ScreenOS Cookbook [Paperback]

Stefan Brunner (Author), Vik Davar (Author), Joe Kelly (Author), Ken Draper (Author), David Delcourt (Author), Sunil Wadhwa (Author)

Book Description

ISBN-10: 0596510039 | ISBN-13: 978-0596510039 | Publication Date: March 4, 2008 | Edition: 1

Written by key members of Juniper Network's ScreenOS development team, this one-of-a-kind Cookbook helps you troubleshoot secure networks that run ScreenOS firewall appliances. Scores of recipes address a wide range of security issues, provide step-by-step solutions, and include discussions of why the recipes work, so you can easily set up and keep ScreenOS systems on track.

ScreenOS Cookbook gives you real-world fixes, techniques, and configurations that save time -- not hypothetical situations out of a textbook. The book comes directly from the experience of engineers who have seen and fixed every conceivable ScreenOS network topology, from small branch office firewalls to appliances for large core enterprise and government, to the heavy duty protocol driven service provider network. Its easy-to-follow format enables you to find the topic and specific recipe you need right away and match it to your network and security issue.

Topics include:

• Configuring and managing ScreenOS firewalls
• NTP (Network Time Protocol)
• Interfaces, Zones, and Virtual Routers
• Mitigating Denial of Service Attacks
• DDNS, DNS, and DHCP
• IP Routing
• Policy-Based Routing
• Elements of Policies
• Authentication
• Application Layer Gateway (SIP, H323, RPC, RTSP, etc.,)
• Content Security
• Managing Firewall Policies
• IPSEC VPN
• RIP, OSPF, BGP, and NSRP
• Multicast -- IGPM, PIM, Static Mroutes
• Wireless

Along with the usage and troubleshooting recipes, you will also find plenty of tricks, special considerations, ramifications, and general discussions of interesting tangents and network extrapolation. For the accurate, hard-nosed information you require to get your ScreenOS firewall network secure and operating smoothly , no book matches ScreenOS Cookbook.

Editorial Reviews

About the Author

Stefan Brunner has been a technology consultant for more than 15
years, helping enterprises to leverage technology for their business
model and deploy technology solutions. Stefan is the lead architect
in Juniper Networks' Service Layer Technology Professional Services
group. Prior to Juniper, Stefan worked with NetScreen Technologies as
a network security consultant. Stefan holds an MBA in innovations
research and technology management from Ludwig-Maximilians-University
of Munich, and a certificate degree in telecommunications engineering
from the University of California at Berkeley. He lives with his wife
and daughter in the Hill Country of Austin, Texas.

Vik Davar has been working in the IT field for more than 15 years,
holding positions in financial services firms and technology
companies including Juniper Networks and Goldman Sachs. Vik is the
president of 9 Networks, an IT services company. He has a master's
degree in electrical engineering from Columbia University and a
bachelor's degree in electrical engineering from The Cooper Union in
New York City. He is also a CISSP and CCIE# 8377. He lives in New
Jersey with his wife and two children.

David Delcourt has worked in the data communications industry for the
past 13 years for enterprise equipment vendors including Cabletron
Systems and NetScreen Technologies. He has held a variety of
positions, including advanced TAC engineer, technical trainer, and
product manager at Cabletron Systems, and senior security consultant
at NetScreen Technologies. He is currently the security practice
manager in Professional Services for Juniper Networks, supporting the
Americas. He lives in New Hampshire with his wife and daughter, and
their two dogs and two cats.

Ken Draper has spent the past 20 years in the networking industry,
and has focused on security solutions for the past 11 years. He is
CISSP certification #22627 and holds numerous other certifications.
Ken has worked at such networking equipment manufacturers as
Infotron, Gandalf, Synoptics, Bay Networks, Nortel, NetScreen, and
now Juniper Networks. He has more than six years of experience with
ScreenOS and large-scale security solutions, he has held a variety of
technical engineering positions including systems engineer and
solutions architect, and he is currently a Juniper Networks
consulting engineer specializing in the large-scale virtual private
network (VPN), firewall, intrusion prevention, and centralized
management markets. Ken lives outside Dallas with his wife and two
dogs.

Joe Kelly has been involved in data networking for more than 12
years, focusing on the realms of network security and routing. He
started his career in the service provider space at IDT Corporation,
where he held roles in network operations and engineering. After IDT,
he spent time with various network service providers in engineering
and architectural capacities. In 2001, Joe joined NetScreen
Technologies as a senior systems engineer in the Financial and
Service Provider verticals, where he specialized in high- availability, high-performance networks. Joe joined Juniper Networks
in 2004 with the acquisition of NetScreen, and he is currently the
technical lead on the Global Banking and Finance team. He lives in
New Jersey with his beautiful wife, Jacqueline, and his three
children, Hannah, Ben, and Tristan.

Sunil Wadhwa has been in the data networking industry for more than
13 years, focusing on systems, network routing, and security in
enterprise and service provider organizations. He started his career
in India at GTL Limited and SAP India, and then held a variety of
roles in technical support, network operations, and engineering. He
moved to the United States and worked with E4E as a network
consultant for routing and security, and then joined Juniper Networks
as an advanced technical support engineer for firewall/VPN products.
He currently leads the Advance Technical Support team for Juniper
Networks, supporting enhanced services products. He lives in
California with his beautiful wife, Lavanya, and little angel
daughter, Sneha.

Product Details

• Paperback: 848 pages
• Publisher: O'Reilly Media; 1 edition (March 4, 2008)
• Language: English
• ISBN-10: 0596510039
• ISBN-13: 978-0596510039
• Product Dimensions: 7 x 9.2 x 1.8 inches
• Shipping Weight: 2.7 pounds (View shipping rates and policies)
• Average Customer Review: 4.8 out of 5 stars  See all reviews (11 customer reviews)
• Amazon Best Sellers Rank: #409,953 in Books (See Top 100 in Books)

Customer Reviews

Most Helpful Customer Reviews

2 of 2 people found the following review helpful:

5.0 out of 5 stars This book is a must have for ScreenOS users., April 16, 2008

By 

Joseph D. Green (Los Angeles, CA) - See all my reviews
(REAL NAME)   

This review is from: ScreenOS Cookbook (Paperback)

Simply put, anyone who is currently evaluating or managing ScreenOS based Firewalls should own this book and have it close by.

The 1st chapter of the book alone shows the most useful commands that every administrator needs to know. It also details the architecture of ScreenOS which is the key to creating and implementing a relevant security policy in any network.

The book is well written and organized with CLI commands in bold and CLI responses in plain text which make it easy to differentiate what the user should be typing and what they should be seeing. (There are also some GUI screen shots in the book as well.) The book has excellent examples of packet walks, O.S. Architecture, and network diagrams.

A huge benefit of the book is that it doesn't bore the user with the history of the Internet or TCP/IP, etc. It jumps right in to specific examples and configuration guidelines relevant to what the chapter is trying to cover. The book is also very current and covers almost the latest version of ScreenOS. A great example is that there is an excellent chapter on configuring NSRP (HA) with Dynamic Routing Protocols (to sync routes from DRP's) and how that is configured in ScreenOS 6.0 which was the first release to support that feature. ScreenOS 6.0 is a very current release of ScreenOS.

As a user of ScreenOS for 5 years, I can absolutely say this book will be a welcome addition to my library!

Last note: Chapter 21 covers VSYS or Virtual Systems which is a major strength of ScreenOS and not well understood by many users. That chapter alone makes the book worth the cost.

2 of 2 people found the following review helpful:

5.0 out of 5 stars A must have book, March 29, 2008

By 

Tim Eberhard (Kansas City) - See all my reviews
(REAL NAME)   

This review is from: ScreenOS Cookbook (Paperback)

This is the first worth while ScreenOS book on the market. The first two versions of Rob Cameron's Netscreen book were decent but lacking the true depth and hands on knowledge.

Like most cookbooks this is a no nonsense guide to configuring certain aspects of the firewalls. If you need to know how to debug and read the output this book will tell you. There is also a fair amount of detail put into explaining certain configurations and what each configuration entry does.

The book is written by some of the most knowledgeable ScreenOS guys in the industry. Stefan Brunner is well known both inside and outside of Juniper. Stefan and his peers have done an excellent job putting together a must have book for anyone working on the ScreenOS firewalls.

Tim

1 of 1 people found the following review helpful:

5.0 out of 5 stars The best Netscreen book out there, March 4, 2008

By 

Edward Dembowski (New York, NY USA) - See all my reviews
(REAL NAME)   

This review is from: ScreenOS Cookbook (Paperback)

This book is a must have for anyone doing serious work with Netscreen firewalls. The attack mitigation section as well as the HA configuration chapters are especially helpful. The Multicast chapter is indispensable for anyone needing to do multicast on firewall.