course overview
Overview
This four-day course is designed to provide students with the knowledge required to implement Juniper Networks vSRX in AWS and Azure environments.
Through demonstrations and hands-on labs, students will gain in-depth knowledge about the manual and automated methods used to deploy the vSRX in multicloud environments.
This course uses various releases of the vSRX as well as Junos Space, Security Director, Policy Enforcer, and ATP Cloud.
Juniper Cloud Networking Security with AWS and Azure (JCNAA) is an intermediate-level course.
Relevant Juniper Product
• Junos OS • Junos Space • Policy Enforcer • Security Director • ATP Cloud • SRX Series
Audience
Individuals who want
• A basic understanding of cloud infrastructure, operations, and terms
• To learn how to securely expand their IT operations into the cloud
Skills Gained
• Describe cloud concepts.
• Describe how virtualization is used in the cloud.
• Describe various security designs used in the cloud.
• Describe the AWS architecture and explain how each tier is used.
• Access the AWS management console.
• Launch AWS EC2 instances.
• Navigate the AWS Marketplace and locateJuniper products.
• Describe the operation of the vSRX in AWS.
• Launch a vSRX instance in AWS.
• Configure a vSRX instance to forward traffic.
• Describe CloudFormation features.
• Describe the CloudFormation template format.
• Describe the basics of JSON and YAML.
• Deploy AWS vSRX instances using a CloudFormation template.
• Describe Microsoft Azure cloud services.
• Describe Microsoft Azure cloud architecture.
• Navigate the Microsoft Azure portal.
• Launch Microsoft Azure virtual machine instances.
• Navigate the Microsoft Azure Marketplace and locate Juniper products.
• List the vSRX offerings in Microsoft Azure.
• Describe prelaunch considerations for the vSRX in Microsoft Azure.
• List the steps required to launch the vSRX in Microsoft Azure.
• Describe the configuration needed for the vSRX to function in Microsoft Azure.
• Describe the Microsoft Azure Resource Manager Features.
• Describe the Microsoft Azure Resource Manager template format.
• Deploy a vSRX instance using Microsoft Azure Resource Manager.
• List different methods used to connect cloud resources.
• Describe secure connection options.
• Establish an IPsec tunnel between an enterprise/SRX and an AWS Virtual Private Gateway.
• Establish an IPsec tunnel between an enterprise SRX and a vSRX instance in AWS.
• List advanced vSRX security features thatare used to protect cloud resources.
• Describe the benefits of Terraform in multicloud environments.
• Deploy and destroy vSRX instances in AWS and Azure using Terraform.
• Describe the components used to implement Juniper Connected Security.
• Configure the components used to support Juniper Connected Security in the cloud.
• Configure Security Director, Policy Enforcer, and ATP Cloud to implement Juniper Connected Security and secure AWS resources.
• Implement an AWS Transit Gateway to connect and secure cloud resources.
• Deploy an AWS Elastic Load Balancer and Auto Scaling Group to provide highly available cloud security capabilities.
Prerequisites
• Basic TCP/IP skills
• Basic understanding of the Junos operating system
• Basic understanding of the SRX Series device and its range of security features
Outline
What is Juniper? Suppliers of high performance, secure and reliable IP networks and products, Juniper Networks provides small, medium and large enterprises with a complete array of networking solutions, from devices to data centres and from consumers to cloud providers.
Running from a single operating (OS) system - JUNOS, Juniper's main products include the Juniper M-Series, Juniper T- Series, Juniper E-Series, Juniper J-Series, Juniper NetScreen, Ethernet Routers, Ethernet switches and firewall security which includes the award winning IDP Series Intrusion Detection and Prevention Appliances.
Juniper currently have 4 main certification tracks: Juniper Networks Certified Internet Expert (JNCIE), Juniper Neworks Certified Internet Professional (JNCIP), Juniper Networks Certified Internet Specialist (JNCIS) and Juniper Networks Certified Internet Associate (JNCIA) and some non-Junos certifications; E Series, Firewall/VPN, SSL, Intrusion Detection and Prevention (IDP), WX Series, Unified Access Control (UAC).
If you need training for 3 or more people, you should ask us about onsite training. Putting aside the obvious location benefit, content can be customised to better meet your business objectives and more can be covered than in a public classroom. Its a cost effective option. One on one training can be delivered too, at reasonable rates.
Submit an enquiry from any page on this site, and let us know you are interested in the requirements box, or simply mention it when we contact you.
All $ prices are in USD unless it’s a NZ or AU date
SPVC = Self Paced Virtual Class
LVC = Live Virtual Class
Our clients have included prestigious national organisations such as Oxford University Press, multi-national private corporations such as JP Morgan and HSBC, as well as public sector institutions such as the Department of Defence and the Department of Health.
