Product Description: Written by key members of Juniper Network's ScreenOS development team, this one-of-a-kind Cookbook helps you troubleshoot secure networks that run ScreenOS firewall appliances. Scores of recipes address a wide range of security issues, provide step-by-step solutions, and include discussions of why the recipes work, so you can easily set up and keep ScreenOS systems on track. ScreenOS Cookbook gives you real-world fixes, techniques, and configurations that save time -- not hypothetical situations out of a textbook. The book comes directly from the experience of engineers who have seen and fixed every conceivable ScreenOS network topology, from small branch office firewalls to appliances for large core enterprise and government, to the heavy duty protocol driven service provider network. Its easy-to-follow format enables you to find the topic and specific recipe you need right away and match it to your network and security issue. Topics include: Configuring and managing ScreenOS firewalls NTP (Network Time Protocol) Interfaces, Zones, and Virtual Routers Mitigating Denial of Service Attacks DDNS, DNS, and DHCP IP Routing Policy-Based Routing Elements of Policies Authentication Application Layer Gateway (SIP, H323, RPC, RTSP, etc., ) Content Security Managing Firewall Policies IPSEC VPN RIP, OSPF, BGP, and NSRP Multicast -- IGPM, PIM, Static Mroutes Wireless Along with the usage and troubleshooting recipes, you will also find plenty of tricks, special considerations, ramifications, and general discussions of interesting tangents and network extrapolation. For the accurate, hard-nosed information you require to get your ScreenOS firewall network secure and operating smoothly, no bookmatches ScreenOS Cookbook.
Not much more than the manual Juniper already provides excellent technical documentation for their products. Having gone through Juniper's PDFs I expected this book to offer something new. By the time I got to chapter three I realized I'm reading the same content, just worded differently. This book offers nothing other than having a printed book instead of a PDF.
An excellent ScreenOS handbook This is well written and well organized book. It is truly written for firewall engineers. Its configuration and troubleshooting examples are very helpful to the real problems. The discussion section and tips are particular useful if you want to know the inside stories of screenOS. This book is a must have for anyone who is working in Netscreen firewall at any level.
Must have for VPN and Firewall users The writing is superb! And I love the Problem |Solution |Discussion sections of each chapter. It gives great every day problem and solution. I've been working on a large VPN project and this book is EXCELLENT from start to finish. It explains very well in details about VPN - in our case we also had integrated wireless; policy-based routing, BGP, RIP, content security (ICAP; URL filtering), NAT, QoS, VoIP (Avaya & Cisco), firewall and user authentication (802.1x). You can't get any more complicated than our VPN infrastructure - yet the book explains extremely well every aspect of those features in great details. Plus it was a very easy read! I highly recommend this book if you're serious about deploying VPN and firewalls. Great stuff.
Indispensable This is a must-have book for anyone managing Juniper firewalls. The writing style is very accessible and to the point. The book is organized so you can jump right to the information you are looking for without reading it from cover to cover. Highly recommended.
This book is a must have for ScreenOS users. Simply put, anyone who is currently evaluating or managing ScreenOS based Firewalls should own this book and have it close by.
The 1st chapter of the book alone shows the most useful commands that every administrator needs to know. It also details the architecture of ScreenOS which is the key to creating and implementing a relevant security policy in any network.
The book is well written and organized with CLI commands in bold and CLI responses in plain text which make it easy to differentiate what the user should be typing and what they should be seeing. (There are also some GUI screen shots in the book as well.) The book has excellent examples of packet walks, O.S. Architecture, and network diagrams.
A huge benefit of the book is that it doesn't bore the user with the history of the Internet or TCP/IP, etc. It jumps right in to specific examples and configuration guidelines relevant to what the chapter is trying to cover. The book is also very current and covers almost the latest version of ScreenOS. A great example is that there is an excellent chapter on configuring NSRP (HA) with Dynamic Routing Protocols (to sync routes from DRP's) and how that is configured in ScreenOS 6.0 which was the first release to support that feature. ScreenOS 6.0 is a very current release of ScreenOS.
As a user of ScreenOS for 5 years, I can absolutely say this book will be a welcome addition to my library!
Last note: Chapter 21 covers VSYS or Virtual Systems which is a major strength of ScreenOS and not well understood by many users. That chapter alone makes the book worth the cost.