Configuring Juniper Networks Secure Access (CJSA) (16hrs)

Course Overview

This two-day course discusses the configuration of Secure Access (SA) products in a typical network environment. Key topics include SSL access technologies, basic implementation, and configuration and management options. Through demonstrations and hands-on labs, students will gain experience in configuring, testing, and troubleshooting basic facets of the SA products.

Objectives

After successfully completing this course, you should be able to deploy the SA products to support common environments. Specific topics include the following:

Introduction to the SA platform
Introduction to Secure Sockets Layer (SSL) Protocol and Public Key Infrastructure (PKI)
Typical deployment scenarios
SA Terminology
Roles
Role Restrictions
Realms
Resource Policies
Sign-in Policies

Authentication Servers
Local
Lightweight Directory Access Protocol (LDAP)
RADIUS (including two-factor)
NT
Network Information Service (NIS)

Authentication Policies
Host Checker
Cache Cleaner

Client/Server Support
J-SAM
W-SAM
Network Connect

Troubleshooting

Intended Audience

This course is intended for network engineers, support personnel, reseller support, and anyone responsible for implementing SA products.

Course Level

This is an introductory-level course.

Prerequisites

This course assumes that students have moderate background in internetworking basics, security concepts, network administration, and application support.

Course Contents

Course Introduction

Products and Features

Secure Access Overview
IVE Deployment Options
Platforms and Feature Sets
Access Methods

Technology and Terminology

IVE Access Methods
IVE Platform Architecture
IVE Terminology

Initial Configuration

Console Configuration
Administrative U

User Roles

Configuring User Roles
Role Mapping
Customizing the User Experience

Logging and Troubleshooting

Logs
Troubleshooting Tools

Resource Policies

What Is a Resource?
Resource Policy Configuration
Resource Policy Options
Resource Profile Configuration

Servers for Authentication

The Authentication Process
Configuring Authentication

Client and Server Applications

The Need for Client-Server Support
Secure Application Manager
Network Connect
Telnet and SSH
Terminal Services

Endpoint Security

The Juniper Endpoint Defense Initiative
Configuring Host Checker
Configuring Secure Virtual Workspace
Configuring Cache Cleaner
Configuring Authentication Policies
Configuring Role Restrictions