Course: Juniper Security Associate (JNCIA-SEC) based on version 22.1R1.10
Lesson: 6. Juniper SRX Screen Options and Configuration
website link: https://lnkd.in/ech9CHMN
youtube link: https://lnkd.in/e7XJ5rMr
overview:
Juniper SRX screen options provide the ability to detect and prevent attacks primarily at Layer 3 and Layer 4. between them, the most well-known attacks are ICMP flood, UDP flood and TCP syn flood.
Juniper SRX screen policy is the first policy applied to traffic in the ingress direction of the interface for both packets from new sessions or belonging to the existing sessions.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
... To Be Continued
Lesson: 6. Juniper SRX Screen Options and Configuration
website link: https://lnkd.in/ech9CHMN
youtube link: https://lnkd.in/e7XJ5rMr
overview:
Juniper SRX screen options provide the ability to detect and prevent attacks primarily at Layer 3 and Layer 4. between them, the most well-known attacks are ICMP flood, UDP flood and TCP syn flood.
Juniper SRX screen policy is the first policy applied to traffic in the ingress direction of the interface for both packets from new sessions or belonging to the existing sessions.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
... To Be Continued
Course: Juniper Security Associate (JNCIA-SEC) based on version 22.1R1.10
Lesson: 7. Juniper SRX Policy Configuration
website link: https://lnkd.in/eg89H-pE
youtube link: https://lnkd.in/e6fB_mvJ
overview:
Juniper SRX security policy is the main task of the SRX device to control traffic between zones.
Unlike firewall filter it works stateful. That means you only have to permit from the initiator zone to the destination zone. Return traffic is automatically allowed based on the session table.
In this section we will learn how to configure security policy. security policy monitoring will be discussed in the next specific section because of its importance.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
7. Juniper SRX Policy Configuration
... To Be Continued
Lesson: 7. Juniper SRX Policy Configuration
website link: https://lnkd.in/eg89H-pE
youtube link: https://lnkd.in/e6fB_mvJ
overview:
Juniper SRX security policy is the main task of the SRX device to control traffic between zones.
Unlike firewall filter it works stateful. That means you only have to permit from the initiator zone to the destination zone. Return traffic is automatically allowed based on the session table.
In this section we will learn how to configure security policy. security policy monitoring will be discussed in the next specific section because of its importance.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
7. Juniper SRX Policy Configuration
... To Be Continued
Course: Juniper Security Associate (JNCIA-SEC) based on version 22.1R1.10
Lesson: 8. Monitoring and Troubleshooting Security Policies in Juniper SRX
website link: https://lnkd.in/e_QNwEgK
youtube link: https://lnkd.in/eMrPSFzY
overview:
Monitoring and troubleshooting security policies on Juniper SRX device is critical especially when you have a problem in a connection through SRX device.
In this section we will learn five practical commands, specific for the purpose of security policy monitoring and troubleshooting.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
7. Juniper SRX Policy Configuration
8. Monitoring and Troubleshooting Security Policies in Juniper SRX
... To Be Continued
Lesson: 8. Monitoring and Troubleshooting Security Policies in Juniper SRX
website link: https://lnkd.in/e_QNwEgK
youtube link: https://lnkd.in/eMrPSFzY
overview:
Monitoring and troubleshooting security policies on Juniper SRX device is critical especially when you have a problem in a connection through SRX device.
In this section we will learn five practical commands, specific for the purpose of security policy monitoring and troubleshooting.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
7. Juniper SRX Policy Configuration
8. Monitoring and Troubleshooting Security Policies in Juniper SRX
... To Be Continued
Course: Juniper Security Associate (JNCIA-SEC) based on version 22.1R1.10
Lesson: 9. Juniper SRX Global Security Policy
website link: https://lnkd.in/eds25EgT
youtube link: https://lnkd.in/e-tbZgqN
overview:
Juniper SRX global security policy gives the capability to write policies to control traffic but independent of the zone-pair. Global policy can be also used to be applied to multiple zone-pait at once.
It is important to notice that global policy is processed after normal inter-zone policy and before default deny-all policy.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
7. Juniper SRX Policy Configuration
8. Monitoring and Troubleshooting Security Policies in Juniper SRX
9. Juniper SRX Global Security Policy
... To Be Continued
Lesson: 9. Juniper SRX Global Security Policy
website link: https://lnkd.in/eds25EgT
youtube link: https://lnkd.in/e-tbZgqN
overview:
Juniper SRX global security policy gives the capability to write policies to control traffic but independent of the zone-pair. Global policy can be also used to be applied to multiple zone-pait at once.
It is important to notice that global policy is processed after normal inter-zone policy and before default deny-all policy.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
7. Juniper SRX Policy Configuration
8. Monitoring and Troubleshooting Security Policies in Juniper SRX
9. Juniper SRX Global Security Policy
... To Be Continued
نام دوره: اتوماسیون شبکه با زبان پایتون و کتابخانه Nornir
25- بررسی ساختار YANG با ابزار yangsuite
برای اتوماسیون شبکه با پروتکل هایی که از ساختار YANG استفاده می کنند، بسیار مهم است که بدانیم با چه YANG data model ای قصد داریم اتوماسیون انجام دهیم و یا اینکه کدام بخش از این data model برای اتوماسیون مورد استفاده قرار می گیرد.
https://www.youtube.com/watch?v=mTUs22rAnxM
در بخش قبل با ابزار pyang اشنا شدیم. در این بخش با ابزار yangsuite آشنا می شویم که به ما این قابلیت را می دهد که بتوانیم ساختار درختی data model مورد نظر خود را مشاهده کرده و مسیر و یا ساختار xml اطلاعات مورد نظر خود را استخراج کنیم. این مسیر و یا ساختار xml برای اتوماسیون ضروری است و بسیار حائز اهمیت است
مزیت این ابزار نسبت به ابزار pyang در آن است که شما می توانید بدون دانش پایتون از پروتکل های netconf، restconf و gnmi استفاده کرده و ساختار yang را بخوانیدو یا دستکاری کنید.
ساختاری که در اختیار شما قرار می گیرد به راحتی قابل استفاده در نرم افزار python خواهد بود
25- بررسی ساختار YANG با ابزار yangsuite
برای اتوماسیون شبکه با پروتکل هایی که از ساختار YANG استفاده می کنند، بسیار مهم است که بدانیم با چه YANG data model ای قصد داریم اتوماسیون انجام دهیم و یا اینکه کدام بخش از این data model برای اتوماسیون مورد استفاده قرار می گیرد.
https://www.youtube.com/watch?v=mTUs22rAnxM
در بخش قبل با ابزار pyang اشنا شدیم. در این بخش با ابزار yangsuite آشنا می شویم که به ما این قابلیت را می دهد که بتوانیم ساختار درختی data model مورد نظر خود را مشاهده کرده و مسیر و یا ساختار xml اطلاعات مورد نظر خود را استخراج کنیم. این مسیر و یا ساختار xml برای اتوماسیون ضروری است و بسیار حائز اهمیت است
مزیت این ابزار نسبت به ابزار pyang در آن است که شما می توانید بدون دانش پایتون از پروتکل های netconf، restconf و gnmi استفاده کرده و ساختار yang را بخوانیدو یا دستکاری کنید.
ساختاری که در اختیار شما قرار می گیرد به راحتی قابل استفاده در نرم افزار python خواهد بود
Course: Juniper Security Associate (JNCIA-SEC) based on version 22.1R1.10
Lesson: 10. Juniper SRX Application Firewall
website link: https://lnkd.in/exF6iKEq
youtube link: https://lnkd.in/eH3J8Kgg
overview:
Juniper SRX application firewall provides the capability to control traffic at application layer.
In the traditional firewall that we have configured so far, we have had the ability to control traffic only at Layer 3 and Layer 4.
Application layer traffic control is possible using application signatures prepared by Juniper.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
7. Juniper SRX Policy Configuration
8. Monitoring and Troubleshooting Security Policies in Juniper SRX
9. Juniper SRX Global Security Policy
10. Juniper SRX Application Firewall
... To Be Continued
Lesson: 10. Juniper SRX Application Firewall
website link: https://lnkd.in/exF6iKEq
youtube link: https://lnkd.in/eH3J8Kgg
overview:
Juniper SRX application firewall provides the capability to control traffic at application layer.
In the traditional firewall that we have configured so far, we have had the ability to control traffic only at Layer 3 and Layer 4.
Application layer traffic control is possible using application signatures prepared by Juniper.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
7. Juniper SRX Policy Configuration
8. Monitoring and Troubleshooting Security Policies in Juniper SRX
9. Juniper SRX Global Security Policy
10. Juniper SRX Application Firewall
... To Be Continued
نام دوره: اتوماسیون شبکه با زبان پایتون و کتابخانه Nornir
28- مشاهده بخشی از خروجی Netconf با استفاده از فیلتر xpath و دستور Netconf_get
در دو بخش قبلی یاد گرفتیم که چطور می توانیم با استفاده از Netconf خروجی کانفیگ یک دستگاه شبکه رو برگردانیم. در بخش قبلی یاد گرفتیم بخشی از خروج کانفیگ که مد نظر ما است را با استفاده از فیلترینگ xpath برگردانیم.
https://www.youtube.com/watch?v=4ns5hIL-3wE
در این بخش مجددا می خواهیم از فیلترینگ xpath برای مشاهده بخشی از خروجی بهره ببریم. اما به جای خروجی کانفیگ می خواهیم خروجی آماری را مشاهده کنیم. مثل تعداد بایت های ورودی به یک اینترفیس
به همین دلیل به جای دستور Netconf_get_config که در بخش قبل از آن استفاده شده است، در این بخش از دستور Netconf_get استفاده می شود که علاوه بر خروجی کانفیگ قادر است خروجی های آماری را نیز برگرداند.
28- مشاهده بخشی از خروجی Netconf با استفاده از فیلتر xpath و دستور Netconf_get
در دو بخش قبلی یاد گرفتیم که چطور می توانیم با استفاده از Netconf خروجی کانفیگ یک دستگاه شبکه رو برگردانیم. در بخش قبلی یاد گرفتیم بخشی از خروج کانفیگ که مد نظر ما است را با استفاده از فیلترینگ xpath برگردانیم.
https://www.youtube.com/watch?v=4ns5hIL-3wE
در این بخش مجددا می خواهیم از فیلترینگ xpath برای مشاهده بخشی از خروجی بهره ببریم. اما به جای خروجی کانفیگ می خواهیم خروجی آماری را مشاهده کنیم. مثل تعداد بایت های ورودی به یک اینترفیس
به همین دلیل به جای دستور Netconf_get_config که در بخش قبل از آن استفاده شده است، در این بخش از دستور Netconf_get استفاده می شود که علاوه بر خروجی کانفیگ قادر است خروجی های آماری را نیز برگرداند.
Course: Juniper Security Associate (JNCIA-SEC) based on version 22.1R1.10
Lesson: 11. Juniper SRX IDP Configuration
website link: https://lnkd.in/e3u_VxxB
youtube link: https://lnkd.in/e7nrhKHJ
overview:
Juniper SRX IDP (Intrusion Detection and Prevention) gives the capability to inspect network traffic to make sure that they are not malicious or intrusions.
In this section we will learn how to download and install IDP signatures and how they are used in security policies.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
7. Juniper SRX Policy Configuration
8. Monitoring and Troubleshooting Security Policies in Juniper SRX
9. Juniper SRX Global Security Policy
10. Juniper SRX Application Firewall
11. Juniper SRX IDP Configuration
... To Be Continued
Lesson: 11. Juniper SRX IDP Configuration
website link: https://lnkd.in/e3u_VxxB
youtube link: https://lnkd.in/e7nrhKHJ
overview:
Juniper SRX IDP (Intrusion Detection and Prevention) gives the capability to inspect network traffic to make sure that they are not malicious or intrusions.
In this section we will learn how to download and install IDP signatures and how they are used in security policies.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
7. Juniper SRX Policy Configuration
8. Monitoring and Troubleshooting Security Policies in Juniper SRX
9. Juniper SRX Global Security Policy
10. Juniper SRX Application Firewall
11. Juniper SRX IDP Configuration
... To Be Continued
Course: Juniper Security Associate (JNCIA-SEC) based on version 22.1R1.10
Lesson: 12. Juniper SRX Policy Rematch
website link: https://lnkd.in/ecqAwGmk
youtube link: https://lnkd.in/eVY-hmbJ
overview:
Juniper SRX Policy Rematch feature allows SRX device to re-evaluate active sessions whose associated policy has changed. Therefore, active sessions with changed policy will remain open if they are still allowed to be forwarded, otherwise they will be closed.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
7. Juniper SRX Policy Configuration
8. Monitoring and Troubleshooting Security Policies in Juniper SRX
9. Juniper SRX Global Security Policy
10. Juniper SRX Application Firewall
11. Juniper SRX IDP Configuration
12. Juniper SRX Policy Rematch
... To Be Continued
Lesson: 12. Juniper SRX Policy Rematch
website link: https://lnkd.in/ecqAwGmk
youtube link: https://lnkd.in/eVY-hmbJ
overview:
Juniper SRX Policy Rematch feature allows SRX device to re-evaluate active sessions whose associated policy has changed. Therefore, active sessions with changed policy will remain open if they are still allowed to be forwarded, otherwise they will be closed.
TOC:
1. Juniper SRX Series Devices and Features
2. Juniper SRX Traffic Flow
3. Juniper SRX Seccurity Zones Concept and Configuration
4. Juniper SRX Address Book Concept and Configuration
5. Juniper SRX applications and application-set object
6. Juniper SRX Screen Options and Configuration
7. Juniper SRX Policy Configuration
8. Monitoring and Troubleshooting Security Policies in Juniper SRX
9. Juniper SRX Global Security Policy
10. Juniper SRX Application Firewall
11. Juniper SRX IDP Configuration
12. Juniper SRX Policy Rematch
... To Be Continued
نام دوره: اتوماسیون شبکه با زبان پایتون و کتابخانه Nornir
31- تغییر کانفیگ تجهیزات با استفاده از Netconf_edit_config
در بخش های قبلی چگونگی مشاهده خروجی کانفیک و یا خروجی آماری تحهیزات را با استفاده از netconf_get و netconf_get_conf بررسی کردیم.
https://youtu.be/CfNlzuN3cKE
در این بخش قصد داریم نسبت به تغییر کانفیگ تجهیزات با استفاده از دستور Netconf_edit_config اقدام کنیم
تغییر کانفیگ را هم با کتابخانه Netconf مربوط به scrapli و هم nornir Netconf بررسی خواهیم کرد.
31- تغییر کانفیگ تجهیزات با استفاده از Netconf_edit_config
در بخش های قبلی چگونگی مشاهده خروجی کانفیک و یا خروجی آماری تحهیزات را با استفاده از netconf_get و netconf_get_conf بررسی کردیم.
https://youtu.be/CfNlzuN3cKE
در این بخش قصد داریم نسبت به تغییر کانفیگ تجهیزات با استفاده از دستور Netconf_edit_config اقدام کنیم
تغییر کانفیگ را هم با کتابخانه Netconf مربوط به scrapli و هم nornir Netconf بررسی خواهیم کرد.