نام دوره: F5 Advanced WAF (AWAF) نسخه 17.120- مفهوم و پیاده‌سازی automatic policy building
https://youtu.be/mb97FLnu3gMدر همه این دوره، ما به صورت دستی به F6 AWAF یاد دادیم که چه مولفه هایی در دسترسی به یک web application مجاز و یا غیر مجاز است. اینکار اما در عمل همیشه ممکن نیست خصوصا اگر تعداد و پیچیدگی application ها زیاد باشد.
مکانیزم automatic learning در این ماژول این قابلیت رو می‌دهد که بر اساس تنوع و تعداد مبدأ در دسترسی به هر یک از مولفه های web application در یک بازه زمانی مشخص، تشخیص می‌دهد که کدام یک از مولفه های web application مجاز و یا غیر مجاز است.در این بخش مفهوم و پیاده‌سازی automatic learning در F5 AWAF نشان داده می شود

Course: F5 BIG-IP AWAFLesson 7. Create the first security policy in F5 AWAF
website: https://rayka-co.com/lesson/create-the-first-security-policy-in-f5-awaf/youtube: https://youtu.be/9cs6qH0T-m8
This lesson will help you create your first security policy in F5 Advanced WAF (AWAF). It covers important concepts and terminologies you need to know to create a security policy, such as security templates, enforcement mode, learning mode and signature staging.You'll also learn how to assign a security policy to a web application.

نام
دوره:F5 Advanced WAF (AWAF) نسخه
17.1
21-
معرفیXSS
ومقابله با آن در DVWA

دراین بخش ابتدا حمله XSS
رامعرفی می‌کنیم و سپس آن را در DVWA
web application دموخواهیم کرد.
نهایتاًبا استفاده از ماژول AWAF
جلویاین حمله را خوهیم گرفت

https://youtu.be/2zmhImXYs_I

F5 BIG-IP AWAFLesson 9. F5 AWAF Data Guard Feature demonstration
website: https://rayka-co.com/lesson/f5-awaf-data-guard-feature-demonstration/
youtube: https://youtu.be/sEn7M2Atm0s
F5 AWAF Data Guard feature is a security mechanism designed to prevent the leakage of sensitive information such as credit card numbers or Social Security numbers. Data Guard can either block the response or mask the sensitive data with asterisks (****), depending on the configuration. That's what we'll demonstrate in this lesson.

دوره آموزشی
F5 BIG-IP AWAF (Formerly ASM)
منتشر شد
https://www.rayka-co.ir/online-shop/f5/f5-big-ip-awaf-detail
1. F5 Advanced WAF overview
2. prepare F5 AWAF Laboratory Part 1
3. Hack it Yourself web application
4. web application vulnerability checking and mitmproxy
5. web application overview
6. application security policy components and demonstration
7. F5 AWAF Violation Rating and Learning Score
8. F5 AWAF Data Guard Feature demonstration
9. F5 AWAF security policy tuning
10. F5 AWAF Learning Schemes
11. F5 AWAF Attack Signatures
12. F5 AWAF File Type Handling
13. secure web application against Cookie tampering
14. secure web application against parameter tampering
15. Login Enforcement
16. brute force protection
17. session tracking
18. geolocation enforcement
19. dos and bot protection
20. automatic policy building
21. prepare Damn Vulnerable Web Application DVWA
22. introducing and mitigating XSS
23. Protect CSRF in DVWA
24. F5 AWAF Logging
25. Parent and Child Security Policy

تخفیف 35 درصد
دوره F5 BIG-IP AWAF
تا پایان اردیبهشت 1403
https://www.rayka-co.ir/online-shop/f5/f5-big-ip-awaf-detail

F5 BIG-IP AWAF11. F5 AWAF learning modes demonstration
youtube: https://youtu.be/odskKoKLP9kwebsite: https://rayka-co.com/lesson/f5-awaf-learning-modes-demonstration/
In this section, we will explore and demonstrate the different learning modes available in F5 Advanced WAF (AWAF), including Never (wildcard only), Selective, Compact, and Always. Each mode determines how the F5 AWAF learns and adapts individually to each component of a web application.

F5 BIG-IP AWAF (Formerly ASM)13. F5 AWAF File Type Learning
website: https://rayka-co.com/lesson/f5-awaf-file-type-learning/
youtube: https://youtu.be/ppiMJDUfjHQ
In every web application, only certain file types with predefined properties are permitted. F5 AWAF can either manually or automatically learn allowed file types and their unique properties for each web application. It then discard any file types that are not explicitly permitted, as well as those allowed file types but but whose properties fall outside the learned security policy.

F5 BIG-IP AWAF
15. F5 AWAF Cookie Tampering Protection
website: https://rayka-co.com/lesson/f5-awaf-cookie-tampering-protection/
youtube: https://youtu.be/ZoQbCJyXl2U
F5 AWAF provides robust cookie tampering protection, ensuring that hackers cannot alter the contents of cookies. This prevents session hijacking and the exposure of sensitive information. In this section, we will demonstrate how F5 AWAF effectively prevents cookie tampering in web applications, enhancing overall security.

F5 BIG-IP AWAF
17. Protection against Application Dynamic Parameter Tampering with F5 AWAF
website: https://rayka-co.com/lesson/protection-against-application-dynamic-parameter-tampering/
youtube: https://youtu.be/ASZc73CDkf0
Application dynamic parameters are specially generated by web applications primarily for security purposes, to prevent vulnerabilities such as SQL injection, XSS, and CSRF attacks. F5 AWAF has robust capabilities to protect web applications against tampering with these dynamic parameters, ensuring security of your web applications. In this section, we will demonstrate how F5 AWAF effectively mitigates the risks associated with dynamic parameter tampering.