Kurs F5

Kursbeschreibung

Code: F5-TRG-NGX-MIT-NAP-ILT

This course gives participants a functional understanding of how to deploy and operate NGINX App Protect (WAF and DoS) to protect their web applications from the most common web application vulnerabilities and Layer 7 denial of service attacks.

 

This course features hands-on labs and discussion about detecting and mitigating threats from different threat vectors.

 

Audience

The target audience is personae new to DevOps and SecOps, along with anyone in DevOps where exposure to app security knowledge is limited. Application developers responsible for adding NGINX App Protect to their ecosystems are also encouraged to attend this class.

Kursplan Liste anzeigen

  • Chapter 1: Introduction
    • Visualize an application as an assembly of elements and resources across the client, network and server environments
    • Make the connection between clients, application, and data
    • Visualize the architecture of the application we will secure
  • Chapter 2: Overview of HTTP Communication
    • Overview of web application communication elements
    • Overview of HTTP message structure
    • Exploiting the document object model
    • Overview of web application implementation paradigms
  • Chapter 3: Overview of Web Application Vulnerabilities
    • Assessing how web applications might be vulnerable
    • Common exploits against web applications
    • Exploiting the document object model
    • Reviewing the Open Web Application Security Project® Top 10 list
  • Chapter 4: Applying Security Concepts and Enabling NGINX App Protect
    • Differentiating a web application firewall from other security solutions
    • Defining a security policy
    • Exploring attacks at Layer 7 of the OSI model
    • Differentiating between positive and negative security
    • Defining attack signatures and threat campaigns
    • Defining Enforcement Mode
  • Chapter 5: Logging Security Events in NGINX App Protect
    • Logging with NGINX
    • Reviewing the default security log configuration
    • Using custom logs
    • Understanding security log variables
  • Chapter 6: Setting Policy
    • Review default policy protections
    • Examine the default policy configuration file
    • Review attack signature sets and blocking settings
    • Examine the strict policy
  • Chapter 7: Policy tuning and working with multiple policies
    • Use cases for multiple policies
    • Policy tuning
    • Working with external policy reference files
  • Chapter 8: Updating Attack Signatures and Threat Campaigns
    • Outline steps for attack signature and threat campaign updates
    • Setting email options for role and business needs
    • Testing a Threat Campaign violation
  • Chapter 9: Mitigating Denial of Service Attacks
    • Understanding stress inducing client behaviors
    • Examining denial of service activity
    • Connecting NGINX App Protect DoS Directives and Policy
    • Overview of logging DoS events
  • Chapter 10: Troubleshooting
    • Common errors
    • Using native troubleshooting
    • Ways to collect information before reaching out to technical support
    • Review how to update NGINX Plus and NGINX App Protect
  • Chapter 11: Final Project
    • Create a policy based on real-world requirements without guidance
TRAININGSPLAN ALS PDF HERUNTERLADEN

Zusätzliche Informationen

Voraussetzungen

Before taking this course, make sure you have completed one of the following:

  • Administering NGINX for Web Services

 

The course assumes a basic understanding of networking, web servers, HTTP, load balancing, caching, proxying, and related concepts. Hands on labs are performed in a Linux environment. You will need to be able to navigate the file system from the command line and edit configuration files using VI/VIM. Additional experience with Linux environments will be helpful.
Schwierigkeitsgrad
Zeitdauer 2 Tage
Zertifikat

The participants will obtain certificates signed by F5 (course completion).

This course helps prepare participants for the F5 Certified Administrator, NGINX (F5-CA, NGINX) certification. The certification requires candidates to pass four exams: NGINX Management (F5CAN1); NGINX Configuration: Knowledge (F5CAN2); NGINX Configuration: Demonstrate (F5CAN3); and NGINX Troubleshoot (F5CAN4).

More information: https://education.f5.com/learning-path/view/24
Trainer

Certified F5 Networks Trainer

Zusätzliche kurse F5 | NGINX

F5 ALLE KURSE
Thematisch verwandte Kurse

Cybersecurity

Blue Team | Centri

SecAI+ | CompTIA

Security+ | CompTIA

CySA+ | CompTIA

PenTest+ | CompTIA

SecurityX (formerly CASP+) | CompTIA

Certified Ethical Hacker | EC-Council

Certified SOC Analyst | EC-Council

Certified Penetration Testing Professional | EC-Council

Advanced WAF (AWAF) | F5

Access Policy Manager (APM) | F5

Advanced Firewall Manager (AFM) | F5

NGINX | F5

FortiGate | Fortinet

FortiAnalyzer | Fortinet

FortiManager | Fortinet

SD-WAN | Fortinet

FortiAuthenticator | Fortinet

FortiWeb | Fortinet

FortiMail | Fortinet

FortiSandbox | Fortinet

FortiSIEM | Fortinet

FortiEDR | Fortinet

FortiNAC | Fortinet

FortiSOAR | Fortinet

FortiPAM | Fortinet

Wireless LAN | Fortinet

FortiClient EMS | Fortinet

NIOS Security | Infoblox

Cyber security | ISC2

Firewall | Palo Alto Networks

SASE | Palo Alto Networks

Cortex XDR | Palo Alto Networks

Cortex XSOAR | Palo Alto Networks

Cortex XSIAM | Palo Alto Networks

Endpoint Security | SentinelOne

NIS2/KSC

SecAI+ | CompTIA

Security+ | CompTIA

CySA+ | CompTIA

PenTest+ | CompTIA

SecurityX (formerly CASP+) | CompTIA

Certified Ethical Hacker | EC-Council

Certified SOC Analyst | EC-Council

Certified Penetration Testing Professional | EC-Council

Extreme Fabric | Extreme Networks

Extreme Switching | Extreme Networks

ExtremeWireless Cloud | Extreme Networks

ExtremeControl | Extreme Networks

ExtremeCloud™ IQ – Site Engine | Extreme Networks

ExtremeCloud™ IQ – Controller | Extreme Networks

ExtremeCloud™ SD-WAN | Extreme Networks

Administering BIG IP | F5

Troubleshooting BIG IP | F5

Local Traffic Manager (LTM) | F5

Advanced WAF (AWAF) | F5

Domain Name System (DNS) | F5

Access Policy Manager (APM) | F5

Advanced Firewall Manager (AFM) | F5

NGINX | F5

iRules | F5

rSeries/VELOS/F5OS | F5

FortiGate | Fortinet

FortiAnalyzer | Fortinet

FortiManager | Fortinet

SD-WAN | Fortinet

FortiAuthenticator | Fortinet

FortiWeb | Fortinet

FortiMail | Fortinet

FortiSandbox | Fortinet

FortiSIEM | Fortinet

FortiEDR | Fortinet

FortiNAC | Fortinet

FortiSOAR | Fortinet

FortiPAM | Fortinet

Wireless LAN | Fortinet

FortiClient EMS | Fortinet

NIOS DDI | Infoblox

NIOS Security | Infoblox

NIOS for Service Providers | Infoblox

NetMRI | Infoblox

Cyber security | ISC2

Kontaktformular

Bitte füllen Sie das untenstehende Formular aus, wenn Sie weitere Informationen zu der oben genannten Schulung wünschen.






* Mit (*) gekennzeichnete Felder sind Pflichtfelder!

INFORMATIONEN ZUR DATENVERARBEITUNG DURCH EXCLUSIVE NETWORKS DEUTSCHLAND GMBH

TRAININGSPREIS AB 2200 EUR

  • Um einen Termin für diese Schulung vorzuschlagen, wenden Sie sich bitte an die Vertriebsabteilung

Kommende Kurse F5

KURSPLAN F5