JNCIS-SEC case studies
JNCIS-SEC · Put your knowledge to work in context.
The Juniper Networks Certified Specialist Security (JNCIS-SEC) is a specialist-level certification in the Juniper certification track, aimed at network and security engineers who design, deploy, and operate SRX Series Firewalls in enterprise environments. It suits candidates who already hold a base-level Juniper credential or have equivalent hands-on SRX experience and want to demonstrate job-ready firewall skills to employers and partners. The JNCIS-SEC case studies are 5 cases and about 2,756 words.
1Warehouse Chassis Cluster Fails to Fail Over on an Upstream ISP Black Hole
Two SRX345s form a chassis cluster at a distribution warehouse. reth0.0 (untrust) and reth1.0 (trust) are in redundancy group 1, and node 0 is primary.
569 words, about 3 min2Retail DMZ Policy Order, Host-Inbound Ping, and Missing Source NAT
A retail chain is commissioning a payment gateway at a store. The SRX345 has ge-0/0/1 in trust (10.20.0.0/24), ge-0/0/2 in dmz (172.20.5.0/24), and ge-0/0/0 in untrust (198.51.100.2/30, default route 198.51.100.1).
542 words, about 3 min3Hairpin Access to a DNAT Web Server from the Trust Zone
A SaaS company hosts a customer portal on an internal web server at 10.0.5.80:8080 in a dmz. The SRX300 interfaces are trust 192.168.10.1/24, dmz 10.0.5.1/24, and untrust 203.0.113.5/29.
559 words, about 3 min4Route-Based IPsec VPN Up but Bulk Transfers Stall
An SRX340 at headquarters and an SRX300 at a branch office build a route-based IPsec VPN. IKEv2 phase 1 and phase 2 are up; st0.0 is in the VPN zone; static routes point 10.2.0.0/16 at st0.0.
535 words, about 3 min5SSL Forward Proxy Breaks Unmanaged Student Devices
A university SRX1500 at the campus edge applies an IPS and antivirus UTM policy to the student-to-untrust security policy. To inspect HTTPS, the administrator enables SSL forward proxy with a locally generated CA and applies the SSL proxy profile in the UTM policy.
551 words, about 3 min