Juniper Cloud Networking Security with AWS and Azure (JCNAA) [JNP_JUN_JCNAA]

OVERVIEW

This four-day course is designed to provide students with the knowledge required to implement Juniper Networks vSRX in AWS and Azure environments. 

Through demonstrations and hands-on labs, students will gain in-depth knowledge about the manual and automated methods used to deploy the vSRX in multicloud environments. 

This course uses various releases of the vSRX as well as Junos Space, Security Director, Policy Enforcer, and ATP Cloud.

Juniper Cloud Networking Security with AWS and Azure (JCNAA) is an intermediate-level course.

Relevant Juniper Product

• Junos OS • Junos Space • Policy Enforcer • Security Director • ATP Cloud • SRX Series

OBJECTIVES

• Describe cloud concepts. 

• Describe how virtualization is used in the cloud. 

• Describe various security designs used in the cloud. 

• Describe the AWS architecture and explain how each tier is used. 

• Access the AWS management console. 

• Launch AWS EC2 instances. 

• Navigate the AWS Marketplace and locateJuniper products. 

• Describe the operation of the vSRX in AWS. 

• Launch a vSRX instance in AWS. 

• Configure a vSRX instance to forward traffic. 

• Describe CloudFormation features. 

• Describe the CloudFormation template format. 

• Describe the basics of JSON and YAML. 

• Deploy AWS vSRX instances using a CloudFormation template. 

• Describe Microsoft Azure cloud services. 

• Describe Microsoft Azure cloud architecture. 

• Navigate the Microsoft Azure portal. 

• Launch Microsoft Azure virtual machine instances. 

• Navigate the Microsoft Azure Marketplace and locate Juniper products. 

• List the vSRX offerings in Microsoft Azure. 

• Describe prelaunch considerations for the vSRX in Microsoft Azure. 

• List the steps required to launch the vSRX in Microsoft Azure. 

• Describe the configuration needed for the vSRX to function in Microsoft Azure. 

• Describe the Microsoft Azure Resource Manager Features. 

• Describe the Microsoft Azure Resource Manager template format. 

• Deploy a vSRX instance using Microsoft Azure Resource Manager. 

• List different methods used to connect cloud resources. 

• Describe secure connection options. 

• Establish an IPsec tunnel between an enterprise/SRX and an AWS Virtual Private Gateway. 

• Establish an IPsec tunnel between an enterprise SRX and a vSRX instance in AWS. 

• List advanced vSRX security features thatare used to protect cloud resources. 

• Describe the benefits of Terraform in multicloud environments. 

• Deploy and destroy vSRX instances in AWS and Azure using Terraform. 

• Describe the components used to implement Juniper Connected Security. 

• Configure the components used to support Juniper Connected Security in the cloud. 

• Configure Security Director, Policy Enforcer, and ATP Cloud to implement Juniper Connected Security and secure AWS resources. 

• Implement an AWS Transit Gateway to connect and secure cloud resources. 

• Deploy an AWS Elastic Load Balancer and Auto Scaling Group to provide highly available cloud security capabilities.

AUDIENCE

Individuals who want 

• A basic understanding of cloud infrastructure, operations, and terms 

• To learn how to securely expand their IT operations into the cloud

CONTENT

Day 1

Course Introduction 

Cloud Overview 

• Cloud Concepts 

• Cloud Virtualization 

• Cloud Security 

Introduction to AWS 

• Deploy vSRX instances in AWS 

• Explain the operation of an AWS vSRX instance 

• Launch an AWS vSRX instance 

• Configure an AWS vSRX instance 

Lab 1: Introduction to AWS 

Implementing vSRX in AWS 

• Explain the operation of an AWS vSRX instance 

• Launch an AWS vSRX instance 

• Configure an AWS vSRX instance 

Lab 2: Implementing vSRXin AWS

Day 2

AWS CloudFormation 

• Describe AWS CloudFormation 

• Describe CloudFormation templates 

• Describe JSON and YAML fundamentals 

• Use CloudFormation to deploy a vSRX instance 

Lab 3: CloudFormation 

Introduction to Microsoft Azure 

• Describe Microsoft Azure services 

• Describe Microsoft Azure architecture 

• Navigate the Microsoft Azure portal 

• Control Microsoft Azure access 

• Launch a Microsoft Azure resource 

• Locate Juniper Networks products in the Microsoft Azure Marketplace 

Lab 4: Introduction to Microsoft Azure 

Implementing the vSRX in Microsoft Azure 

• Locate the vSRX in the Microsoft Azure Marketplace 

• Describe prelaunch considerations for Microsoft Azure vSRX instances 

• Launch a Microsoft Azure vSRX instance 

• Describe the required vSRX Microsoft Azure configuration 

Lab 5: Implementing vSRX in Microsoft Azure

Day 3

Microsoft Azure Resource Manager 

• Describe Microsoft Azure Resource Manager capabilities 

• Describe Microsoft Azure Resource Manager templates 

• Create Microsoft Azure Resource Manager templates 

• Deploy a vSRX instance using a Microsoft Azure Resource Manager template 

Lab 6: Microsoft Azure Resource Manager 

Cloud Connectivity 

• List cloud connectivity options 

• Describe how IPsec tunnels are established 

• Establish an IPsec tunnel between an enterprise SRX and an AWS VPC 

• Configure an IPsec tunnel between an enterprise SRX and an AWS vSRX instance 

• Use the vSRX to configure an IPsec tunnel between AWS VPCs 

Lab 7: Cloud Connectivity 

AWS Transit Gateway 

• Explain AWS Transit Gateway use cases 

• Deploy AWS Transit Gateways and vSRX instances 

Lab 8: AWS Transit Gateway

Day 4

Load Balancing and Auto Scaling 

• Describe load balancing and auto scaling 

• Implement AWS vSRX instances auto scaling and load balancing 

Terraform 

• Terraform Overview 

• HashiCorp Configuration Language 

• Terraform Infrastructure Management 

• vSRX Deployment using Terraform 

Lab 9: Terraform 

Advanced Cloud Security 

• Describe Juniper Connected Security 

• Configure AWS components for Juniper Connected Security 

• Implement Juniper Connected Security with Advanced Threat Prevention 

Lab 10: Advanced Cloud Security