Training F5 Networks

Training goals dlearning

code: F5N-ASM | version: v.14.1

The BIG-IP Application Security Manager course gives participants a functional understanding of how to deploy, tune, and operate BIG-IP Application Security Manager (ASM) to protect their web applications from HTTP-based attacks. The course includes lecture, hands-on labs, and discussion about different ASM components for detecting and mitigating threats from multiple attack vectors such web scraping, Layer 7 Denial of Service, brute force, bots, code injection, and zero day.

Audience:
This course is intended for security and network administrators who will be responsible for the installation, deployment, tuning, and day-to-day maintenance of the Application Security Manager.

 

Conspect Show list

  1. Setting Up the BIG-IP System
    • Introducing the BIG-IP System
    • Initially Setting Up the BIG-IP System
    • Archiving the BIG-IP Configuration
    • Leveraging F5 Support Resources and Tools
  2. Traffic Processing with BIG-IP
    • Identifying BIG-IP Traffic Processing Objects
    • Understanding Network Packet Flow
    • Understanding Profiles
    • Overview of Local Traffic Policies and ASM
  3. Web Application Concepts
    • Anatomy of a Web Application
    • An Overview of Common Security Methods
    • Examining HTTP and Web Application Components
    • Examining HTTP Headers
    • Examining HTTP Responses
    • Examining HTML Components
    • How ASM Parses File Types, URLs, and Parameters
    • Using the Fiddler HTTP proxy tool
  4. Web Application Vulnerabilities
    • OWASP Top 10 Vulnerabilities
  5. Security Policy Deployment
    • Comparing Positive and Negative Security
    • Using the Deployment Wizard
    • Deployment Wizard: Local Traffic Deployment
    • Deployment Wizard: Workflow
    • Reviewing Requests
    • Security Checks offered by Rapid Deployment
    • Configuring Data Guard
  6. Policy Tuning and Violations
    • Post-Configuration Traffic Processing
    • Defining False Positives
    • How Violations are Categorized
    • Violation Ratings
    • Enforcement Settings and Staging: Policy Control
    • Defining Signature Staging
    • Defining Enforcement Readiness Period
    • Defining Learning
    • Violations and Learning Suggestions
    • Learning Mode: Automatic or Manual
    • Defining Learn, Alarm and Block settings
    • Interpreting Enforcement Readiness Summary
    • Configuring the Blocking Response Page
  7. Attack Signatures
    • Defining Attack Signatures
    • Creating User-Defined Attack Signatures
    • Attack Signature Normalization
    • Attack Signature Structure
    • Defining Attack Signature Sets
    • Defining Attack Signature Pools
    • Updating Attack Signatures
    • Understanding Attack Signatures and Staging
  8. Positive Security Policy Building
    • Defining Security Policy Components
    • Choosing an Explicit Entities Learning Scheme
    • How to learn: Add All Entities
    • Staging and Entities: the Entity Lifecycle
    • How to Learn: Never (Wildcard Only)
    • How to Learn: Selective
    • Learning Differentiation: Real Threats vs. False Positives
  9. Cookies and Other Headers
    • ASM Cookies: What to enforce
    • Understanding Allowed and Enforced Cookies
    • Configuring Security Processing on HTTP Headers
  10. Reporting and Logging
    • Reporting Capabilities in ASM
    • Viewing DoS Reports
    • Generating an ASM Security Events Report
    • Viewing Log files and Local Facilities
    • Understanding Logging Profiles
  11. User Roles and Policy Modification
    • Understanding User Roles & Partitions
    • Comparing Policies
    • Editing and Exporting Security Policies
    • Examples of ASM Deployment Types
    • Overview of ASM Synchronization
    • Collecting Diagnostic Data with asmqkview
  12. Lab Project
    • Lab Project 1
  13. Advanced Parameter Handling
    • Defining Parameters
    • Defining Static Parameters
    • Understanding Dynamic Parameters and Extractions
    • Defining Parameter Levels
    • Understanding Attack Signatures and Parameters
  14. Automatic Policy Building
    • Overview of Automatic Policy Building
    • Choosing a Policy Type
    • Defining Policy Building Process Rules
    • Defining the Learning Score
  15. Web Application Vulnerability Scanners
    • Integrating ASM with Vulnerability Scanners
    • Importing Vulnerabilities
    • Resolving Vulnerabilities
    • Using the Generic XML Scanner Output
  16. Login Enforcement & Session Tracking
    • Defining a Login URL
    • Defining Session Awareness and User Tracking
  17. Brute force and Web Scraping Mitigation
    • Defining Anomalies
    • Mitigating Brute Force Attacks
    • Defining Session-Based Brute Force Protection
    • Defining Dynamic Brute Force Protection
    • Defining the Prevention Policy
    • Mitigating Web Scraping
    • Defining Geolocation Enforcement
    • Configuring IP Address Exceptions
  18. Layer 7 DoS Mitigation
    • Defining Denial of Service Attacks
    • Defining General Settings L7 DoS profile
    • Defining TPS-Based DoS protection
    • Defining Operation Mode
    • Defining Mitigation Methods
    • Defining Stress-Based Detection
    • Defining Proactive Bot Defense
    • Using Bot Signatures
  19. ASM and iRules
    • Defining Application Security iRule Events
    • Using ASM iRule Event Modes
    • iRule Syntax
    • ASM iRule Commands
  20. XML and Web Services
    • Defining XML
    • Defining Web Services
    • Configuring an XML Profile
    • Schema and WSDL Configuration
    • XML Attack Signatures
    • Using Web Services Security
  21. Web 2.0 Support: JSON Profiles
    • Defining Asynchronous JavaScript and XML
    • Defining JavaScript Object Notation
    • Configuring a JSON Profile
  22. Review and Final Labs
Download conspect training as PDF

Additional information

Prerequisites

Before attending the Troubleshooting, ASM, DNS, APM, AAM, AFM, VIPRION or iRules courses is mandatory:

  • to take part in the BIG-IP Admin or LTM course
  • or possession of F5-CA or F5-CTS LTM certification
  • or pass special assessment test with sore 70% or greater.

To take assessment test:
Step 1: get an account on F5 University https://university.f5.com
Step 2: goto My Training and find Administering BIG-IP Course Equivalency Assessment
Take the test. Pass mark is 70%
Step 3: take a screen shot as proof of results
If this prerequisite is not met, F5 Networks have the right to refuse entry to the class.
Difficulty level
Duration 4 days
Certificate

The participants will obtain certificates signed by F5 Networks (course completion). This course also will help to prepare you for the F5 Networks ASM Specialist certification (F5-CTS) exams Exam 303 - ASM Specialist, which is available through the Pearson VUE test centers.
Trainer

Certified F5 Networks Trainer.
F5 Networks show more courses
Training thematically related

Networking and Wireless

Campus Access | Aruba

Switches | Aruba

Security | Aruba

Design | Aruba

SD-WAN | Aruba

Management & Operations | Aruba

Network Security | Broadcom

Network+ | CompTIA

Wireless | CWNP

Wireless IoT | CWNP

Campus Fabric | Extreme Networks

Extreme Switching | Extreme Networks

ExtremeWireless Cloud | Extreme Networks

ExtremeControl | Extreme Networks

ExtremeCloud™ IQ – Site Engine | Extreme Networks

ExtremeCloud™ IQ – Controller | Extreme Networks

Extreme Certified Specialist (ECS) | Extreme Networks

Administering BIG IP | F5 Networks

Troubleshooting BIG IP | F5 Networks

Local Traffic Manager (LTM) | F5 Networks

Advanced WAF (AWAF) | F5 Networks

Domain Name System (DNS) | F5 Networks

Access Policy Manager (APM) | F5 Networks

Advanced Firewall Manager (AFM) | F5 Networks

VIPRION | F5 Networks

iRules | F5 Networks

  • Download conspect training as PDF: Developing iRules for BIG-IP

    Developing iRules for BIG-IP training F5 Networks

    available training dates
    price from: 3000 EUR
    duration: 3 days
    difficulty level: 4 of 6
    2024-01-29 | Virtual Classroom sign up
    2024-02-05 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2024-02-05 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2024-02-28 | Virtual Classroom sign up
    2024-03-25 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2024-03-25 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2024-03-27 | Virtual Classroom sign up
    2024-05-13 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2024-05-13 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2024-05-27 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2024-05-27 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2024-06-10 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2024-06-10 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    F5 Networks
    iRules
    Networking and Wireless
    BIG-IP

Fortinet Certified Professional (FCP) | Fortinet

Fortinet Certified Solution Specialist (FCSS) | Fortinet

Routing & Switching | Huawei

NetMRI | Infoblox

Network Security | Palo Alto Networks

SASE | Palo Alto Networks

Security Operations | Palo Alto Networks

LinkProof | Radware

DefensePro | Radware

AppDirector | Radware

Alteon | Radware

WEB | SCADEMY

E-learning | The Linux Foundation

Security

Security | Aruba

Network Security | Broadcom

Java Programming | Capstone Courseware

Java EE | Capstone Courseware

Open-Source Frameworks | Capstone Courseware

XML and Web Services | Capstone Courseware

Core Training | Check Point

Product Training | Check Point

ICS/OT security | Compendium CE

Security+ | CompTIA

  • Download conspect training as PDF: CompTIA Security+ Prep Course

    CompTIA Security+ Prep Course training CompTIA

    available training dates
    price from: 1400 EUR
    duration: 5 days
    difficulty level: 3 of 6
    2024-01-15 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2024-01-15 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2024-02-26 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2024-02-26 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2024-04-15 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2024-04-15 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2024-06-10 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2024-06-10 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    CompTIA
    Security+
    Security
    Security

CySA+ | CompTIA

PenTest+ | CompTIA

CASP+ | CompTIA

Advanced WAF (AWAF) | F5 Networks

Access Policy Manager (APM) | F5 Networks

Advanced Firewall Manager (AFM) | F5 Networks

Fortinet Certified Professional (FCP) | Fortinet

Fortinet Certified Solution Specialist (FCSS) | Fortinet

Cyber security | ISC2

Microsoft 365 | Microsoft

Security | Microsoft

Pen Testing & Ethical Hacking | Mile2

IS Management Leadership | Mile2

Incident Handling | Mile2

Web Application Security | Mile2

Cloud Security | Mile2

Forensics | Mile2

Disaster Recovery | Mile2

Healthcare | Mile2

IS Management | Mile2

Auditing | Mile2

Cyber Range | Mile2

Security Awareness | Mile2

Cyber Threat Analyst | Mile2

Network Security | Palo Alto Networks

SASE | Palo Alto Networks

Security Operations | Palo Alto Networks

ISO/IEC 27001 Information Security Management Systems | PECB®

LinkProof | Radware

DefensePro | Radware

AppDirector | Radware

Alteon | Radware

Fundamentals | SCADEMY

C# | SCADEMY

C/C++ | SCADEMY

Java | SCADEMY

PHP | SCADEMY

Python | SCADEMY

WEB | SCADEMY

Cloud | SCADEMY

Cryptography | SCADEMY

Finance | SCADEMY

Healthcare | SCADEMY

Telecome | SCADEMY

Software design | SCADEMY

Software testing | SCADEMY

Dark Web | SECO-Institute

Cyber Defence | SECO-Institute

Crisis Management | SECO-Institute

Data Protection | SECO-Institute

Kubernetes | SUSE

Linux | The Linux Foundation

E-learning | The Linux Foundation

Exam | The Linux Foundation

Contact form

Please fill form below to obtain more info about this training.






* Fields marked with (*) are required !!!

Information on data processing by Compendium - Centrum Edukacyjne Spółka z o.o.

4000 EUR

FORM OF TRAINING ?

 

TRAINING MATERIALS ?

 

SELECT TERM TRAINING

    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
Book a training appointment
close

Traditional training

Sessions organised at Compendium CE are usually held in our locations in Kraków and Warsaw, but also in venues designated by the client. The group participating in training meets at a specific place and specific time with a coach and actively participates in laboratory sessions.

Dlearning training

You may participate from at any place in the world. It is sufficient to have a computer (or, actually a tablet, or smartphone) connected to the Internet. Compendium CE provides each Distance Learning training participant with adequate software enabling connection to the Data Center. For more information, please visit dlearning.eu site

close

Paper materials

Traditional materials: The price includes standard materials issued in the form of paper books, printed or other, depending on the arrangements with the manufacturer.

Electronic materials

Electronic materials: These are electronic training materials that are available to you based on your specific application: Skillpipe, eVantage, etc., or as PDF documents.

Ctab materials

Ctab materials: the price includes ctab tablet and electronic training materials or traditional training materials and supplies provided electronically according to manufacturer's specifications (in PDF or EPUB form). The materials provided are adapted for display on ctab tablets. For more information, check out the ctab website.

Upcoming F5 Networks training

Training schedule F5 Networks