top of page

Formation Officielle F5 _ Advanced WAF
(previously licensed as ASM)  

Résumé

The BIG-IP Application Security Manager course (4 days) gives participants a functional understanding of how to deploy, tune, and operate BIG-IP Application Security Manager (ASM) to protect their web applications from HTTP-based attacks.

The course includes lecture, hands-on labs, and discussion about different ASM components for detecting and mitigating threats from multiple attack vectors such web scraping, Layer 7 Denial of Service, brute force, bots, code injection, and zero day exploits.

​

Thèmes abordés

  • Traffic processing with BIG-IP Local Traffic Manager (LTM)

  • Web application concepts

  • Web application vulnerabilities

  • Security policy deployment

  • Security policy tuning

  • Attack signatures

  • Positive security building

  • Securing cookies and other headers

  • Reporting and logging

  • User roles

  • Policy modification, merging, and exporting

  • Advanced parameter handling

  • Using application templates

  • Using Automatic Policy Builder

  • Integrating with web vulnerability scanners

  • Login enforcement and session tracking

  • Web scraping detection and mitigation

  • Session tracking

  • Geolocation Enforcement and IP Address Exceptions

  • Using Parent and Child policies

  • Layer 7 DoS protection

  • ASM and iRules

  • Using Content Profiles for AJAX and JSON applications

  • NEW - Advanced Bot Detection and Defense

  • NEW - Proactive Bot Defense

  • NEW — Simple Edit Mode for Attack Signatures

​

Certification

303 ASM Specialist

​

Profil formateur 

 Instructeur certifié par F5

​

Délai d’accès 

Se référer aux dates figurant au planning

​

Évaluations et sanctions de la formation

​

  • Quizz intermédiaires 

  • Lab technique en fin de module

  • Évaluation de satisfaction via un questionnaire pré formation, à chaud et à froid

  • Attestation de présence et de formation 

​​​

Handicap

​

Nos formations sont accessibles aux personnes en situation de handicap.

Un questionnaire envoyé en amont de la formation invite les participants à nous contacter s’ils ont besoins d’aménagements spécifiques en lien avec leur situation de handicap. Nous nous employons à rechercher, avec les personnes concernées, les moyens de compensation qui leur seront adaptés.

Pour en valider l'accès merci de nous contacter contact@formation-IT.org

Durée 

4 jours soit 28 heures

​

Prix public

3 800 € HT

​

Dates Paris ou Distanciel

​​​​​

​Cf. planning

​

Public concerné

Cette formation s’adresse aux administrateurs réseaux et sécurité chargés de l’installation et de la maintenance quotidienne du module Application Security Manager.

​

Objectifs pédagogiques

After course completion, participants will be able to differentiate between negative and positive security models, and configure the most appropriate protection for their own web applications.

​

Pré requis

Students must complete one of the following F5 prerequisites before attending this course:

​

The following free web-based courses, although optional, will be very helpful for any student with limited BIG-IP administration and configuration experience. These courses are available at F5 University:

- Getting Started with BIG-IP web-based training

- Getting Started with BIG-IP Local Traffic Manager (LTM) web-based training

- Getting Started with BIG-IP Application Security Manager (ASM) web-based training

​​​​​​​​

bottom of page