The Juniper Security JNCIE-SEC
Security Infrastructure
- NAT
- Source, destination, static-based
- Overlapping address space
- NAT64 or NAT46
- Security Zones
- Zone-based architecture
- How to secure traffic destined to the SRX Series device
- Security Policy
- Route-based VPN
- Asynchronous routing
- Selective packet mode
- IPSec VPN
- Interoperability
- VPN topologies
- SRX Series Device Setup
- Deployment modes
- System services and access control
- High availability chassis clustering
Security Management
- Traffic Analysis
- Tools (for example, Wireshark)
- Malicious traffic detection
- Network Security Monitoring
- Attack logging and analysis
- Attack mitigation
- Junos Space Security Director
- Report generation
- Device management
Advanced Security
- AppSecure Services
- AppFW, AppTrack
- UTM
- Antivirus, Web filtering
- IDP or IPS
- Signature management
- IDP policy
- Screens
- Attack detection or prevention
- Screen options
- UserFW
- Integrated user firewall
- SSL Proxy
- Client protection
- Sever protection
- Policy Enforcer or Advanced Threat Protection
- Anti-malware protection
- Firewall filters
- Infected host feed
- GeoIP
- Threat intelligence feeds