Configuring BIG-IP AFM Advanced Firewall Manager v.16.1

This course is intended for system and network administrators responsible for the configuration and ongoing administration of a BIG-IP Advanced Firewall Manager (AFM) system.

After completing this course, participants will be able to complete the following tasks: 

• Configure and manage an AFM system

• Configure AFM Network Firewall in a positive or negative security model

• Configure Network Firewall to allow or deny network traffic using rules based on protocol, source, destination, geography, and other predicate types

• Prebuild firewall rules using lists and schedule components

• Enforce firewall rules immediately or test them using policy staging

• Use Packet Tester and Flow Inspector features to check network connections against your security configurations for Network Firewall, IP intelligence and DoS features

• Configure various IP Intelligence features to identify, record, allow or deny access by IP address

• Configure the Device DoS detection and mitigation feature to protect the BIG-IP device and all applications from multiple types of attack vectors

• Configure DoS detection and mitigation on a per-profile basic to protect specific applications from attack

• Use DoS Dynamic Signatures to automatically protect the system from DoS attacks based on long term traffic and resource load patterns

• Configure and use the AFM local and remote log facilities

• Configure and monitor AFM’s status with various reporting facilities

• Export AFM system reports to your external monitoring system directly or via scheduled mail

• Allow chosen traffic to bypass DoS checks using Whitelists

• Isolate potentially bad clients from good using the Sweep Flood feature

• Isolate and re-route potentially bad network traffic for further inspection using IP Intelligence Shun functionality

• Restrict and report on certain types of DNS requests using DNS Firewall

• Configure, mitigate, and report on DNS based DoS attacks with the DNS DoS facility

• Configure, mitigate, and report on SIP based DoS attacks with the SIP DoS facility

• Configure, block, and report on the misuse of system services and ports using the Port Misuse feature

• Build and configure Network Firewall rules using BIG-IP iRules

• Be able to monitor and do initial troubleshooting of various AFM functionality

Students must complete one of the following F5 prerequisites before attending this course: 

• Administering BIG-IP instructor-led course or 

• F5 Certified BIG-IP Administrator 

The following free web-based courses, although optional, will be very helpful for any student with limited BIG-IP administration and configuration experience. 

These courses are available at LearnF5 (https://www.f5.com/services/training): 

• Getting Started with BIG-IP web-based training 

• Getting Started with BIG-IP Local Traffic Manager (LTM) web-based training 

• Getting Started with BIG-IP Advanced Firewall Manager (AFM) web-based training 

The following general network technology knowledge and experience are recommended before attending any F5 Global Training Services instructor-led course: 

• OSI model encapsulation 

• Routing and switching 

• Ethernet and ARP 

• TCP/IP concepts 

• IP addressing and subnetting 

• NAT and private IP addressing 

• Default gateway 

• Network firewalls 

• LAN vs. WAN 

The following course-specific knowledge and experience is suggested before attending this course: 

• HTTP and DNS protocols

F5 Networks is the leader in application security and availability. F5 Solutions ensure that applications are always secure and perform the way they should – anywhere, anytime, and on any device.

F5 Networks training courses will give you the knowledge needed to install and configure F5 Networks solutions including LTM, ASM, DNS, APM, AFM, AAM, Viprion, Big-IQ, iApps, and iRules.

F5 trainers bring to the classroom decades of extensive experience. All F5 Networks courses consist of Lectures, Labs, and Discussions and are available either in a classroom setting or as virtual live courses.

Network professionals intending to attend F5 Networks courses are required to be proficient with Basic PC operation and application skills, Windows OS & Basic Web Browser operation (HTTP).