F5 BIG-IP DNS (in progress)
19. F5 DNS iRule Examples
website: https://rayka-co.com/lesson/f5-dns-irule-examples/
youtube: https://youtu.be/A2HrmyYOaBc
F5 DNS iRule allows you to inspect incoming DNS queries and change the response based on the query type or content, or even redirect requests to different servers based on custom logic.

نام
دوره:F5 Advanced WAF (AWAF) نسخه
17.1
14-
secure web application against Cookie tampering in F5 AWAF
https://youtu.be/fjWYZ53mHlA

در این بخشچونگی مقابله با parameter
tampering درF5 AWAF نشان
داده خواهد شد
قبلاً در
خصوص پارامترهایی که توسط کاربر واردمی‌شوند صحبت کردیم و پارامتر q
با همانجستجو را تنظیم کردیم.

اماپارامترهایی هم هستند که توسط application
تعیینمی‌شوند و دو نوع static
و dynamicدارند.
هر دونوع این پارامترها در این بخش نشان داده
می‌شود و جلوی تغییر غیر مجاز آن گرفتهمی شود

F5 BIG-IP DNS21. F5 DNS order of Operations
website: https://rayka-co.com/lesson/f5-dns-order-of-operations/youtube: https://youtu.be/lA_pMOu1kqg
F5 DNS order of operations means the sequence in which the F5 DNS system’s modules process and resolve a DNS query.

بدینوسیله به اطلاع میرساند که برخی از محصولات آموزشی شرکت رایکا، به ویژه آن دسته که طی دو سال گذشته منتشر شده اند، از انتهای ماه فروردین دچار افزایش قیمت خواهند شد.

Course: F5 BIG-IP AWAFLesson: 1. what is F5 AWAF
website: https://rayka-co.com/lesson/what-is-f5-awaf/
youtube: https://youtu.be/f9MnzRD3VAA
What is F5 AWAF? This lesson explores the features of the F5 Advanced Web Application Firewall (AWAF), formerly known as ASM. We will examine how this security solution provides web applications with comprehensive protection against a spectrum of cyber threats, particularly those listed in the OWASP Top 10.
Additionally, we will draw comparisons between the capabilities of F5 AWAF and an application firewall/IPS solutions as a network engineer, highlighting the unique advantages that F5 AWAF offers in the area of web security.

نام دوره: F5 Advanced WAF (AWAF) نسخه 17.116- جلوگیری از حملات brute force
https://youtu.be/bHaO26CtiuQدر این بخش نشان خواهیم داد که چگونه F5 AWAF از حملات brute force جلوگیری می کند.

Course: F5 BIG-IP AWAF (formerly ASM) Lesson 2: F5 AWAF Lab Preparation Part 1 _ Setting Up DVWA for Security Testing
website: https://lnkd.in/dtEAVx6Yyoutube: https://youtu.be/BVHV8CiBWaE
The first part of this lesson is to explore the F5 AWAF Lab topology, which we will focus on throughout the course. We then set up the first part of the lab topology, which is setting up DVWA (Damn Vulnerable Web Application), an intentionally vulnerable web application that we secure using the F5 AWAF module.

course: F5 BIG-IP AWAF (Formerly ASM)lesson 3. F5 AWAF Lab Preparation Part 2 _ Prepare Hack-It-Yourself PHP Auction
website: https://rayka-co.com/lesson/prepare-hack-it-yourself-php-auction/youtube: https://youtu.be/QYymUv7xNCQ
In this section, we continue our lab preparation by setting up the vulnerable Hack-it-yourself PHP Auction web application. This application, along with the DVWA configured in the previous lesson, serves as a security testing platform. Our goal is to use the F5 AWAF module during the course to identify and remediate these vulnerabilities to improve web application security.

نام دوره: F5 Advanced WAF (AWAF) نسخه 17.1https://youtu.be/vmsGgl4Jxzo
18- پیاده‌سازی geolocation enforcementقابلیت کنترل دسترسی به web application بر اساس کشور مبدا، geolocation enforcement نامیده می‌شود که در این بخش پیاده‌سازی می‌شود
چنانچه کاربر از طریق proxy به web application متصل شود، آدرس مبدأ آن تغییر می کند. در این صورت آدرس اصلی کاربر در فیلد X-Forwarded-For در هدر HTTP قرار می گیرد

Course: F5 BIG-IP AWAF (Formerly ASM)Lesson 4. F5 AWAF Lab Preparation Part 3 _ F5 initial configuration
website: https://rayka-co.com/lesson/f5-awaf-lab-preparation-part-3-_-f5-initial-configuration/youtube: https://youtu.be/MpyEouiL1Nc
Building on the previous lessons, we successfully prepared two intentionally vulnerable web applications: the “Hack-It-Yourself PHP Auction” and “DVWA”.
In this section, we will go through the initial setup of the F5 device according to the network topology using a trial license key. We will publish these two web applications via the F5 LTM module. Additionally, we activate the F5 AWAF module, an essential component that will be actively used throughout the course to protect the web applications from potential threats.

Course: F5 BIG-IP AWAFLesson 5. F5 AWAF Lab Preparation Part 4 _ mitmproxy demonstration as web debugging and interception tool
website: https://rayka-co.com/lesson/mitmproxy-demonstration-as-web-debugging-and-interception-tool/youtube: https://youtu.be/A4xmV2pF458
mitmproxy is an interactive proxy to monitor and manipulate HTTP and HTTPS traffic.In the F5 Advanced WAF (AWAF) course, mitmproxy serves as a powerful tool for analyzing and modifying web traffic and simulating attack scenarios to test and strengthen security measures.
This section shows how to use mitmproxy to intercept and analyze communication between clients and web application.