Advanced Filters
Build selective packet processing and filter-based forwarding policies.
JNCIP-Security Certification Training
Master Advanced SRX Security Operations.
Build professional-level expertise in advanced firewall filters, threat prevention, logical systems, and advanced NAT and IPsec on Junos SRX.
SRX Firewall
Policies enforced
Firewall Filters
FBF active
Juniper ATP
Threats mitigated
IPsec VPN
ADVPN tunnels up
user@srx> show security policies
Active policies: 42
Threat status: Clear
9Skill domains
SRXSecurity focus
GuidedLearning path
ExpertTrainer support
Course Overview
Professional-Level Skills for Advanced SRX Security
JNCIP-SEC training builds on JNCIS-SEC fundamentals, giving security professionals advanced knowledge of Junos OS for SRX Series devices, including platform configuration and troubleshooting.
Apply advanced firewall filters
Monitor security policies and zones
Deploy Juniper ATP and SecIntel
Configure logical and tenant systems
Apply Layer 2 security and MACsec
Configure advanced NAT and IPsec VPNs
Your Learning Route
Security Professional Profile
01
FilterAdvanced firewall filters and forwarding
02
DefendEdge security, ATP, and threat mitigation
03
SegmentLogical systems and Layer 2 security
04
ConnectAdvanced NAT and IPsec VPNs
A structured path for engineers securing complex SRX environments.
What You Gain
Practical Advanced SRX Security Skills
Hands-on practice across advanced filters, threat prevention, logical systems, and advanced VPN technologies on Junos SRX.
Threat Prevention
Deploy Juniper ATP, SecIntel, and IPS for proactive threat mitigation.
Logical Systems
Operate LSYS and TSYS for multitenant security architectures.
Advanced VPNs
Configure ADVPNs, hub-and-spoke VPNs, and advanced NAT scenarios.
Course Curriculum
Nine Domains. One Connected Security Path.
Open each route card to explore the skills and practical concepts covered in the programme.
Selective packet processing
Troubleshooting with firewall filters
Filter-based forwarding
Monitoring tools
Logging and tracing
Other security outputs
Collectors
Custom rules
Mitigation actions
Hardware support
Security Intelligence (SecIntel)
Intrusion Prevention System (IPS)
Corero DDoS mitigation
Advanced Threat Prevention (ATP)
Role-Based Access Control (RBAC)
Junos Space Security Director
AAA and SAML integration
Malware identification and mitigation
Malicious lateral traffic identification
Zero trust micro-segmentation
Administrative roles
Security profiles
LSYS communication
Master and tenant admins
TSYS capacity
Transparent mode
Mixed mode
Secure wire
Media Access Control Security (MACsec)
Persistent NAT and DNS doctoring
IPv6 NAT
Remote access and hub-and-spoke VPNs
Public Key Infrastructure (PKI)
Auto Discovery VPNs (ADVPNs)
Routing with IPsec and overlapping IPs
Dynamic gateways and IPsec CoS
Talk to Zetlan
Ready to Become a Security Professional?
Connect with our training team for the course brochure, a free demo, or personalised guidance.