F5Advanced Web Application Firewall (WAF)

WAF is a must in Every Data Center today. They protect your Application against Bots, Top OWASP attacks, API protection, DOS detection and stolen credentials. F5 Advance WAF is among world top 10 rated WAF product and widely implemented In Large Enterprise networks and Service providers across the world.

Horizon Computers is a leader in Network and Application Security segment and has Successfully delivered F5 Advance WAF training to many Corporate Clients.

Duration: 4 days full time

Training Delivery mode :
Instructor Led Training in Classroom
Virtual online Instructor Led Training

Pre-requisite:
Participants must be well versed with F5 LTM and general security

• ASM Topics:

  • Setting up the BIG-IP system
  • Setting up the BIG-IP system
  • Setting up the BIG-IP system
  • Web application vulnerabilities

• Lab 1: Installation and Setup

  • Install andSetup
  • LicensingSystem
  • Set UpUtility
  • Set UpUtility
  • Configuration
  • Backup Lab
  • 2:Fiddler
  • Lab 3: HTTP Vulnerabilities

• Day 2 Agenda

  • Understanding and Configuring Security Policy Deployment
  • Understanding and Configuring Security Policy Deployment
  • Understanding and Configuring Security Policy Deployment
  • Understanding and Configuring Positive Security Building

• Labs Day2:

  • Configuration ASM
  • Applications Configurations
  • Security Policy
  • Attack Signatures
  • Parameters and Learning

• Day3 Agenda

  • Cookies and other Header
  • Reporting and Logging
  • User Roles and Policy Modifications
  • Advance Parameter Handling
  • Application Ready Template
  • Automatic Policy Building

• Day3 Labs

  • Rapid Deployment
  • Cookies and other Header Capture
  • Deploying Application ready Security Policy
  • Reporting , Remote Syslog server
  • Partitioning users Roles

• Day4 Agenda

  • Web Application Vulnerability Scanner
  • Login Enforcement & Session Tracking
  • Brute Force and Web Scrapping Mitigation
  • DOS Mitigation
  • ASM and iRules
  • Content Profiles

• Labs for Day

  • Integrating Vulnerability Scanner
  • Implementing Login Enforcement
  • DOS Mitigation
  • iRules for flow and Web Scrapping