Junos Security

---

Advanced Praise

"I know these authors well. They are out there in the field applying the SRX's industry-leading network security to real world customers everyday. You could not learn from a more talented team of security engineers."
- Mark Bauhaus, EVP and General Manager, Juniper Networks

Junos Security is destined to become the definitive and authoritative reference on Juniper's SRX platforms. You will not find a more comprehensive reference on Junos security than this book."
- James Maze, VP of Systems Engineering & Delivery, Torrey Point Group

About the Book

Junos Security is the complete and authorized introduction to Juniper Network's new SRX hardware series, which runs the Junos operating system. This book not only provides a practical, hands-on field guide to deploying, configuring, and operating SRX, but also serves as a reference to help you prepare for any of the Junos Security Certification examinations offerd by Juniper Networks.

Network administrators and security professionals will learn how to use SRX Junos services gateways to address an array of enterprise data network requirements—including IP routing, intrusion detection, attack mitigation, unified threat management, and WAN acceleration. Junos Security is a clear and detailed roadmap to the SRX product lines.

• Get up to speed on Juniper’s multi-function SRX platforms and SRX Junos software
• Learn case studies and troubleshooting tips from engineers with extensive SRX experience
• Become familiar with SRX security policy, Network Address Translation, and IPSec VPN configuration
• Learn about routing fundamentals and high availability with SRX platforms
• Discover what sets SRX apart from typical firewalls
• Understand the operating system that spans the entire Juniper Networks networking hardware portfolio
• Learn about the more commonly deployed branch series SRX as well as the large Data Center SRX firewalls

About the Authors

Rob Cameron is the technical marketing engineering manager for Juniper Networks’ Data Center Firewall Group, which oversees the data center SRX and high-end NetScreen platforms. In his 10-plus-year career, he has held positions as a security reseller, service provider engineer, and security consultant. For the past five years, he has worked for Juniper Networks as a systems engineer, a data center architect, and a technical marketing engineer. He is the primary author of the books Configuring NetScreen Firewalls and Configuring NetScreen and SSG Firewalls, both published by Syngress. He is also a contributing author of Security Interviews Exposed and the Best Damn Firewall Book Period, Second Edition (also published by Syngress).

Brad Woodberg (JNCIE-M #356, JNCIS-FWV, JNCIS-SSL, JNCIA-IDP, JNCIA-EX, JNCIA-UAC, CCNP R&S) holds a bachelor's degree in computer engineering from Michigan State University and is a technical marketing engineer for Juniper Networks' High End Security Systems organization. Before joining Juniper Networks, he spent four and a half years working at a Juniper reseller where he designed, deployed, sup- ported, and managed computer networks worldwide with equipment from a variety of vendors. In addition to being an author of this book, he is a coauthor of Juniper Net- works NetScreen and SSG Firewalls and Juniper Networks Secure SSL VPN, both pub- lished by Syngress.

Tim Eberhard is a member of the Tier III Ops/Engineering team for the 4G wireless network at Clearwire. Previously, he was a team lead and subject matter expert at Sprint, supporting Sprint's wireless data network for more than five years. He is CCSP, C|EH, JNCIS-FWV, JNCIS-ER, and JNCIS-M certified. He has written two open source software tools utilized by engineers around the world for supporting production networks: the NSSA firewall session analyzer and the TPCAT packet capture analyzer.

Patricio Giecco holds a bachelor's degree in electrical engineering from the Instituto Tecnologico de Buenos Aires and is currently pursuing a master's degree in electrical engineering at UCLA. In his tenure at Juniper he has worked as a solutions engineer designing best-practice security solutions, and he is currently working as a technical marketing engineer for the Branch Solutions Business Unit. With more than 10 years of networking consulting experience working for both vendors and service providers in Latin America, Europe, Asia, and North America, he specializes in network security architecture, routing, and high availability.

James Quinn (JNCIE-M #117, JNCIE-ER #40, CCIE #8919) is a consulting systems engineer for the Strategic Alliances team at Juniper Networks, where he has worked for more than five years. Most recently he was a technical marketing engineer specialist in mobile security for Juniper's High-End Security Systems organization, and before that he represented Juniper's Advanced Services team for several years as the senior resident engineer stationed at one of the largest wireless carriers in the world. Before Juniper, he was a happily itinerant network geek spending years as a senior engineer for a large public university system. Today he travels the world making friends,speaking, teaching, learning everything he can along the way, and helping brilliant people build some of the magic stuff that is our networking future. His specialties are mobility, security, and, when he gets his druthers, dreaming up all manner of networking wizardry.