Enable content filtering to block or permit file transfers by mime type, file extensions, and protocol commands. Configure custom objects, a feature profile, and a UTM policy to enforce rules.

Configure local and redirect web filtering to control internet usage, using URL categories and block/allow lists locally, or via a Websense server with UTM and security policies.

Explore enhanced web filtering with the Websense Threat Secret Cloud, learn how category and site reputation drive permit, block, or quarantine actions, and configure lists, reputation rules, and default actions.

Discover J-Web, the Juniper web interface, learn to enable web management via CLI, secure login over https, and monitor, configure ports, security policies, VPN, and reports.

Configure and monitor system and security logs on Junos devices by choosing event mode for local logging or stream mode for remote logging, and selecting text or binary formats.

Security director centralizes management of stateful firewall, utm, ips, and more, enabling policy creation and deployment across multiple devices, with rbac, threat management, and reports to reduce errors.