F5 CONFIGURING BIG-IP ASM
COURSE DESCRIPTION
The BIG-IP Application Security Manager course gives participants a functional understanding of how to deploy, tune, and operate BIG-IP Application Security Manager (ASM) to protect their web applications from HTTP-based attacks.
The course includes lecture, hands-on labs, and discussion about different ASM components for detecting and mitigating threats from multiple attack vectors such web scraping, Layer 7 Denial of Service, brute force, bots, code injection, and zero day.
Topics covered in this course (v12.0)
- Setting up the BIG-IP system
- Traffic processing with BIG-IP Local Traffic Manager (LTM)
- Web application concepts
- Web application vulnerabilities
- Security policy deployment
- Security policy tuning
- Attack signatures
- Positive security building
- Securing cookies and other headers
- Reporting and logging
- User roles
- Policy modification, merging, and exporting
- Advanced parameter handling
- Using application templates
- Using Automatic Policy Builder
- Integrating with web vulnerability scanners
- Login enforcement and session tracking
- Web scraping detection and mitigation
- Layer 7 DoS protection
- ASM and iRules
- XML and web services support
- AJAX and JSON support
REQUIREMENTS
Students must complete one of the following F5 prerequisites before attending this course: Administering BIG-IP instructor-led course F5 Certified BIG-IP Administrator The following general network technology knowledge and experience are recommended before attending any F5 Global Training Services instructor-led course: OSI model encapsulation Routing and switching Ethernet and ARP TCP/IP concepts IP addressing and subnetting NAT and private IP addressing Default gateway Network firewalls LAN vs. WAN The following course-specific knowledge and experience is suggested before attending this course: Web application delivery HTTP, HTTPS, FTP and SSH protocols TLS/SSL
WHAT IS THE TARGET AUDIENCE ?
This course is intended for :
- network operators,
- network administrators,
- network engineers,
- network architects,
- security administrators,
- and security architects responsible for installation, setup, configuration, and administration of the BIG-IP ASM system.