Fundamental Security Concepts

Describe the various tenets of common security features

• Access control lists
• Stateful security policies
• ALG’s
• IPS
• UTM
• NAT
• IPsec
• Next-generation firewall
• Screen

Advanced Security Concepts

Describe advanced security features

• Security intelligence (e.g., cloud security, Sky ATP, JATP)
• Advanced anti-malware
• Defense in-depth

Securing the Campus and Branch

Describe the security design considerations within a campus or branch network

• Network segmentation (e.g., SDSN)
• Network access
• Wireless
• 802.1X
• Remote access VPNs
• NAT
• End-to-end security
• BYOD

Securing the Enterprise WAN

Describe the security design considerations for an enterprise WAN

• Internet edge security design principles
• WAN aggregation
• Private WAN
• VPNs

Securing the Service Provider WAN

Describe the security design considerations for a service provider WAN

• DoS/DDos attacks
• Securing the control plane
• Internet security
• CG-NAT

Securing the Data Center

Describe the security design considerations in a data center

• Securing data center interconnects
• Securing North-South flows
• Securing East-West flows
• Virtual routers

Security Automation and Management

Describe the design considerations for security management

• Securing the individual devices
• Centralized security
• Junos Space management platform
• Junos Space Security Director and Log Director
• Juniper Secure Analytics

Describe the design considerations for automating security.

• Simplifying deployment
• On-box automation
• Off-box automation

Security Virtualization

Describe the security design considerations for a virtualized environment

• NFV
• Service chaining
• Micro-segmentation
• vSRX

High Availability

Describe the design considerations of high availability in a secure networks

• Physical high availability
• Virtual high availability
• Asymmetrical traffic handling
• Chassis clustering