smart Z
asked on
I want to practice juniper firewall SSG 5
Hello there,
Does anyone know some basic tutorial on how to configure juniper firewalls. I have the hardware and I would like to play with it using a console cable.
Any help will be appreciated.
Does anyone know some basic tutorial on how to configure juniper firewalls. I have the hardware and I would like to play with it using a console cable.
Any help will be appreciated.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Qlemo
I really would start with the basic chapters of Juniper's Concepts & Examples. The issue is that you need to get a basic understanding of the concepts used (in particular zones and policies), before doing anything sensible.
You might also want to ask someone to upload a "vanilla" configuration file. It's reasonably readable or at least will be after you ponder the CLI docs. If you load it into a machine then you can browse the settings that have resulted using the GUI.
Configuration/Update/Confi
But, I don't think it will be easy to understand without using the GUI. For learning that should help. That said, there are some detailed level things that the GUI can't do and you have to use the CLI.
If you expect the SSG-5 to provide antivirus scanning or web filtering then that's perhaps "step 2".
I've been using them for years (with Juniper support). For the most part, my simple "model" of the SSG-5 translates from a commodity router to something like:
Trust Zone is for the LAN
Untrust Zone is for the WAN/Internet
I would pay attention to the "vanilla" system Policies. They are built up out of things like Trust Zone addresses that are set up in Policy/Policy Elements/Addresses.
Configuration/Update/Confi
But, I don't think it will be easy to understand without using the GUI. For learning that should help. That said, there are some detailed level things that the GUI can't do and you have to use the CLI.
If you expect the SSG-5 to provide antivirus scanning or web filtering then that's perhaps "step 2".
I've been using them for years (with Juniper support). For the most part, my simple "model" of the SSG-5 translates from a commodity router to something like:
Trust Zone is for the LAN
Untrust Zone is for the WAN/Internet
I would pay attention to the "vanilla" system Policies. They are built up out of things like Trust Zone addresses that are set up in Policy/Policy Elements/Addresses.