The Junos Edge Security Services (JESS) training course provides the knowledge required to configure and manage edge security services on devices running the Junos operating system. This course focuses on the main configuration components of edge security services, including service set configuration and service processing, stateful firewall services, IPsec services, threat management, CGN technologies, software technologies, high availability, and load balancing.
By attending Junos Edge Security Services (JESS) workshop, delegates will learn to:
- Provide an overview of security features enabled using MX Series services.
- Describe services, service sets, and service interfaces.
- Enable MX Series services.
- Describe the packet processing through services on MX Series devices employing security services.
- Demonstrate knowledge of stateful firewall traffic flows through an MX Series device.
- Implement stateful firewall rules on MX Series devices.
- Provide an overview of IPsec technology.
- Configure and monitor IPsec operation on an MX Series device.
- Troubleshoot IPsec operations.
- Provide an overview of application awareness services on MX Series devices.
- Implement Application-Aware Access Lists on MX Series devices.
- Describe how to mitigate IPv4 address exhaustion.
- Explain how to implement NAT.
- Describe the different CGN implementations.
- Describe how to implement NAT444.
- Explain how to implement NAT64.
- Describe how to implement 6rd.
- Explain how to implement DS-Lite.
- Describe MS PIC redundancy.
- Explain how to implement CGN logging.
- Describe various NAT pool and port options.
- Describe ECMP load-balancing as it pertains to CGN.
- Explain VRF-based CGN deployments.
- Explain HA availability as it pertains to CGN.
- Experience working with the Junos OS
- Experience with security concepts such as stateful firewall, IPsec, and NAT
- Familiarity with dynamic routing protocols, MPLS VPNs, and Junos policy
- Attend a training on Junos Intermediate Routing (JIR) or equivalent practical experience
This Junos Edge Security Services (JESS) class is meant for those responsible for configuring and monitoring devices running the Junos OS and specifically, the Junos Services Framework.