F5 Networks Setting Up BIG-IP Advanced WAF: Web Application Firewall
F5 Networks Setting Up BIG-IP Advanced WAF: Web Application Firewall Course Details:
Participants use F5 Advanced WAF to quickly configure advanced protection against common Layer 7 vulnerabilities (OWASP Top Ten) and bot defense.
Call (919) 283-1674 to get a class scheduled online or in your area!
Lesson 1: Setting Up the BIG-IP System
- Introducing the BIG-IP System
- Initially Setting Up the BIG-IP System
- Archiving the BIG-IP System Configuration
- Leveraging F5 Support Resources and Tools
Lesson 2: Threat Overview and Guided Configuration
- Classifying Attack Types
- Differentiating Benign and Malicious Clients
- Categorizing Attack Techniques
- Defining the Layer 7 Web Application Firewall
- Defining Traffic Processing Objects
- Introducing F5 Advanced WAF
- Using Guided Configuration for Web Application Security
Lesson 3: Exploring HTTP Traffic
- Exploring Web Application HTTP Request Processing
- Overview of Application-Side Vulnerabilities
- Defining Attack Signatures
- Defining Violations
Lesson 4: Securing HTTP Traffic
- Defining Learning
- Defining Attack Signature Staging
- Defining Attack Signature Enforcement
Lesson 5: Mitigating Credentials Stuffing
- Defining Credentials Stuffing Attacks
- The Credentials Stuffing Mitigation Workflow
Lesson 6: Form Encryption Using BIG-IP DataSafe
- What Elements of Application Delivery are Targeted?
- Exploiting the Document Object Model
- Protecting Applications Using DataSafe
- Configuring a DataSafe Profile
Lesson 7: Deploying Threat Campaigns
- Defining Threat Campaigns
- Live Update for Threat Campaigns
Lesson 8: Using Layer 7 Behavioral Analysis to Mitigate DoS
- Defining Behavioral Analysis
- Defining the DoS Protection Profile
*Please Note: Course Outline is subject to change without notice. Exact course outline will be provided at time of registration.
Students will learn,
- Setting Up the BIG-IP System
- Threat Overview and Guided Configuration
- Exploring HTTP Traffic
- Securing HTTP Traffic
- Mitigating Credentials Stuffing
- Form Encryption Using BIG-IP DataSafe
- Deploying Threat Campaigns
- Using Layer 7 Behavioral Analysis to Mitigate DoS
Administering BIG-IP, OSI model, TCP/IP addressing and routing, WAN, LAN environments; or having achieved TMOS Administration Certification. Knowledge of Advanced WAF/ASM is recommended.
This course is intended for users who wish to rapidly deploy a basic web application security policy with minimal configuration; deploy a DoS Protection Profile to detect server stress, and block bad actors.