Kurs F5

Kursbeschreibung

Code: F5-TRG-NGX-SEC-ILT

Students will identify and administer client-side and upstream encryption (TLS) by specifying ciphers, Diffie-Hellman parameters, Perfect Forward Secrecy. Explore how to configure access control using limit rates and deny/allow lists and use dynamic SSL certificate loading. Introduce tips and best practices for securing NGINX like configuring HTTP/2 and HTTP/3 protocols. Become familiar with using the API Gateway and Secure API traffic using JWT authentication.

 

Audience

This course is for NGINX Administrators and Security Operations engineers who want an in-depth understanding of hardening NGINX security features.

Kursplan Liste anzeigen

  • Chapter 1: Introduction
    • Define application security
    • Get familiar with the lab environment
    • Get started with a web application
  • Chapter 2: Setting Up HTTPS
    • Secure web traffic
    • Learn basics of encryption using TLS
    • Configure an HTTPS NGINX server
  • Chapter 3: Access Control
    • Set limits based on access, connections, and request rate
    • Set up audit, log and debug client connections
    • Use NGINX Plus key-value store
    • Describe methods for how TLS certificates are loaded in NGINX: traditional, dynamic lazy and dynamic in-memory
  • Chapter 4: Authentication
    • Basic authentication
    • Sub request
    • Secure Links to content
  • Chapter 5: Security Tips
    • Unprivileged (non-root) installation of NGINX Plus
    • HTTP versions
    • Traffic mirroring
  • Chapter 6: Secure API Traffic
    • Understand the basics of NGINX API Gateway
    • Create a JWT Authentication Zone
    • Authenticate and sign API requests
  • Chapter 7: Performance Tips and Resources
    • Tune TLS Handshake Operations (keepalive and Session Tickets)
    • Additional Resources
TRAININGSPLAN ALS PDF HERUNTERLADEN

Zusätzliche Informationen

Voraussetzungen

Before taking this course, make sure you have completed one of the following:

  • Administering NGINX for Web Services

 

The course assumes a basic understanding of networking, web servers, HTTP, load balancing, caching, proxying, and related concepts. Hands on labs are performed in a Linux environment. You will need to be able to navigate the file system from the command line and edit configuration files using VI/VIM. Additional experience with Linux environments will be helpful.
Schwierigkeitsgrad
Zeitdauer 1 Tag
Zertifikat

The participants will obtain certificates signed by F5 (course completion).

This course helps prepare participants for the F5 Certified Administrator, NGINX (F5-CA, NGINX) certification. The certification requires candidates to pass four exams: NGINX Management (F5CAN1); NGINX Configuration: Knowledge (F5CAN2); NGINX Configuration: Demonstrate (F5CAN3); and NGINX Troubleshoot (F5CAN4).

More information: https://education.f5.com/learning-path/view/24
Trainer

Certified F5 Networks Trainer

Zusätzliche kurse F5 | NGINX

F5 ALLE KURSE
Thematisch verwandte Kurse

Cybersecurity

Blue Team | Centri

SecAI+ | CompTIA

Security+ | CompTIA

CySA+ | CompTIA

PenTest+ | CompTIA

SecurityX (formerly CASP+) | CompTIA

Certified Ethical Hacker | EC-Council

Certified SOC Analyst | EC-Council

Certified Penetration Testing Professional | EC-Council

Advanced WAF (AWAF) | F5

Access Policy Manager (APM) | F5

Advanced Firewall Manager (AFM) | F5

NGINX | F5

FortiGate | Fortinet

FortiAnalyzer | Fortinet

FortiManager | Fortinet

SD-WAN | Fortinet

FortiAuthenticator | Fortinet

FortiWeb | Fortinet

FortiMail | Fortinet

FortiSandbox | Fortinet

FortiSIEM | Fortinet

FortiEDR | Fortinet

FortiNAC | Fortinet

FortiSOAR | Fortinet

FortiPAM | Fortinet

Wireless LAN | Fortinet

FortiClient EMS | Fortinet

NIOS Security | Infoblox

Cyber security | ISC2

Firewall | Palo Alto Networks

SASE | Palo Alto Networks

Cortex XDR | Palo Alto Networks

Cortex XSOAR | Palo Alto Networks

Cortex XSIAM | Palo Alto Networks

Endpoint Security | SentinelOne

NIS2/KSC

SecAI+ | CompTIA

Security+ | CompTIA

CySA+ | CompTIA

PenTest+ | CompTIA

SecurityX (formerly CASP+) | CompTIA

Certified Ethical Hacker | EC-Council

Certified SOC Analyst | EC-Council

Certified Penetration Testing Professional | EC-Council

Extreme Fabric | Extreme Networks

Extreme Switching | Extreme Networks

ExtremeWireless Cloud | Extreme Networks

ExtremeControl | Extreme Networks

ExtremeCloud™ IQ – Site Engine | Extreme Networks

ExtremeCloud™ IQ – Controller | Extreme Networks

ExtremeCloud™ SD-WAN | Extreme Networks

Administering BIG IP | F5

Troubleshooting BIG IP | F5

Local Traffic Manager (LTM) | F5

Advanced WAF (AWAF) | F5

Domain Name System (DNS) | F5

Access Policy Manager (APM) | F5

Advanced Firewall Manager (AFM) | F5

NGINX | F5

iRules | F5

rSeries/VELOS/F5OS | F5

FortiGate | Fortinet

FortiAnalyzer | Fortinet

FortiManager | Fortinet

SD-WAN | Fortinet

FortiAuthenticator | Fortinet

FortiWeb | Fortinet

FortiMail | Fortinet

FortiSandbox | Fortinet

FortiSIEM | Fortinet

FortiEDR | Fortinet

FortiNAC | Fortinet

FortiSOAR | Fortinet

FortiPAM | Fortinet

Wireless LAN | Fortinet

FortiClient EMS | Fortinet

NIOS DDI | Infoblox

NIOS Security | Infoblox

NIOS for Service Providers | Infoblox

NetMRI | Infoblox

Cyber security | ISC2

Netzwerk und Wireless

Network+ | CompTIA

Extreme Fabric | Extreme Networks

Extreme Switching | Extreme Networks

ExtremeWireless Cloud | Extreme Networks

ExtremeControl | Extreme Networks

ExtremeCloud™ IQ – Site Engine | Extreme Networks

ExtremeCloud™ IQ – Controller | Extreme Networks

ExtremeCloud™ SD-WAN | Extreme Networks

Administering BIG IP | F5

Troubleshooting BIG IP | F5

Local Traffic Manager (LTM) | F5

Domain Name System (DNS) | F5

NGINX | F5

iRules | F5

rSeries/VELOS/F5OS | F5

NIOS DDI | Infoblox

NIOS for Service Providers | Infoblox

NetMRI | Infoblox

Firewall | Palo Alto Networks

SASE | Palo Alto Networks

Kontaktformular

Bitte füllen Sie das untenstehende Formular aus, wenn Sie weitere Informationen zu der oben genannten Schulung wünschen.






* Mit (*) gekennzeichnete Felder sind Pflichtfelder!

INFORMATIONEN ZUR DATENVERARBEITUNG DURCH EXCLUSIVE NETWORKS DEUTSCHLAND GMBH

TRAININGSPREIS AB 1100 EUR

  • Um einen Termin für diese Schulung vorzuschlagen, wenden Sie sich bitte an die Vertriebsabteilung

Kommende Kurse F5

KURSPLAN F5