Start Here: F5 ASM Classroom — From Beginner to Advanced
WELCOME TO YOUR ONLINE CLASSROOM
Learn F5 ASM, one clear lesson at a time.
A practical English-language course for beginners, progressing to advanced policy operations.
Instructor: Harpreet Singh Virdi, CISSP, CCSP
Start here — you do not need prior ASM experience
If the words “security policy,” “staging,” and “learning suggestion” feel unfamiliar, you are in the right place. We will explain them carefully, follow a web request through BIG-IP, and build a policy around a fictional online bookshop.
F5 ASM means BIG-IP Application Security Manager. It inspects application traffic against configured security checks. The course explains how to use those checks, investigate their results, and protect legitimate user journeys. Advanced WAF terminology also appears; feature availability depends on your release and license.
How to take this course
- Read the lessons in numerical order. Each is a separate blog post.
- Learn the terms, then work through the example before changing settings.
- Use an isolated, authorized lab with synthetic users and data.
- Complete the exercise and compare your observation with the expected result.
- Answer the knowledge check before opening the instructor's answer.
- Keep a notebook of policy revisions, sanitized events, test outcomes, and reasons for changes.
You can read the first lessons without a device. Hands-on lessons require a suitable licensed BIG-IP lab with the relevant module, a test application, and basic networking. Study-time estimates include lab work and are approximate.
Your learning path
Stage 1 — Foundations and your first policy
- Lesson 01: What Is F5 ASM? Your First Web Application Firewall Class
30 minutes · Beginner - Lesson 02: HTTP and HTTPS Explained for F5 ASM Beginners
45 minutes · Beginner - Lesson 03: Build an Isolated F5 ASM Lab and Understand BIG-IP Traffic Flow
75 minutes · Beginner - Lesson 04: Create and Attach Your First F5 ASM Security Policy
60 minutes · Beginner - Lesson 05: Transparent, Blocking, Staging, Learn, Alarm and Block
50 minutes · Beginner to intermediate
Stage 2 — Understand, investigate, and tune
- Lesson 06: Traffic Learning and Policy Builder Without Blindly Accepting Suggestions
60 minutes · Intermediate - Lesson 07: Attack Signatures, SQL Injection and Cross-Site Scripting
60 minutes · Intermediate - Lesson 08: URLs, Methods, Parameters, File Types and Cookies
75 minutes · Intermediate - Lesson 09: Read ASM Event Logs and Investigate a Support ID
60 minutes · Intermediate - Lesson 10: Fix False Positives with Safe, Scoped Policy Tuning
75 minutes · Intermediate
Stage 3 — Advanced controls and operations
- Lesson 11: Protect JSON, XML and APIs with the Right Content Handling
75 minutes · Intermediate to advanced - Lesson 12: Login Protection, Sessions, Cookies and CSRF
75 minutes · Intermediate to advanced - Lesson 13: Bot Defense and Application DoS — An Advanced WAF Introduction
60 minutes · Advanced - Lesson 14: Move an ASM Policy into Production with a Measured Rollout
75 minutes · Advanced - Lesson 15: ASM Backups, High Availability, Synchronization and Recovery
75 minutes · Advanced - Lesson 16: Declarative ASM Policies and a Reviewable Automation Workflow
90 minutes · Advanced - Lesson 17: F5 ASM Capstone — Protect, Tune, Troubleshoot and Recover
120 minutes · Advanced practical assessment
What you should be able to do
By completing the lessons and labs, you will practice explaining the traffic path, creating and attaching a policy, distinguishing detection from blocking, reviewing learning suggestions, investigating events, tuning scoped exceptions, and validating recovery. The final capstone asks you to demonstrate those skills with evidence.
Advanced lessons introduce API protection, sessions, bot defense, availability, and automation. Product capabilities vary. Use the matching F5 documentation for your installed release and treat this independent course as a learning companion rather than vendor certification.
Meet your instructor
Harpreet Singh Virdi holds CISSP and CCSP credentials. His technical focus includes F5 ASM, cloud security, identity, endpoint hardening, Zero Trust, and vulnerability management.
Read the instructor introduction and view the photo →
Your first classroom task
Write one sentence answering: “What would I want a WAF to protect in an online bookshop?” Keep that sentence. After Lesson 17, revisit it and explain how your answer has changed.
Course edition: November 2026. Independent educational series; not affiliated with or endorsed by F5. The lab examples describe expected outcomes and have not been executed on a BIG-IP device for this publication.
Comments
Post a Comment