HBFITES Data Center, Collaboration, Security, Storage, Wireless, Telepresence Training +91-9738931649 info@hbfites.com

F5 BIG-IP APM v11.x - F5 BIG-IP Access Policy Manager


This three day course gives networking professionals a functional understanding of the BIG-IP APM system as it is commonly used. The course covers installation, configuration, and management of the BIG-IP APM system. The course includes lectures, labs, and discussions.

Topics covered in this course include:

  • Traffic Processing
  • Policies and Profiles
  • Portal Access
  • Network Access
  • Access Control Lists
  • Application Access & Webtops
  • Web Application Access for LTM
  • Macros and Authentication
  • Client side checks & Actions
  • Advanced Topics
  • Authentication Domains
  • Maintaining BIG-IP APM
  • Customization


By the end of this course, the student should be able to perform an initial configuration using the Setup Utility and build many common configurations using the Graphical User Interface (browser-based). In addition, the student should be able to monitor and manage common tasks concerning traffic processed through the BIG-IP APM system.


Students should understand:

  • Common Network terminology
  • TCP/IP Addressing, Routing and Internetworking concepts
  • DNS Methodology

Students should be familiar with:

  • Common Authentication mechanisms such as: Active Directory, LDAP, Radius
  • HTTP, HTML, and common webserver technologies and products (IIS, Apache, JavaScript for example)

In addition, students should be proficient in:

  • Basic PC operation and application skills, including MS Windows
  • Basic Web browser operation (Internet Explorer is used in class)

Who Should Attend

This course is intended for system and network administrators responsible for installation, setup, configuration, and administration of the BIG-IP APM System.


Preface: Product Overviews and Hardware

  • BIG-IP Product Family
  • F5 Hardware
  • F5 Services
  • F5 Resources and Tools

Module 1: BIG-IP Installation and Initial Access

  • BIG-IP Access Policy Manager Overview
  • Licensing and the Setup Utility
    • Lab 1 Installation and Setup
    • Lab 1a Changing Initial IP Address
    • Lab 1b Licensing and Provisioning the System
    • Lab 1c Setup Utility
    • Lab 1d Configuration Utility
    • Lab 1e Configuration Backup
  • BIG-IP Hardware Platforms
    • Optional Lab 1f SCCP / AOM IP Address Configuration

Module 2: APM Traffic Processing

  • Virtual Servers and Access Profiles
  • APM Configuration Wizards
  • Logging
  • Reporting
    • Lab 2a APM Configuration Wizard
    • Lab 2b Configuration Backup

Module 3: APM Access Policies and Profiles

  • Access Policies Overview
  • Access Policy Branches
  • Access Policy Endings
  • Configuring Access Policies and Profiles
  • Using Webtops
  • Exporting and importing access profiles
    • Lab 3a Access Policies
    • Lab 3b Configuration Backup

Module 4: APM Portal Access

  • Portal Access Overview
  • Configuring Portal Access
  • Rewrite Profiles
  • SSO and Credential Caching
    • Lab 4a Portal Access with Single Sign-On
    • Lab 4b Configuration Backup

Module 5: APM Network Access

  • Network Access Overview
  • Configuring Network Access
  • BIG-IP Edge Client
    • Lab 5a Network Access
    • Optional Lab 5b BIG-IP Edge Client
    • Lab 5c Configuration Backup

Module 6: APM Access Control Lists

  • Resources Overview
  • Access Control Lists
    • Lab 6a Access Control Lists
    • Lab 6b Layer 7 Access Control Lists
    • Lab 6c Layer 4 + 7 Access Control Lists
    • Lab 6d Configuration Backup

Module 7: APM Application Access & Webtops

  • Application Access & Webtops Overview
  • Application Access
  • Configuring Remote Desktop Access
  • Configuring Webtops
    • Lab 7a Full Webtop
    • Lab 7b Webtop Links
    • Lab 7c Application Access Tunnels
    • Lab 7d Network Access Optimized Tunnels
    • Lab 7e Terminal Services
    • Lab 7f Single Sign-on for Terminal Services
    • Lab 7g Terminal Services Java client
    • Lab 7h Configuration Backup

Module 8: BIG-IP LTM Concepts

  • LTM Pools and Virtual Servers
  • Monitor Concepts and Configuration
  • Secure Network Address Translation (SNAT)
    • Lab 8a Virtual Servers and Pools
    • Optional Lab 8b Monitors
    • Optional Lab 8c SNAT Automap
    • Lab 8d Configuration Backup

Module 9: Web Application Access for LTM

  • Web Applications Access for LTM
  • Configuring APM and LTM together
  • Pool Assignment Agent
  • Profiles
  • Profile Types and Dependencies
  • Configuring and Using Profiles
  • SSL Termination/Initiation
  • SSL Profile Configuration
    • Lab 9a Web Applications Access for LTM
    • Lab 9b Pool Assignment Agent
    • Optional Lab 9c Self-Signed Certificates
    • Lab 9d Configuration Backup

Module 10: APM Macros and Authentication Servers

  • Access Policy Macros
  • Configuring Access Policy Macros
  • Authentication with Access Policy Manager
  • Radius Server Authentication
  • LDAP Server Authentication
  • Active Directory Server Authentication
    • Lab 10a AAA Servers
    • Lab 10b Visual Policy Editor Macros
    • Lab 10c Active Directory Query
    • Optional Lab 10d AD Query and AD Groups
    • Lab 10e Configuration Backup

Module 11: APM Client Side Checks & Actions

  • Overview of APM Client Side Checks
  • Configuring Client Side Checks
  • Overview of Client Side Actions
    • Lab 11a Client-Side Process Check
    • Optional Lab 11b Protected Workspaces
    • Optional Lab 11c AV and Firewall Checking
    • Lab 11d Configuration Backup

Module 12: APM Advanced Topics

  • General Purpose Actions
  • Server Side Checks
  • Session Variables
  • Access iRules Events
  • Typical APM iRule Use Case
  • Configuring Access iRules
  • Dynamic ACLs
    • Lab 12a Session Variables 1
    • Lab 12b Session Variables 2
    • Lab 12c iRule
    • Optional Lab 12d Pre-defined Redirect iRule
    • Lab 12e Dynamic Access Control Lists
    • Lab 12f Configuration Backup

Module 13: APM Authentication Domains

  • Authentication Domain Concepts
    • Lab 13a Authentication Domains
    • Lab 13b Authentication Domains with SSO
    • Optional Lab 13c SSO Auth Domain Wrap-Up
    • Optional Lab 13d Web App Access Logout
    • Lab 13e Configuration Backup

Module 14: Maintaining BIG-IP APM

  • Logging and Notification
  • Reports
  • F5 Support Resources and Tools
    • Lab 14a tmsh Users
    • Optional Lab 14b Remote Syslogging
    • Optional Lab 14c SNMP Traps
    • Lab 14d Reports
    • Lab 14e AskF5
    • Lab 14e Configuration Backup

Module 15: APM Customization

  • Customization overview
  • Basic Customization view
  • Advanced Customization view
  • Big-IP EDGE Client
  • Advanced Edit Mode Customization
    • Lab 15a Customization Tool
    • Lab 15b Webtop Help
    • Optional Lab 15c Logon Page Dropdown List
    • Lab 15d Configuration Backup

Module 16: APM Configuration Project

  • Configuration Project Overview
    • Lab 16a Configuration Restore
    • Lab 16b Configuration Project

Appendix A - Installation
Appendix B - New Features
Appendix C - Course Slides