{"id":3566,"date":"2022-04-08T12:30:02","date_gmt":"2022-04-08T11:30:02","guid":{"rendered":"https:\/\/republify.se\/?post_type=product&p=3566"},"modified":"2022-04-08T12:30:05","modified_gmt":"2022-04-08T11:30:05","slug":"configuring-f5-advanced-waf-v15-1","status":"publish","type":"product","link":"https:\/\/republify.se\/index.php\/produkt\/configuring-f5-advanced-waf-v15-1\/","title":{"rendered":"Configuring F5 Advanced WAF v15.1"},"content":{"rendered":"

In this 4 day course, students are provided with a functional understanding of how to deploy, tune, and operate F5 Advanced Web Application Firewall to protect their web applications from HTTP-based attacks.<\/strong><\/p>\n

The course includes lecture, hands-on labs, and discussion about different F5 Advanced Web Application Firewall tools for detecting and mitigating threats from multiple attack vectors such web scraping, Layer 7 Denial of Service, brute force, bots, code injection, and zero day exploits.<\/p>\n

 <\/p>\n

\n
\n
<\/div>\n<\/div>\n
\n

Course Objectives<\/strong><\/p>\n

Describe the role of the BIG-IP system as a full proxy device in an application delivery network
\nProvision F5 Advanced Web Application Firewall resources
\nDefine a web application firewall
\nDescribe how F5 Advanced Web Application Firewall protects a web application by securing file types, URLs, and parameters
\nDeploy F5 Advanced Web Application Firewall using the Rapid Deployment template (and other templates) and define the security checks included in each
\nDefine learn, alarm, and block settings as they pertain to configuring F5 Advanced Web Application Firewall
\nDefine attack signatures and explain why attack signature staging is important
\nContrast positive and negative security policy implementation and explain benefits of each
\nConfigure security processing at the parameter level of a web application
\nUse an application template to protect a commercial web application
\nDeploy F5 Advanced Web Application Firewall using the Automatic Policy Builder
\nTune a policy manually or allow automatic policy building
\nIntegrate third party application vulnerability scanner output into a security policy
\nConfigure login enforcement and session tracking
\nConfigure protection against brute force, web scraping, and Layer 7 denial of service attacks
\nImplement iRules using specific F5 Advanced Web Application Firewall events and commands
\nUse Content Profiles to protect JSON and AJAX-based applications
\nImplement Bot Signatures
\nImplement Proactive Bot Defense<\/p>\n

Describe the role of the BIG-IP system as a full proxy device in an application delivery network
\nProvision F5 Advanced Web Application Firewall resources
\nDefine a web application firewall
\nDescribe how F5 Advanced Web Application Firewall protects a web application by securing file types, URLs, and parameters
\nDeploy F5 Advanced Web Application Firewall using the Rapid Deployment template (and other templates) and define the security checks included in each
\nDefine learn, alarm, and block settings as they pertain to configuring F5 Advanced Web Application Firewall
\nDefine attack signatures and explain why attack signature staging is important
\nContrast positive and negative security policy implementation and explain benefits of each
\nConfigure security processing at the parameter level of a web application
\nUse an application template to protect a commercial web application
\nDeploy F5 Advanced Web Application Firewall using the Automatic Policy Builder
\nTune a policy manually or allow automatic policy building
\nIntegrate third party application vulnerability scanner output into a security policy
\nConfigure login enforcement and session tracking
\nConfigure protection against brute force, web scraping, and Layer 7 denial of service attacks
\nImplement iRules using specific F5 Advanced Web Application Firewall events and commands
\nUse Content Profiles to protect JSON and AJAX-based applications
\nImplement Bot Signatures
\nImplement Proactive Bot Defense<\/p>\n

 <\/p>\n<\/div>\n<\/div>\n

\n
\n
\n
Audience<\/h5>\n<\/div>\n<\/div>\n
\n

This course is intended for security and network administrators who will be responsible for the installation, deployment, tuning, and day-to-day maintenance of the F5 Advanced Web Application Firewall.<\/p>\n

 <\/p>\n<\/div>\n<\/div>\n

\n
\n
\n
Prerequisites<\/h5>\n<\/div>\n<\/div>\n
\n

There are no F5-technology-specific prerequisites for this course. However, completing the following before attending would be very helpful for students with limited BIG-IP administration and configuration experience:<\/p>\n

Administering BIG-IP instructor-led course
\n-or-<\/p>\n

F5 Certified BIG-IP Administrator
\nThe following free web-based training courses, although optional, will be very helpful for any student with limited BIG-IP administration and configuration experience. These courses are available at F5 University:<\/p>\n

Getting Started with BIG-IP web-based training
\nGetting Started with BIG-IP Application Security Manager (ASM) web-based training
\nThe following general network technology knowledge and experience are recommended before attending any F5 Global Training Services instructor-led course:<\/p>\n

OSI model encapsulation
\nRouting and switching
\nEthernet and ARP
\nTCP\/IP concepts
\nIP addressing and subnetting
\nNAT and private IP addressing
\nDefault gateway
\nNetwork firewalls
\nLAN vs. WAN<\/p>\n<\/div>\n<\/div>\n

\n
\n

 <\/p>\n

Course Topics<\/strong><\/p>\n

Resource provisioning for F5 Advanced Web Application Firewall
\nTraffic processing with BIG-IP Local Traffic Manager (LTM)
\nWeb application concepts
\nWeb application vulnerabilities
\nSecurity policy deployment
\nSecurity policy tuning
\nAttack signatures
\nPositive security building
\nSecuring cookies and other headers
\nReporting and logging
\nPolicy Diff, merging, and exporting
\nAdvanced parameter handling
\nUsing application templates
\nUsing Automatic Policy Builder
\nIntegrating with web vulnerability scanners
\nLogin enforcement
\nBrute force mitigation
\nSession tracking
\nWeb scraping detection and mitigation
\nGeolocation Enforcement and IP Address Exceptions
\nUsing Parent and Child policies
\nLayer 7 DoS protection
\nF5 Advanced Web Application Firewall and iRules
\nUsing Content Profiles for AJAX and JSON applications
\nAdvanced Bot Detection and Defense
\nProactive Bot Defense<\/p>\n<\/div>\n<\/div>\n

 <\/p>\n

 <\/p>\n

Kursen levereras i samarbete med<\/h3>\n

\"\"<\/p>\n

Kontakta oss om denna kurs<\/h2>\n