SSLO 201: Advanced Use Cases with SSL Orchestrator (Agility 2022 | 2 hours)

Note

Requires UDF Blueprint: "Agility 2022 - SSL Orchestrator 201"

BIG-IP 16.1 / SSL Orchestrator 9.2

As organizational requirements change, so does the need to update security polices and apply additional features to existing F5 SSL Orchestrator deployments. There is no need to fear required maintenance and regular upkeep of your security strategy. Maintenance can be performed within the SSLO Dashboard. It also provides enhanced statistical information which is needed to differentiate between normal and abnormal traffic.

After completing the modules in this lab, you will be familiar with:

• Integrating authentication to facilitate user-based policy enforcement and logging on an HTTP service (web proxy)

• Implementing a layered SSL Orchestrator architecture to handle more complex logic requirements

• Deploy WAFaaS to protect an Existing Application in an inbound L3 topology

Expected time to complete: 2 hours

Pre-requisite: Completion of the SSL Orchestrator 101 lab is recommended prior to attending this lab.

CONTENTS

• 1. SSL Orchestrator Lab Environment
  • 1.1. Accessing the Virtual Lab
  • 1.2. Network Diagram
  • 1.3. Virtual Lab Infrastructure Details (and Credentials)
• 2. Transparent Authentication Using NTLM
  • 2.1. Scenario
  • 2.2. Lab Overview
  • 2.3. Verify authentication is currently disabled
  • 2.4. Review the Access Policy and AAA configuration
  • 2.5. Enable NTLM authentication on explicit proxy topology
  • 2.6. Verify that user information is being identified on the F5 SSL Orchestrator
  • 2.7. Enable and test authentication offload
• 3. Internal Layered SSL Orchestrator Architecture
  • 3.1. Scenario
  • 3.2. Lab Overview
  • 3.3. Verify Pre-requisite SSL Orchestrator Configuration
  • 3.4. Create Two Empty VLANs
  • 3.5. Modify Existing Topology
  • 3.6. Create Secondary Topology
  • 3.7. Layered Virtual Server and Topology Steering iRule
  • 3.8. Test Layered SSL Orchestrator Topology Deployment
• 4. Web Application Firewall-as-a-Service (WAFaaS)
  • 4.1. Scenario
  • 4.2. Lab Overview
  • 4.3. The Juiceshop Application
  • 4.4. Create WAFaaS Security Device
  • 4.5. Create Existing Application L3 Inbound Topology
  • 4.6. Validate WAFaaS
• 5. Conclusion
• 6. SSL Orchestrator Labs
• 7. Contributors
• 8. Revision History
• 9. Lab Guide Repository (GitHub)