F5 Networks Setting Up BIG-IP Advanced WAF: Web Application Firewall

Agenda

1 - Setting Up the BIG-IP System

• Introducing the BIG-IP System
• Initially Setting Up the BIG-IP System
• Archiving the BIG-IP System Configuration
• Leveraging F5 Support Resources and Tools

2 - Threat Overview and Guided Configuration

• Classifying Attack Types
• Differentiating Benign and Malicious Clients
• Categorizing Attack Techniques
• Defining the Layer 7 Web Application Firewall
• Defining Traffic Processing Objects
• Introducing F5 Advanced WAF
• Using Guided Configuration for Web Application Security

3 - Exploring HTTP Traffic

• Exploring Web Application HTTP Request Processing
• Overview of Application-Side Vulnerabilities
• Defining Attack Signatures
• Defining Violations

4 - Securing HTTP Traffic

• Defining Learning
• Defining Attack Signature Staging
• Defining Attack Signature Enforcement

5 - Mitigating Credentials Stuffing

• Defining Credentials Stuffing Attacks
• The Credentials Stuffing Mitigation Workflow

6 - Form Encryption Using BIG-IP DataSafe

• What Elements of Application Delivery are Targeted?
• Exploiting the Document Object Model
• Protecting Applications Using DataSafe
• Configuring a DataSafe Profile

7 - Deploying Threat Campaigns

• Defining Threat Campaigns
• Live Update for Threat Campaigns

8 - Using Layer 7 Behavioral Analysis to Mitigate DoS

• Defining Behavioral Analysis
• Defining the DoS Protection Profile