Configuring BIG-IP ASM: Application Security Manager Course Overview

Target Audience for Configuring BIG-IP ASM: Application Security Manager

The "Configuring BIG-IP ASM" course equips IT professionals with skills to secure web applications using F5's ASM.

• Network Security Engineers
• Application Security Specialists
• System Administrators managing F5 BIG-IP environments
• Security Operations (SecOps) personnel
• Infrastructure Architects focusing on security solutions
• IT Professionals involved in cybersecurity measures
• Network Administrators seeking to enhance web application security
• F5 Technology Specialists and Consultants
• Security Analysts responsible for application security
• DevOps Engineers interested in security automation
• IT Managers overseeing network and application security
• Technical Support Engineers for F5 products
• Compliance Officers managing web application compliance standards

Learning Objectives - What you will Learn in this Configuring BIG-IP ASM: Application Security Manager?

Introduction to Learning Outcomes

Gain expertise in securing web applications with F5's BIG-IP Application Security Manager (ASM). This course provides skills in traffic processing, policy creation, and attack mitigation.

Learning Objectives and Outcomes

• Understanding BIG-IP System Setup: Learn to configure and archive settings and utilize F5 support resources.
• Traffic Processing and Profiles: Grasp the functionality of BIG-IP traffic processing objects and the flow of network packets, including HTTP request processing.
• Web Application Firewall (WAF) Configuration: Understand how to deploy and manage ASM as a WAF, providing Layer 7 security.
• Security Policy Deployment and Tuning: Learn to deploy security policies using various models, configure attack signatures, and tune policies to minimize false positives.
• Identification and Handling of Common Web Vulnerabilities: Recognize common exploits and vulnerabilities in web applications and address them with ASM.
• Attack Signature Management: Define, update, and manage attack signatures to protect against known threats.
• Positive Security Policy Building: Build and manage a positive security model, learning how to enforce legitimate behavior and block malicious activities.
• Integration with Vulnerability Scanners: Learn to integrate output from web application vulnerability scanners into the ASM for enhanced security.
• Advanced Threat Protection: Configure mitigation techniques for Layer 7 DoS attacks, brute force attacks, web scraping, and bot protection.
• Policy Administration with iRules and Content Profiles: Utilize iRules for customized traffic interception and create content profiles for modern web applications (AJAX, JSON).

These objectives aim to equip students with the skills necessary to effectively secure applications using BIG-IP ASM, ensuring comprehensive protection against a wide range of web application threats.