F5 Agility Labs - Index

Welcome

Welcome to the F5 Web Application Firewall Solutions labs for F5 Agility 2025

Contents:

• WAF 102 - Getting started with WAF, Bot Detection and Threat Campaigns
  • Lab Environment & Topology
    • Environment
    • Lab Topology
  • Module 1: IPI & Geolocation
    • Exercise 1.1: IP Intelligence Policies
    • Exercise 1.2: Add a Geolocation Policy
  • Module 2: Bot Detection
    • Exercise 2.1: Bot Defense with Signatures
  • Module 3: Threat Campaigns
    • Exercise 3.1: Threat Campaigns
  • Module 4: Transparent WAF Policy
    • Exercise 4.1: Transparent Policy
• WAF 111 - Protecting Yourself Against the OWASP Top 10
  • Lab Environment & Topology
    • Environment
    • Lab Topology
  • Module 1 – Intro and Hacking the Juice Shop Web Application
    • Lab 1 – Introduction to the Juice Shop
    • Lab 2 – Hacking the Juice Shop
  • Module 2 – Create a BIG-IP Advanced WAF Policy to Protect the Juice Shop
    • Lab 1 - Use the Secure Guided Configuration to Build a WAF Policy
    • Lab 2 – Discover the OWASP Dashboard
    • Lab 3 – Refine your security posture using the OWASP Dashboard
    • Lab 4 – Advanced configuration using the OWASP Dashboard
  • Module 3 – Test Your WAF Policy
    • Lab 1 – Attempt to Hack the Juice Shop
    • Lab 2 – Use the F5 WAF Tester Tool
  • Module 4 – Appendix
    • Lab 1 – Setting Up SSH Access
• WAF 201 – Elevated WAF Security
  • Lab Environment & Topology
    • Environment
    • Lab Topology
  • Module 1: Elevated Bot Defense
    • Lab 1: Elevated Bot Defense
  • Module 2: Intro to Positive Security
    • Lab 2: Intro to Positive Security
  • Module 3: Layer 7 DoS Protection
    • Lab 3: Behavioral DoS Protection
  • Module 4: Login Page Protection
    • Lab 4: Login Page Protection
• WAF 101 - BIG-IP Security: Mitigating App Vulnerabilities with AWAF
  • Lab Environment & Topology
    • Environment
    • Lab Topology
  • Module 1 - Intro and Hacking the Juice Shop Web Application
    • Lab 1 – Introduction to the Juice Shop
    • Lab 2 – Hacking the Juice Shop
  • Module 2 – Create a BIG-IP Advanced WAF Policy to Protect the Juice Shop
    • Lab 1 - Use the Secure Guided Configuration to Build a WAF Policy
    • Lab 2 – Discover the OWASP Dashboard
    • Lab 3 – Refine your security posture using the OWASP Dashboard
    • Lab 4 – Advanced configuration using the OWASP Dashboard
  • Module 3 – Test Your WAF Policy
    • Lab 1 – Attempt to Hack the Juice Shop
    • Lab 2 – Use the F5 WAF Tester Tool
  • Module 4 - IP Intelligence
    • Lab 1 - IP Intelligence Policies
    • Lab 2 - Add a Geolocation Policy
  • Module 5 - Bot Detection and Mitigation
    • Lab 1 - Bot Defense with Signatures
    • Lab 2 - Elevated Bot Defense
• WAF 2025 - Mitigating App Vulnerabilities with BIG-IP Advanced WAF 17.1
  • Lab Environment & Topology
    • Environment
    • Lab Topology
  • Module 1 - Intro and Hacking the Juice Shop Web Application
    • Lab 1 – Introduction to the Juice Shop
    • Lab 2 – Hacking the Juice Shop
  • Module 2 – Create a BIG-IP Advanced WAF Policy to Protect the Juice Shop
    • Lab 1 - Use the Secure Guided Configuration to Build a WAF Policy
    • Lab 2 – Discover the OWASP Dashboard
    • Lab 3 – Test your Policy against the Juice Shop
    • Lab 4 – Advanced configuration Options
  • Module 3 - Protecting GraphQL Applications with F5 Advanced WAF
    • Lab 1 - Explore DVGA Attack Types and Execute Some Attacks
• WAF 301 - AWAF in a CI/CD Pipeline (Self Guided)
  • Intro
    • Two main features that make AWAF to DevSecOps integration frictionless
  • AWAF policy overview
    • Policy structure
  • ChatOps
  • Lab structure
    • Lab Environment & Topology
    • Module 1: AWAF Policy Template Creation on BIG-IP (secops engineer)
    • Module 2: Policy testing - Intro to f5 WAF Tester (secops engineer)
    • Module 3: Pipeline integration (SRE)
• WAF 302 - Enabling API Protection with APM and AWAF
  • Intro
  • Lab Scenario
    • Lab Environment & Topology
    • Module 1 - API Protection Using APM oAuth
    • Module 2: AWAF Policy Template Creation on BIG-IP (secops engineer)
    • Module 3: Deploying a development instance of Arcadia Finance
• WAF 341 – Advanced Protection and Positive Security (Self Guided)
  • Lab Environment & TopologyLab Environment & Topology
    • Environment
    • Lab Topology
  • Module 1: Bruteforce Protection, Credential Stuffing
    • Lab 1.1: Brute Force Attack Prevention
    • Lab 1.2: Credential Stuffing
  • Module 2: HTTP Methods, DataGuard, Sensitive Data
    • Lab 2.1: Allowed HTTP Request Methods
    • Lab 2.2: Data Guard
    • Lab 2.3: Sensitive Data
  • Module 3: DataSafe, Parameter Protection
    • Lab 3.1: DataSafe
    • Lab 3.2: Protection from Parameter Exploits