Course Overview
The two-day CJSA course discusses the configuration of Secure Access (SA) products in a typical network environment. Key topics include SSL access technologies, basic implementation, and configuration and management options. Through demonstrations and hands-on labs, students will gain experience in configuring, testing, and troubleshooting basic facets of the SA products.
Key topics include SSL access technologies, implementation and configuration of devices, and management options. Through demonstrations and hands on labs, students will gain experience in configuring, testing and troubleshooting basic facets of the SSL product.
Course Topics
- Introduction to SSL protocol and PKI
- Typical deployment scenarios
- SA terminology
- Roles
- Role restrictions
- Realms
- Resource policies
- Sign-in policies
- Authentication servers
- Local
- Lightweight Directory Access Protocol (LDAP)
- RADIUS (including two-factor)
- NT
- Network Information Service (NIS)
- Authentication policies
- Host Checker
- Cache Cleaner
- Client/server support
- J-SAM
- W-SAM
- Network Connect
- Troubleshooting
Course Outline
Day 1
Chapter 1: Course Introduction
Chapter 2: Products and Features
- Secure Remote Access Overview
- SSL VPN Deployment Options
- SA Series Platforms and Feature Sets
Chapter 3: Technology and Terminology
- SSL and TLS Overview
- SSL VPN Access Methods
- SSL VPN Platform Architecture
- SSL VPN Terminology
Chapter 4: Initial Configuration
- Console Configuration
- Administrative UI
Chapter 5: User Roles
- Configuring User Roles
- Role Mapping
- Customizing the User Experience
Chapter 6: Logging and Troubleshooting
- Logs
- Troubleshooting Tools
Day 2
Chapter 7: Resource Policies
- Resource Policy Configuration
- Resource Policy Options
- Resource Profile Configuration
Chapter 8: Authentication Options
- The Authentication Process
- Configuring Authentication
Chapter 9: Client and Server Applications
- The Need for Client/Server Support
- Secure Application Manager
- Network Connect
- Telnet and SSH
- Terminal Services
Chapter 10: Endpoint Security
- The TNC Architecture
- Configuring Host Checker
- Configuring Enhanced Endpoint Security
- Configuring Secure Virtual Workspace
- Configuring Cache Cleaner
- Configuring Authentication Policies
- Configuring Role Restrictions
Target Audience
Network engineers, technical support personnel, reseller support engineers, and others responsible for implementing
and or maintaining the Juniper Networks products covered in this course.
This course is available as open-enrollment Classroom event, instructor-led Live Virtual Class, REAL-ILT™ or as part
of a custom Onsite Training for up to 16 students.
Prerequisites
This course assumes that students understand internetworking basics, security concepts, network administration, and application support.