این دوره بصورت فشرده شامل سرفصل دوره های ، F5 BIG-IP DNS Administration و F5 BIG-IP AFM Administration می باشد. قطعا جهت آشنایی حرفه ای تر و درک عمیق تر سرفصل های این دوره، گذراندن دوره Advanced + Workshop نیز پیشنهاد می شود.

 

 

پیش‌ نیاز دوره:

  • Network+
  •  Security Concepts & Terminology
  • DNS Protocol
  • Administration and Troubleshooting

مدت زمان دوره: 120 ساعت

 

مدرس دوره: مهندس پرهام امام جمعه

 

سرفصل دوره:

 

 

 

F5 BIG-IP DNS Administration

  • Overview of Domain Name System
  • Introduction to BIG-IP DNS/GTM
  • BIG-IP DNS Objects/Resources
  • DNS Listener Virtual Servers
  • Prober Pools to Assist Intelligent DNS Resolution
  • GSLB and Intelligent DNS Load-balancing Methods
  • iQuery and Communications Between BIG-IP Systems
  • Configuring BIG-IP DNS Sync Groups
  • Technical Overview of DNS Profile
  • Accelerating DNS Resolution with DNS Express
  • Securing DNS Communications with DNSSEC
  • Accelerating DNS Resolution with DNS Cache
  • DoH (DNS – over – HTTPS)
  • Using iRule Scripts in DNS Resolution Process
  • Top Dangerous DNS Attacks and Defenses

F5 BIG-IP AFM Administration

  • Introduction to BIG-IP AFM System
  • F5-AFM (Network Firewall + DDoS Engine)
  • Network Firewall Options and Modes
  • Flow Eviction Policy
  • Firewall NAT for IP and Port Translation
  • Firewall Rules, Policies, Address/Port/Rule Lists
  • IP Intelligence and Whitelists/Blacklists
  • PSP (Protocol Security Profiles) – DNS and HTTP
  • PIP (Protocol Inspection Profiles) – IPS
  • DoS Attacks Detection and Mitigation
  • DoS Whitelists, Sweep/Flood, SYN Cookie Protection
  • DNS Firewall, DNS DoS, SIP DoS
  • DDoS-Resistant Architecture (Three-tier Solution)
  • DoS Attacks Reporting and Event Logging
  • Network Firewall (AFM) iRules
  • Administration and Troubleshooting BIG-IP AFM Components