{"id":3564,"date":"2022-04-08T12:18:14","date_gmt":"2022-04-08T11:18:14","guid":{"rendered":"https:\/\/republify.se\/?post_type=product&p=3564"},"modified":"2022-11-10T19:00:25","modified_gmt":"2022-11-10T18:00:25","slug":"configuring-big-ip-afm-advanced-firewall-manager-v15-1","status":"publish","type":"product","link":"https:\/\/republify.se\/index.php\/produkt\/configuring-big-ip-afm-advanced-firewall-manager-v15-1\/","title":{"rendered":"Configuring BIG-IP AFM: Advanced Firewall Manager v15.1"},"content":{"rendered":"

This course uses lectures and hands-on exercises to give participants real-time experience in setting up and configuring the BIG-IP Advanced Firewall Manager (AFM) system.\u00a0<\/strong><\/p>\n

Students are introduced to the AFM user interface, stepping through various options that demonstrate how AFM is configured to build a network firewall and to detect and protect against DoS (Denial of Service) attacks. Reporting and log facilities are also explained and used in the course labs. Further Firewall functionality and additional DoS facilities for DNS and SIP traffic are discussed.<\/p>\n

 <\/p>\n

\n
\n

Topics covered in this course include:<\/strong><\/p>\n

v14.1 Course Topics<\/strong><\/p>\n

Installation and setup of the BIG-IP AFM system
\nAFM network firewall concepts
\nNetwork firewall options and modes
\nNetwork firewall rules, policies, address\/port lists, rule lists and schedules
\nIP Intelligence facilities of dynamic black and white lists, IP reputation database and dynamic IP shunning.
\nDetection and mitigation of DoS attacks
\nEvent logging of firewall rules and DoS attacks
\nReporting and notification facilities
\nDoS Whitelists
\nDoS Sweep\/Flood
\nDNS Firewall and DNS DoS
\nSIP DoS
\nNetwork Firewall iRules
\nPort Misuse
\nVarious AFM component troubleshooting commands<\/p>\n

 <\/p>\n<\/div>\n<\/div>\n

\n
\n
\n
Objectives<\/h5>\n<\/div>\n<\/div>\n
\n

 <\/p>\n

v14.1<\/strong>\u00a0Course Outline<\/strong><\/p>\n

Chapter 1: Setting up the BIG-IP System<\/strong><\/p>\n

Introducing the BIG-IP System
\nInitially Setting Up the BIG-IP System
\nArchiving the BIG-IP Configuration
\nLeveraging F5 Support Resources and Tools
\nChapter Resources
\nBIG-IP System Setup Labs<\/p>\n

Chapter 2: AFM Overview and Network Firewall<\/strong><\/p>\n

AFM Overview
\nAFM Release History
\nAFM Availability
\nWhat do you see?
\nTerminology
\nNetwork Firewall
\nAFM Contexts
\nAFM Modes
\nAFM Packet Processing
\nAFM Rules and Direction
\nRules Contexts and Processing
\nConfiguring Network Firewall
\nNetwork Firewall Rules
\nGeolocation
\nRedundant and Conflicting Rules
\nStale Rules
\nLists and Schedules
\nRule Lists
\nAddress Lists
\nPort Lists
\nSchedules
\nPolicies
\nPolicy Status and Firewall Policy Management
\nInline Rule Editor
\nSend to Virtual
\nPacket Tester<\/p>\n

Chapter 3: Logs<\/strong><\/p>\n

Overview
\nEvent Logs
\nLogging Profiles
\nLog Throttling
\nLogging and Logging Profiles
\nBIG-IP Logging Mechanisms
\nPublisher
\nLog Destination
\nCustom Search
\nLogging Global Rule Events
\nLog Configuration Changes
\nQKView and Log Files
\nSNMP MIB
\nSNMP Traps<\/p>\n

Chapter 4: IP Intelligence<\/strong><\/p>\n

Overview
\nFeature 1 Dynamic Black and White Lists
\nBlack List Categories
\nFeed Lists
\nIP Intelligence Policies
\nIP Intelligence Log Profile
\nIP Intelligence Reporting
\nTroubleshooting IP Intelligence Lists
\nFeature 2 IP Intelligence Database
\nLicensing
\nInstallation
\nConfiguration
\nTroubleshooting
\nIP Intelligence iRule<\/p>\n

Chapter 5: Device DoS<\/strong><\/p>\n

Denial of Service and DoS Protection Overview
\nDevice DoS
\nConfiguring Device DoS
\nVariant 1
\nVariant 2
\nAuto-Threshold Configuration
\nVariant 3
\nBad Actor and Blacklist Address
\nDevice DoS Profiles
\nDoS Protection Profile
\nDynamic Signatures
\nDoS iRules<\/p>\n

Chapter 6: Reports<\/strong><\/p>\n

Reports
\nReporting
\nGeneral Reporting Facilities
\nTime Series Chart
\nDetails
\nReport Export
\nDoS Screens
\nDashboard
\nAnalysis
\nCustom Page
\nSettings
\nScheduled Reports
\nTroubleshooting Scheduled Reports
\nOverview
\nSummary
\nWidgets
\nCustom Widgets
\nDeleting and Restoring Widgets
\nFirewall Manager<\/p>\n

Chapter 7: DoS White Lists<\/strong><\/p>\n

White Lists
\nConfiguration
\ntmsh
\nSource Address List<\/p>\n

Chapter 8: DoS Sweep Flood Protection<\/strong><\/p>\n

Sweep Flood
\nConfiguration<\/p>\n

Chapter 9: IP Intelligence Shun<\/strong><\/p>\n

IP Intelligence Shun
\nManual Configuration
\nDynamic Configuration
\nIP Intelligence Policy
\ntmsh
\nExtending the Shun Feature
\nRemotely Triggered Black Hole
\nScrubber<\/p>\n

Chapter 10: DNS Firewall<\/strong><\/p>\n

DNS Firewall
\nConfiguration
\nDNS Query
\nDNS Opcodes
\nLogging
\nTroubleshooting<\/p>\n

Chapter 11: DNS DoS<\/strong><\/p>\n

DNS DoS
\nConfiguration
\nDoS Protection Profile
\nDevice DoS<\/p>\n

Chapter 12: SIP DoS<\/strong><\/p>\n

Session Initiation Protocol (SIP)
\nTransactions and Dialogs
\nSIP DoS Configuration
\nDoS Protection Profile
\nDevice DoS
\nSIP iRules<\/p>\n

Chapter 13: Network Firewall iRules<\/strong><\/p>\n

Network Firewall iRules
\niRule Events
\nConfiguration
\nRecommended Practice
\nMore Information<\/p>\n

Chapter 14: Port Misuse<\/strong><\/p>\n

Port Misuse
\nPort Misuse Policy
\nAttaching a Service Policy
\nLog Profile<\/p>\n

 <\/p>\n<\/div>\n<\/div>\n

\n
\n
\n
Audience<\/h5>\n<\/div>\n<\/div>\n
\n

This course is intended for network operators, network administrators, network engineers, network architects, security administrators, and security architects responsible for installation, setup, configuration, and administration of the BIG-IP AFM system.<\/p>\n<\/div>\n<\/div>\n

\n
\n
\n
Prerequisites<\/h5>\n<\/div>\n<\/div>\n
\n

 <\/p>\n

Students must complete one of the following F5 prerequisites before attending this course:<\/p>\n

Administering BIG-IP instructor-led course
\nor
\nF5 Certified BIG-IP Administrator
\nThe following free web-based courses, although optional, will be very helpful for any student with limited BIG-IP administration and configuration experience. These courses are available at F5 University:<\/p>\n

Getting Started with BIG-IP web-based training
\nGetting Started with BIG-IP Local Traffic Manager (LTM) web-based training
\nGetting Started with BIG-IP Advanced Firewall Manager (AFM) web-based training
\nThe following general network technology knowledge and experience are recommended before attending any F5 Global Training Services instructor-led course:<\/p>\n

OSI model encapsulation
\nRouting and switching
\nEthernet and ARP
\nTCP\/IP concepts
\nIP addressing and subnetting<\/p>\n

 <\/p>\n

v12 Course Outline<\/p>\n

Chapter 1: Setting up the BIG-IP System<\/p>\n

Introducing the BIG-IP System
\nInitially Setting Up the BIG-IP System
\nArchiving the BIG-IP Configuration
\nLeveraging F5 Support Resources and Tools<\/p>\n

Chapter 2: AFM Overview and Network Firewall<\/strong><\/p>\n

AFM Overview
\nAFM Release History
\nAFM Availability
\nWhat do you see?
\nTerminology
\nNetwork Firewall
\nAFM Contexts
\nAFM Modes
\nAFM Packet Processing
\nAFM Rules and Direction
\nRules Contexts and Processing
\nConfiguring Network Firewall
\nNetwork Firewall Rules
\nGeolocation
\nRedundant and Conflicting Rules
\nStale Rules
\nLists and Schedules
\nRule Lists
\nAddress Lists
\nPort Lists
\nSchedules
\nPolicies
\nPolicy Status and Firewall Policy Management
\nInline Rule Editor<\/p>\n

\u200bChapter 3: Logs<\/strong><\/p>\n

Event Logs
\nLogging Profiles
\nLog Throttling
\nTraffic Flow Statistics
\nLogging and Logging Profiles
\nBIG-IP Logging Mechanisms
\nPublisher
\nLog Destination
\nCustom Search
\nLogging Global Rule Events
\nLog Configuration Changes
\nQKView
\nOther Log Files
\nSNMP MIB
\nSNMP Traps<\/p>\n

Chapter 4: IP Intelligence<\/strong><\/p>\n

Overview
\nFeature 1 Dynamic Black and White Lists
\nBlack List Categories
\nFeed Lists
\nIP Intelligence Policies
\nIP Intelligence Log Profile
\nIP Intelligence Reporting
\nTroubleshooting IP Intelligence Lists
\nFeature 2 IP Intelligence Database
\nLicensing
\nInstallation
\nConfiguration
\nTroubleshooting
\nIP Intelligence iRule<\/p>\n

Chapter 5: Device DoS<\/strong><\/p>\n

Denial of Service and DoS Protection Overview
\nConfiguring Device DoS
\nConfiguring Device DoS Vectors
\nVariant 1
\nRate and Leak Limit
\nVariant 2
\nAuto-Threshold Configuration
\nVariant 3
\nBad Actor and Blacklist Attacking Address
\nDevice DoS Profiles
\nDoS Protection Profile<\/p>\n

Chapter 6: Reports<\/strong><\/p>\n

Reports
\nReporting
\nGeneral Reporting Facilities
\nCharts
\nDetails
\nReport Export
\nNetwork Screens
\nDoS Screens
\nSettings
\nOverview
\nSummary
\nWidgets
\nTime Periods, Settings, Export, and Delete Options
\nFirewall Manager<\/p>\n

Chapter 7: DoS White Lists<\/strong><\/p>\n

White Lists
\nConfiguration
\ntmsh
\nSource Address List<\/p>\n

Chapter 8: DoS Sweep Flood Protection<\/strong><\/p>\n

Sweep Flood
\nConfiguration<\/p>\n

Chapter 9: IP Intelligence Shun<\/strong><\/p>\n

IP Intelligence Shun
\nManual
\nDynamic
\nIP Intelligence Policy
\ntmsh
\nTroubleshooting<\/p>\n

Chapter 10: DNS Firewall<\/strong><\/p>\n

DNS Firewall
\nDNS Query
\nDNS Opcodes
\nTroubleshooting<\/p>\n

Chapter 11: DNS DoS<\/strong><\/p>\n

DNS DoS
\nDoS Protection Profile
\nDevice DoS<\/p>\n

Chapter 12: SIP DoS<\/strong><\/p>\n

Session Initiation Protocol (SIP)
\nTransactions and Dialogs
\nSIP DoS
\nDoS Protection Profile
\nDevice DoS
\nSIP iRules<\/p>\n

Chapter 13: Network Firewall iRules<\/strong><\/p>\n

Network Firewall iRules
\niRule Events
\nUse Cases
\nRecommended Practice
\nMore Information<\/p>\n

Chapter 14: DoS iRules<\/strong><\/p>\n

DoS iRules
\niRule Events
\nUse Cases
\nMore Information
\nNAT and private IP addressing
\nDefault gateway
\nNetwork firewalls
\nLAN vs. WAN
\nThe following course-specific knowledge and experience is suggested before attending this course:<\/p>\n

HTTP and DNS protocols<\/p>\n

 <\/p>\n<\/div>\n<\/div>\n

 <\/p>\n

Kursen levereras i samarbete med<\/h3>\n

\"\"<\/p>\n

Kontakta oss om denna kurs<\/h2>\n