TOPICS

Course Outline
1. IPS Functionality
Reasons for Network Attacks
Categories of Attacks
Anatomy of an Attack
IPS Mechanisms on SRX Series Devices
2. Initial Device Configuration
Deployment Options for IPS Functionality
Management Options
Network Settings
Preparing the SRX Series Device for IPS Features
3. IPS Terminology and Concepts
Attack Objects
IPS Rulebase Details
Rule Match Conditions
Rule Actions
Terminal Rules
IP Actions
Notification
IPS Traffic Flow
4. IPS Attack Objects
IPS Rules and Rulebases
Attack Objects
Custom Signatures
5. Scanning and Reconnaissance
Types of Scans
Fingerprinting
IPS Scan Prevention
6. Blocking Evasion Techniques and DoS
FIN Scans
IP Spoofing
IP Source Routing Options
DoS and DDoS Attacks
Mechanisms for Blocking DoS and DDoS
7. Reporting
NSM Reports
Junos Syslog and Operational Commands
8. Junos Security Review
Junos Security Components
Selective Packet-Based Forwarding
Junos Layer 2 Packet Handling
9. Security Policy Components
Application Layer Gateways (ALGs)
Junos ALGs
Custom Application Definitions
Advanced Addressing
Policy Matching
10. Virtualization
Routing Instances
Filter-Based Forwarding
11. Advanced NAT Concepts
Beyond Layer 3 and Layer 4 Headers
Advanced NAT Scenarios
12. High Availability Clustering
High Availability
Chassis Clustering Implementations
Advanced HA Topics
13. IPsec Implementations
Standard VPN Implementations
Public Key Infrastructure
Hub-and-Spoke VPNs
14. Enterprise IPsec Technologies
Group VPN
GDOI Protocol
Group VPN Configuration and Monitoring
Dynamic VPN Implementation
15. IPsec VPN Case Studies and Solutions
Routing over VPNs
IPsec with Overlapping Addresses
Dynamic Gateway IP Addresses
Enterprise VPN Deployment Tips and Tricks
16. Troubleshooting Junos Security
Troubleshooting Methodology
Troubleshooting Tools
Identifying IPsec Issues
17. SRX Series Hardware and Interfaces
Branch SRX Platform
High End SRX Platform
SRX Traffic Flow and Distribution
SRX Interfaces.