WAF BASICS- Part3

Use application ready templates to quickly deploy security policies for popular apps like SharePoint and SAP, selecting a template and reviewing file types, attributes, and parameters to tailor protection.

Explore automatic policy building in the WAF, using baseline traffic, templates, and thresholds to loosen or tighten security, with learning speeds and trusted IPs guiding enforcement.

Integrate web application vulnerability scanners with Asim to identify, classify, and report vulnerabilities, import results, and apply automatic or manual mitigations, including staging, ignore, and retest.

Learn how layered parent and child policies define base security settings, enforce inheritance rules (mandatory, optional, none), and propagate changes across virtual servers and templates.

Enforce login access by configuring a login page on the F5, specifying authentication and access validation, and blocking unauthorized access with cookies and session management.

Learn to mitigate brute force attacks on web apps by configuring login attempt thresholds, IP whitelists, and mitigation methods. Explore device fingerprinting, CAPTCHA, honeypots, and distributed protection against credential stuffing.

Configure brute force attack protection for a login page using anomaly detection, with thresholds, alarm and capture actions, and device mitigation, then apply the policy and verify via event logs.

Enable session tracking to detect suspicious activity, configure a violation detection period and thresholds, and log or block requests by session, username, IP, or device.

Discover how web scraping works and how to mitigate it using bot detection, session management, fingerprinting, and rate limiting.

Learn how geolocation enforcement blocks or allows access by country, manage disallowed and allowed locations, and configure IP address exceptions and whitelists to refine security policies.

Identify four dos attack types—volumetric, computational, isometric, and vulnerability-based. Learn how a dos protection profile detects and mitigates them with thresholds and modes.