Training F5

Training goals

code: F5-TRG-NGX-MIT-NAP-ILT

This course gives participants a functional understanding of how to deploy and operate NGINX App Protect (WAF and DoS) to protect their web applications from the most common web application vulnerabilities and Layer 7 denial of service attacks.

 

This course features hands-on labs and discussion about detecting and mitigating threats from different threat vectors.

 

Audience

The target audience is personae new to DevOps and SecOps, along with anyone in DevOps where exposure to app security knowledge is limited. Application developers responsible for adding NGINX App Protect to their ecosystems are also encouraged to attend this class.

Conspect Show list

  • Chapter 1: Introduction
    • Visualize an application as an assembly of elements and resources across the client, network and server environments
    • Make the connection between clients, application, and data
    • Visualize the architecture of the application we will secure
  • Chapter 2: Overview of HTTP Communication
    • Overview of web application communication elements
    • Overview of HTTP message structure
    • Exploiting the document object model
    • Overview of web application implementation paradigms
  • Chapter 3: Overview of Web Application Vulnerabilities
    • Assessing how web applications might be vulnerable
    • Common exploits against web applications
    • Exploiting the document object model
    • Reviewing the Open Web Application Security Project® Top 10 list
  • Chapter 4: Applying Security Concepts and Enabling NGINX App Protect
    • Differentiating a web application firewall from other security solutions
    • Defining a security policy
    • Exploring attacks at Layer 7 of the OSI model
    • Differentiating between positive and negative security
    • Defining attack signatures and threat campaigns
    • Defining Enforcement Mode
  • Chapter 5: Logging Security Events in NGINX App Protect
    • Logging with NGINX
    • Reviewing the default security log configuration
    • Using custom logs
    • Understanding security log variables
  • Chapter 6: Setting Policy
    • Review default policy protections
    • Examine the default policy configuration file
    • Review attack signature sets and blocking settings
    • Examine the strict policy
  • Chapter 7: Policy tuning and working with multiple policies
    • Use cases for multiple policies
    • Policy tuning
    • Working with external policy reference files
  • Chapter 8: Updating Attack Signatures and Threat Campaigns
    • Outline steps for attack signature and threat campaign updates
    • Setting email options for role and business needs
    • Testing a Threat Campaign violation
  • Chapter 9: Mitigating Denial of Service Attacks
    • Understanding stress inducing client behaviors
    • Examining denial of service activity
    • Connecting NGINX App Protect DoS Directives and Policy
    • Overview of logging DoS events
  • Chapter 10: Troubleshooting
    • Common errors
    • Using native troubleshooting
    • Ways to collect information before reaching out to technical support
    • Review how to update NGINX Plus and NGINX App Protect
  • Chapter 11: Final Project
    • Create a policy based on real-world requirements without guidance
Download conspect training as PDF

Additional information

Prerequisites

Before taking this course, make sure you have completed one of the following:

  • Administering NGINX for Web Services

 

The course assumes a basic understanding of networking, web servers, HTTP, load balancing, caching, proxying, and related concepts. Hands on labs are performed in a Linux environment. You will need to be able to navigate the file system from the command line and edit configuration files using VI/VIM. Additional experience with Linux environments will be helpful.
Difficulty level
Duration 2 days
Certificate

The participants will obtain certificates signed by F5 (course completion).

This course helps prepare participants for the F5 Certified Administrator, NGINX (F5-CA, NGINX) certification. The certification requires candidates to pass four exams: NGINX Management (F5CAN1); NGINX Configuration: Knowledge (F5CAN2); NGINX Configuration: Demonstrate (F5CAN3); and NGINX Troubleshoot (F5CAN4).

More information: https://education.f5.com/learning-path/view/24
Trainer

Certified F5 Networks Trainer

Other training F5 | NGINX

F5 show more courses
Training thematically related

NIS2/KSC

Campus Access | Aruba

DC Networking | Aruba

Design | Aruba

Mobility | Aruba

Network Management | Aruba

Security | Aruba

Switching | Aruba

Network Security | Broadcom

Core Training | Check Point

Infinity Specializations | Check Point

ICS/OT security | Compendium CE

SecAI+ | CompTIA

Security+ | CompTIA

CySA+ | CompTIA

PenTest+ | CompTIA

SecurityX (formerly CASP+) | CompTIA

Certified Ethical Hacker | EC-Council

Certified SOC Analyst | EC-Council

Certified Penetration Testing Professional | EC-Council

Extreme Fabric | Extreme Networks

Extreme Switching | Extreme Networks

ExtremeWireless Cloud | Extreme Networks

ExtremeControl | Extreme Networks

ExtremeCloud™ IQ – Site Engine | Extreme Networks

ExtremeCloud™ IQ – Controller | Extreme Networks

ExtremeCloud™ SD-WAN | Extreme Networks

Administering BIG IP | F5

Troubleshooting BIG IP | F5

Local Traffic Manager (LTM) | F5

Advanced WAF (AWAF) | F5

Domain Name System (DNS) | F5

Access Policy Manager (APM) | F5

Advanced Firewall Manager (AFM) | F5

NGINX | F5

iRules | F5

rSeries/VELOS/F5OS | F5

FortiGate | Fortinet

FortiAnalyzer | Fortinet

FortiManager | Fortinet

SD-WAN | Fortinet

FortiAuthenticator | Fortinet

FortiWeb | Fortinet

FortiMail | Fortinet

FortiSandbox | Fortinet

FortiSIEM | Fortinet

FortiEDR | Fortinet

FortiNAC | Fortinet

FortiSOAR | Fortinet

FortiPAM | Fortinet

Wireless LAN | Fortinet

FortiClient EMS | Fortinet

NIOS DDI | Infoblox

NIOS Security | Infoblox

NIOS for Service Providers | Infoblox

NetMRI | Infoblox

Cyber security | ISC2

Pen Testing & Ethical Hacking | Mile2

AI Cybersecurity | Mile2

Cyber Threat Analyst | Mile2

Information Systems Management | Mile2

Incident Handling | Mile2

Web Application Security | Mile2

Cloud Security | Mile2

Forensics | Mile2

Disaster Recovery | Mile2

Healthcare | Mile2

Risk Management | Mile2

Auditing | Mile2

Cyber Range | Mile2

Security Awareness | Mile2

Netskope One | Netskope

Subscriptions | OffSec

Cybersecurity

Security | Aruba

Security | AWS

AWS Jam and AWS Jam Bundle | AWS

Exams | AWS

AWS Discovery Days | AWS

Network Security | Broadcom

Blue Team | Centri

Core Training | Check Point

Infinity Specializations | Check Point

ICS/OT security | Compendium CE

SecAI+ | CompTIA

Security+ | CompTIA

CySA+ | CompTIA

PenTest+ | CompTIA

SecurityX (formerly CASP+) | CompTIA

Certified Ethical Hacker | EC-Council

Certified SOC Analyst | EC-Council

Certified Penetration Testing Professional | EC-Council

Advanced WAF (AWAF) | F5

Access Policy Manager (APM) | F5

Advanced Firewall Manager (AFM) | F5

NGINX | F5

FortiGate | Fortinet

FortiAnalyzer | Fortinet

FortiManager | Fortinet

SD-WAN | Fortinet

FortiAuthenticator | Fortinet

FortiWeb | Fortinet

FortiMail | Fortinet

FortiSandbox | Fortinet

FortiSIEM | Fortinet

FortiEDR | Fortinet

FortiNAC | Fortinet

FortiSOAR | Fortinet

FortiPAM | Fortinet

Wireless LAN | Fortinet

FortiClient EMS | Fortinet

Generative AI | Google Cloud

NIOS Security | Infoblox

Cyber security | ISC2

Security | Microsoft

Azure | Microsoft

Pen Testing & Ethical Hacking | Mile2

AI Cybersecurity | Mile2

Cyber Threat Analyst | Mile2

Information Systems Management | Mile2

Incident Handling | Mile2

Web Application Security | Mile2

Cloud Security | Mile2

Forensics | Mile2

Disaster Recovery | Mile2

Healthcare | Mile2

Risk Management | Mile2

Auditing | Mile2

Cyber Range | Mile2

Security Awareness | Mile2

Netskope One | Netskope

CyberCore | OffSec

Penetration Testing | OffSec

Web Application Security | OffSec

Defensive Security | OffSec

Artificial Intelligence | OffSec

Subscriptions | OffSec

Firewall | Palo Alto Networks

SASE | Palo Alto Networks

Cortex XDR | Palo Alto Networks

Cortex XSOAR | Palo Alto Networks

Cortex XSIAM | Palo Alto Networks

DefensePro | Radware

Fundamentals | SCADEMY

C# | SCADEMY

C/C++ | SCADEMY

Java | SCADEMY

PHP | SCADEMY

Python | SCADEMY

WEB | SCADEMY

Cloud | SCADEMY

Cryptography | SCADEMY

Finance | SCADEMY

Healthcare | SCADEMY

Telecome | SCADEMY

Software design | SCADEMY

Software testing | SCADEMY

Kubernetes | SUSE

Contact form

Please fill form below to obtain more info about this training.






* Fields marked with (*) are required !!!

Information on data processing by Compendium - Centrum Edukacyjne Spółka z o.o.

TRAINING PRICE FROM 2200 EUR

  • In order to propose a date for this training, please contact the Sales Department

Upcoming F5 training

Training schedule F5