Configuring BIG-IP APM Access Policy Manager

This course gives network administrators, network operators, and network engineers a functional
understanding of BIG-IP Access Policy Manager as it is commonly deployed in both application
delivery network and remote access settings. The course introduces students to BIG-IP Access Policy
Manager, its configuration objects, how it commonly deployed, and how typical administrative and
operational activities are performed. The course includes lecture, hands-on labs, interactive
demonstrations, and discussions.

Audience:
This course is intended for network administrators, operators, and engineers responsible for managing
the normal day-to-day operation and administration of BIG-IP Access Policy Manager.
Course is based on the system version v13.

CONSPECT:

• Setting Up the BIG-IP System

Introducing the BIG-IP System
Initially Setting Up the BIG-IP System
Archiving the BIG-IP Configuration
Leveraging F5 Support Resources and Tools

• Web Application Access

Review of BIG-IP LTM
Introduction to the Access Policy
Web Access Application Configuration Overview
Web Application Access Configuration in Detail

• Access Policy

Navigating the Access Policy

• Managing BIG-IP APM

BIG-IP APM Sessions and Access Licenses
Session Variables and sessiondump
Session Cookies
Access Policy General Purpose Agents Lists

• Authentication

Introduction to Access Policy Authentication
Active Directory AAA Server
RADIUS
One-Time Password Local User Database

• Assignment Agents

List of Assignment Agents

• Portal Access

Introduction to Portal Access
Portal Access Configuration Overview
Portal Access Configuration
Portal Access in Action

• Network Access

Concurrent User Licensing
VPN Concepts
Network Access Configuration Overview
Network Access Configuration
Network Access in Action

• Macros and Logon

Access Policy Macros
Configuring Macros
An Access Policy is a Flowchart
Access Policy Logon Agents
Configuring Logon Agents

• Client-Side Checks

Client-Side Endpoint Security

• Server-Side Checks
• Server-Side Endpoint Security Agents List
• Server-Side and Client-Side Checks Differences
• Authorization

Active Directory Query
Active Directory Nested Groups
Configuration in Detail

• Application Access

Application Access
Remote Desktop
Network Access Optimized Tunnels
Landing Page Bookmarks
Remote Desktop
Network Access Optimized Tunnels
Landing Page Bookmarks

• Access Control Lists

Introduction to Access Control Lists
Configuration Overview
Dynamic ACLs
Portal Access ACLs

• Single Sign-On

Remote Desktop Single Sign-On
Portal Access Single Sign-On

• iRules and Advanced Access Policy Rules

iRules Introduction
Basic TCL Syntax
iRules and Advanced Access Policy Rules

• Customization

Customization Overview
BIG-IP Edge Client
Advanced Edit Mode Customization
Landing Page Sections

• SAML

SAML Conceptual Overview
SAML Configuration Overview

• Webtop and Wizards

Webtops
Wizards

• BIG-IP Edge Client and Components

BIG-IP Edge Client for Windows Installation
BIG-IP Edge Client in Action

• Configuration Project
• Additional Training and Certification

Getting Started Series Web-Based Training
F5 Instructor Led Training Curriculum
F5 Professional Certification Program

Before attending the Troubleshooting, ASM, DNS, APM, AAM, AFM, VIPRION or iRules courses is
mandatory:

• to take part in the BIG-IP Admin or LTM course
• or possession of F5-CA or F5-CTS LTM certification
• or pass special assessment test with sore 70% or greater.

To take assessment test:
Step 1: get an account on F5 University https://university.f5.com
Step 2: goto My Training and find Administering BIG-IP Course Equivalency Assessment
Take the test. Pass mark is 70%
Step 3: take a screen shot as proof of results
If this prerequisite is not met, F5 Networks have the right to refuse entry to the class.

CERTIFICATE:
The participants will obtain certificates signed by F5 Networks (course completion).
This course also will help to prepare you for the F5 Networks APM Specialist certification (F5-CTS)
exam Exam 304 - APM Specialist which is available through the Pearson VUE test centers.

TRAINER:
Certified F5 Networks Trainer