Duration
4 days
Overview
The BIG-IP Application Security Manager course gives participants a functional understanding of how to deploy, tune, and operate BIG-IP Application Security Manager (ASM) to protect their web applications from HTTP-based attacks. The course includes lecture, hands-on labs, and discussion about different ASM components for detecting and mitigating threats from multiple attack vectors such web scraping, Layer 7 Denial of Service, brute force, bots, code injection, and zero day.
Prerequisites
Students should understand: Basic HTTP and HTML concepts Basic security concepts
Common network terminology Web application terminology In addition, students should be proficient in: Basic PC operation and application skills, including operating a keyboard, mouse, Linux and Windows OS Basic Web browser operation (Internet Explorer and Mozilla Firefox are used in class)
Audience
This course is intended for security and network administrators who will be responsible for the installation and day-to-day maintenance of the Application Security Manager
Topics
- Setting up the BIG-IP system
- Traffic processing with BIG-IP Local Traffic Manager (LTM)
- Web application concepts
- Web application vulnerabilities
- Security policy deployment
- Security policy tuning
- Attack signatures
- Positive security building
- Securing cookies and other headers
- Reporting and logging
- User roles
- Policy modification, merging, and exporting
- Advanced parameter handling
- Using application templates
- Using Automatic Policy Builder
- Integrating with web vulnerability scanners
- Login enforcement and session tracking
- Web scraping detection and mitigation
- Layer 7 DoS protection
- ASM and iRules
- XML and web services support
- AJAX and JSON support
Programme scope, delivery arrangements and suitability are confirmed during enquiry.