Training F5

Training goals

code: F5N-AFM | version: v17.1

This course uses lectures and hands-on exercises to give participants real-time experience in setting up and configuring the BIG-IP Advanced Firewall Manager system. Students are introduced to the AFM user interface, stepping through various options that demonstrate how AFM is configured to build a network firewall and to detect and protect against DoS (Denial of Service) attacks. Reporting and log facilities are also explained and used in the course labs. Further Firewall functionality and additional DoS facilities for DNS and SIP traffic are discussed.

Audience:
This course is intended for network operators, network administrators, network engineers, network architects, security administrators, and security architects responsible for installation, setup, configuration, and administration of the BIG-IP Advanced Firewall Manager (AFM) system.

 

Conspect Show list

  1. Setting Up the BIG-IP System
    • Introducing the BIG-IP System
    • Initially Setting Up the BIG-IP System
    • Backing Up and Restoring BIG-IP configuration
    • Leveraging F5 Support Resources and Tools
  2. AFM Overview and Network Firewall
    • The F5 Solution - Application Delivery Firewall
    • Advanced Firewall Manager
    • AFM Release History
    • AFM Availability
    • What do you see?
    • AFM Firewalls
    • Firewall Rule Containers
    • AFM Contexts
    • AFM Modes
    • AFM Packet Processing
    • AFM Rules and Direction
    • Rules Contexts and Processing
    • Configuring Network Firewall
    • Network Firewall Rules
    • Geolocation
    • Redundant and Conflicting Rules
    • Stale Rules
    • Lists and Schedules
    • Rule Lists
    • Address Lists
    • Port Lists
    • Schedules
    • Policies
  3. Logs
    • Event Logs
    • Logging Profiles
    • Log Throttling
    • Traffic Flow Statistics
    • Logging and Logging Profiles
    • BIG-IP Logging Mechanisms
    • Publisher
    • Log Destination
    • Custom Search
    • Logging Global Rule Events
    • QKView
    • Other Log Files
    • SNMP MIB
    • SNMP Traps
  4. IP Intelligence
    • Overview
    • Architecture
    • Feature 1 Black and White Lists
    • Black List Categories
    • Feed Lists
    • IP Intelligence Policies
    • IP Intelligence Log Profile
    • IP Intelligence Reporting
    • Troubleshooting IP Intelligence Lists
    • Feature 2 IP Intelligence Database
    • Licensing
    • Installation
    • Configuration
    • Troubleshooting
    • IP Intelligence iRule
  5. Device DoS
    • DoS Protection
    • Configuring Device DoS
    • Profiles
  6. Reports
    • Reports
    • Reporting
    • General Reporting Facilities
    • Charts
    • Details
    • Report Export
    • Network Screens
    • DoS Screens
    • Settings
    • Overview
    • Summary
    • Widgets
    • Time Periods, Settings, Export, and Delete Options
    • Firewall Manager
  7. DoS White Lists
    • White Lists
    • Configuration
    • tmsh
  8. DoS Sweep Flood Protection
    • Sweep Flood • Configuration
  9. DNS Firewall
    • DNS Firewall
    • Configuration
  10. DNS DoS
    • DNS DoS
    • Configuration
  11. SIP DoS
    • Session Initiation Protocol (SIP)
    • Transactions and Dialogs
    • SIP DoS
    • Configuration
    • SIP iRules
  12. Device DoS Additional
    • DNS and SIP DoS
  13. Network Firewall iRules
    • Network Firewall iRules
    • iRule Event
    • Use Cases
    • Best Practice
Download conspect training as PDF

Additional information

Prerequisites

Before attending the Troubleshooting, ASM, DNS, APM, AAM, AFM, VIPRION or iRules courses is mandatory:

  • to take part in the BIG-IP Admin or LTM course
  • or possession of F5-CA or F5-CTS LTM certification
  • or pass special assessment test with sore 70% or greater.

To take assessment test:
Step 1: get an account on F5 University https://university.f5.com
Step 2: goto My Training and find Administering BIG-IP Course Equivalency Assessment
Take the test. Pass mark is 70%
Step 3: take a screen shot as proof of results
If this prerequisite is not met, F5 Networks have the right to refuse entry to the class.
Difficulty level
Duration 2 days
Certificate

The participants will obtain certificates signed by F5 Networks (course completion).
Trainer

Certified F5 Networks Trainer.
F5 show more courses
Training thematically related

Networking and Wireless

DC Networking | Aruba

Mobility | Aruba

Network Management | Aruba

Security | Aruba

Switching | Aruba

Network Security | Broadcom

Network+ | CompTIA

Wireless | CWNP

Wireless IoT | CWNP

Extreme Fabric | Extreme Networks

Extreme Switching | Extreme Networks

ExtremeWireless Cloud | Extreme Networks

ExtremeControl | Extreme Networks

ExtremeCloud™ IQ – Site Engine | Extreme Networks

ExtremeCloud™ IQ – Controller | Extreme Networks

Administering BIG IP | F5

Troubleshooting BIG IP | F5

Local Traffic Manager (LTM) | F5

Advanced WAF (AWAF) | F5

Domain Name System (DNS) | F5

Access Policy Manager (APM) | F5

iRules | F5

Fortinet Certified Professional (FCP) | Fortinet

Fortinet Certified Solution Specialist (FCSS) | Fortinet

Datacom | Huawei

NetMRI | Infoblox

Network Security | Palo Alto Networks

SASE | Palo Alto Networks

Security Operations | Palo Alto Networks

LinkProof | Radware

DefensePro | Radware

AppDirector | Radware

Alteon | Radware

WEB | SCADEMY

E-learning | The Linux Foundation

Security

Security | Aruba

Network Security | Broadcom

Java Programming | Capstone Courseware

Java EE | Capstone Courseware

Open-Source Frameworks | Capstone Courseware

XML and Web Services | Capstone Courseware

Core Training | Check Point

Infinity Specializations | Check Point

ICS/OT security | Compendium CE

Security+ | CompTIA

CySA+ | CompTIA

PenTest+ | CompTIA

SecurityX (formerly CASP+) | CompTIA

Certified Ethical Hacker | EC-Council

Advanced WAF (AWAF) | F5

Access Policy Manager (APM) | F5

Fortinet Certified Professional (FCP) | Fortinet

Fortinet Certified Solution Specialist (FCSS) | Fortinet

Cyber security | ISC2

Microsoft 365 | Microsoft

Security | Microsoft

Pen Testing & Ethical Hacking | Mile2

Information Systems Management | Mile2

Incident Handling | Mile2

Web Application Security | Mile2

Cloud Security | Mile2

Forensics | Mile2

Disaster Recovery | Mile2

Healthcare | Mile2

Risk Management | Mile2

Auditing | Mile2

Cyber Range | Mile2

Security Awareness | Mile2

Cyber Threat Analyst | Mile2

Network Security | Palo Alto Networks

SASE | Palo Alto Networks

Security Operations | Palo Alto Networks

ISO/IEC 27001 Information Security Management Systems | PECB®

LinkProof | Radware

DefensePro | Radware

AppDirector | Radware

Alteon | Radware

Fundamentals | SCADEMY

C# | SCADEMY

C/C++ | SCADEMY

Java | SCADEMY

PHP | SCADEMY

Python | SCADEMY

WEB | SCADEMY

Cloud | SCADEMY

Cryptography | SCADEMY

Finance | SCADEMY

Healthcare | SCADEMY

Telecome | SCADEMY

Software design | SCADEMY

Software testing | SCADEMY

Dark Web | SECO-Institute

Cyber Defence | SECO-Institute

Crisis Management | SECO-Institute

Data Protection | SECO-Institute

Kubernetes | SUSE

Linux | The Linux Foundation

E-learning | The Linux Foundation

Exam | The Linux Foundation

Contact form

Please fill form below to obtain more info about this training.






* Fields marked with (*) are required !!!

Information on data processing by Compendium - Centrum Edukacyjne Spółka z o.o.

PRICE 2200 EUR

FORM OF TRAINING ?

 

TRAINING MATERIALS ?

 

SELECT TRAINING DATE

    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
Book a training appointment
close

Traditional training

Sessions organised at Compendium CE are usually held in our locations in Kraków and Warsaw, but also in venues designated by the client. The group participating in training meets at a specific place and specific time with a coach and actively participates in laboratory sessions.

Dlearning training

You may participate from at any place in the world. It is sufficient to have a computer (or, actually a tablet, or smartphone) connected to the Internet. Compendium CE provides each Distance Learning training participant with adequate software enabling connection to the Data Center. For more information, please visit dlearning.eu site

close

Paper materials

Traditional materials: The price includes standard materials issued in the form of paper books, printed or other, depending on the arrangements with the manufacturer.

Electronic materials

Electronic materials: These are electronic training materials that are available to you based on your specific application: Skillpipe, eVantage, etc., or as PDF documents.

Ctab materials

Ctab materials: the price includes ctab tablet and electronic training materials or traditional training materials and supplies provided electronically according to manufacturer's specifications (in PDF or EPUB form). The materials provided are adapted for display on ctab tablets. For more information, check out the ctab website.

Upcoming F5 training

Training schedule F5