Introduction

F5 Insight Lab

F5 Troubleshooting Lab: LTM & ASM/AWAF Tickets

Audience: Intermediate F5 admins familiar with basic VS/pool/WAF concepts.

Objectives:

• Use BIG‑IP tools (GUI, tmsh, logs) to troubleshoot L4–L7 issues.
• Diagnose and fix misconfigurations in LTM and ASM/AWAF.
• Interpret WAF events (false positives vs real attacks).
• Complete the most trouble tickets accurately before another team

Setup

• There are 14 tickets waiting for your analysis and proposed solution
• This lab is designed to be worked in teams of two, plus it is a great opportunity to meet someone new, so we encourage pairs if possible
• Solutions will be judged successful or the student may make a subsequent proposal
• Tickets may be worked in any order, however they are ordered with the least difficult first
• Each proposed solution will be approved by a Lab Assistant

How to use this lab

Scenario: You are a Tier‑2 engineer receiving tickets from users or Tier‑1.

Tools expected:

• F5 Insight, tmsh commands, BIG-IP logs, cURL from BIG‑IP, browser concepts like network tools, and basic AI knowledge

Student deliverables per ticket:

• Root cause explanation.
• Exact fix proposed.
• Evidence (screenshot or command output) where needed.

Note

TIP: The pair of BIG-IP’s for North are not used in this lab.

Please proceed to the first ticket.

Go to Ticket 1