F5 Distributed Cloud: Web Application Security & Scanning

This hands-on lab environment highlights the concepts and capabilties of F5 Distributed Cloud.

Narrative: During the lab you will be playing the role of a Network Security Engineer at ACME Corp who responds to new business requirements quickly by implementing F5 Distributed Cloud security solutions.

Goal: Implement and operate an application security environment utilizing F5 SaaS-Powered Distributed Cloud core security tooling.

• Full walkthrough of F5 Distributed Cloud Web Application Firewall leveraging policy creation, use, and management.

• Understanding of security event searching, navigation, filtering and tooling with forensics.

• Utilize Signature-based Bot Protections.

• Explore functionality and purpose of Malicious User.

• Deploy Web Application Scanning as a continual security assessment.

• Use AI-Assisted Analytics to validate security events and gain operational insights.

This Lab uses the [AppWorld] F5XC Security Base Lab UDF Blueprint.

Labs:

• Introduction to the Lab
  • Lab Environment
  • Accessing F5 Distributed Cloud Console
  • Course/Lab Invitation
  • Accessing UDF (F5 Unified Demo Framework)
  • Accessing F5 Distributed Cloud
• Lab 1: Deploying and Managing F5 Distributed Cloud Web Application Firewall Configuration
  • Task 1: Discover Your Animal (Namespace)
  • Task 2: Exploring the F5 Distributed Console
  • Task 3: Configure WAF Policy on the Load Balancer
  • Task 4: Testing the WAF Policy & Reviewing Event Data
  • Task 5: Understanding Exclusions and Customizing WAF Policy
• Lab 2: Reviewing Signature-based Bot Strategies and enabling F5 Distributed Cloud Bot Defense
  • Task 1: Reviewing Signature-based Bot protection
  • Task 2: Enabling F5 Distributed Cloud Bot Defense
• Lab 3: Malicious Users
  • Task 1: Creating a User Identification Policy
  • Task 2: Enable Malicious User Detection and Mitigation Actions
• Lab 4: Web App Scanning
  • Task 1: View Existing Scan
  • Task 2: Configure a Web Application Scan
  • Task 3: View Post Lab Scan
• Lab 5: AI Assistant and Security Operations
  • Task 1: Exploring AI Assistant
• Conclusion
• Appendix