Configuring BIG-IP® APM v11: Access Policy Manager

Training Course Content • Chapter 1: Setting Up the BIG-IP System
o Introducing the BIG-IP System
o Initially Deploying the BIG-IP System
o Creating a Backup of the BIG-IP System
o F5 Support Resources and Tools
o Chapter Resources
o BIG-IP System Setup Labs
o Lab 1.1 – Configure the Management Port
o Lab 1.2 – Activate the BIG-IP System
o Lab 1.3 – Classroom Network Configuration
o Lab 1.4 – Test Access and Archive the Configuration
o Lab 1.5 – AskF5 Research Lab

• Chapter 2: APM Traffic Processing
o Virtual Servers and Access Profiles
o APM Configuration Wizards
o Logging
o Sessions
o Lab 2.1 – APM Configuration Wizard
o Lab 2.2 – Configuration Backup

• Chapter 3: APM Access Policies and Profiles
o Access Policies Overview
o Access Policy Branches
o Access Policy Endings
o Configuring Access Policies and Profiles
o Using Webtops
o Exporting and importing access profiles
o Lab 3.1 – Access Policies
o Lab 3.2 – Configuration Backup

• Chapter 4: APM Portal Access
o Portal Access Overview
o Configuring Portal Access
o Rewrite Profiles
o SSO and Credential Caching
o Lab 4.1 – Portal Access with Single Sign-On
o Lab 4.2 – Configuration Backup

• Chapter 5: APM Network Access
o Network Access Overview
o Configuring Network Access
o BIG-IP Edge Client
o Lab 5.1 – Network Access
o Optional Lab 5.2 – BIG-IP Edge Client
o Lab 5.3 – Configuration Backup

• Chapter 6: APM Access Control Lists
o Access Control of Resources Overview
o Access Control Lists
o Lab 6.1 – Access Control Lists
o Lab 6.2 – Layer 7 Access Control Lists
o Lab 6.3 – Layer 4 + 7 Access Control Lists
o Lab 6.4 – Configuration Backup

• Chapter 7: APM Application Access Webtops
o Application Access Webtops Overview
o Application Access
o Configuring Remote Desktop Access
o Configuring Webtops
o Lab 7.1 – Full Webtop
o Lab 7.2 – Webtop Links
o Lab 7.3 – Application Access Tunnels
o Lab 7.4 – Network Access Optimized Tunnels
o Lab 7.5 – Terminal Services
o Lab 7.6 – Single Sign-on for Terminal Services
o Lab 7.7 – Terminal Services Java client
o Lab 7.8 – Configuration Backup

• Chapter 8: BIG-IP LTM Concepts
o LTM Pools and Virtual Servers
o Monitor Concepts and Configuration
o Secure Network Address Translation (SNAT)
o Lab 8.1 – Virtual Servers, Pools and Monitors
o Optional Lab 8.2 – SNAT Automap
o Lab 8.3 – Configuration Backup

• Chapter 9: Web Application Access for LTM
o Web Applications Access for LTM
o Configuring APM and LTM together
o Profiles
o Profile Types and Dependencies
o Configuring and Using Profiles
o SSL Termination/Initiation
o SSL Profile Configuration
o Lab 9.1 – Web Applications Access for LTM
o Lab 9.2 – Pool Assignment Agent
o Optional Lab 9.3 –Self-Signed Certificates
o Lab 9.4 – Configuration Backup

• Chapter 10: APM Macros and Authentication Servers
o Access Policy Macros
o Configuring Access Policy Macros
o Authentication with Access Policy Manager
o Radius Server Authentication
o LDAP Server Authentication
o Active Directory Server Authentication
o One-time Password Authentication
o Lab 10.1 – AAA Servers
o Lab 10.2 – Visual Policy Editor Macros
o Lab 10.3 – Active Directory Query
o Optional Lab 10.4 – AD Query and AD Groups
o Lab 10.5 – Configuration Backup

• Chapter 11: Client-Side Endpoint Security
o Overview of Client-Side Endpoint Security
o Client-Side Endpoint Security Part 1
o Client-Side Endpoint Security Part 2
o Lab 11.1 – Client-Side Process Check
o Optional Lab 11.2 – Protected Workspaces
o Optional Lab 11.3 – AV and Firewall Checking
o Lab 11.4 – Configuration Backup

• Chapter 12: APM Advanced Topics
o General Purpose Actions
o Server Side Checks
o Session Variables
o Introducing Tcl
o Access iRules Events
o Typical APM iRule Use Case
o Configuring Access iRules
o Dynamic ACLs
o Lab 12.1 – Session Variables 1
o Lab 12.2 – Session Variables 2
o Lab 12.3 – iRule
o Lab 12.4 – Pre-defined Redirect iRule
o Lab 12.5 – Dynamic Access Control Lists
o Lab 12.6 – Allow Access Based on Time
o Lab 12.7 – Allow Access Based on Day of Week
o Lab 12.8 – One-Time Passwords
o Lab 12.9 – Two-Factor Authentication with OTP
o Lab 12.10– Configuration Backup

• Chapter 13: APM Authentication Domains
o Authentication Domain Concepts
o Lab 13.1 – Authentication Domains
o Lab 13.2 – Authentication Domains with SSO
o Optional Lab 13.3 – Web App Access Logout
o Lab 13.4 – Configuration Backup

• Chapter 14: SAML and Customization
o SAML Overview
o Customization Overview
o Big-IP EDGE Client
o Advanced Edit Mode Customization
o Lab 14.1 – Customization Tool
o Lab 14.2 – Customized Logon Page
o Lab 14.3 – SAML ldP and SP Services
o Lab 14.4 – Configuration Backup

• Chapter 15: APM Configuration Project
o Configuration Project Overview
o Lab 15.1 – Configuration Restore
o Lab 15.2 – Configuration Project

• Appendix A - Installation

• Appendix B - New Features