Training and CyberInsights Today

F5 ASM

17 lessons · Beginner to advanced

Policies, staging, learning, signatures, tuning, API security, logs and recovery.

F5 ASM training →

FortiWeb

17 lessons · Beginner to advanced

Server policies, profiles, ML, signatures, APIs, troubleshooting and HA.

FortiWeb training →

How to use the WAF training hub

CyberInsights Today

Daily cybersecurity analysis and practical bulletins

Understand recent vulnerabilities, threats, their impact and mitigation. When there is no worthwhile new issue, learn a security concept or defensive practice through clear explanations, illustrations and evidence.

Read CyberInsights Today →

Privacy and Cookies

WAF Protect training hub

Updated November 3, 2026. This notice applies to WAF Protect at wafprotect.blogspot.com, an independent technical training blog edited by Harpreet Singh Virdi.

Hosting and technical information

The site uses Google's Blogger platform. When you visit, Google and relevant service providers may process technical information such as your IP address, device/browser details, page requests, cookies and service logs to deliver the site, measure use and protect against abuse. Platform statistics and data handling are governed in part by Google's policies.

Comments and messages

If you post a comment, your chosen profile identity and comment may be publicly visible. Do not include passwords, tokens, customer data, employer information or private logs. If you use the contact form, the information you enter, such as your name, email and message, is processed through the Google/Blogger service and provided to the editor to respond and administer the request.

Cookies and advertising

Blogger and integrated Google services can use cookies or similar technologies. If advertising is enabled and approved, Google AdSense and its partners may use such technologies for advertising, measurement, personalization where permitted, and fraud prevention. Advertising availability and behavior depend on consent, region, account settings and service approval.

A privacy notice does not itself collect advertising consent. Use any consent controls presented by the site or its providers. You can also manage browser cookies and Google advertising preferences; disabling cookies can affect site features.

Your choices

Limit the information you submit. Use your browser's privacy controls, Google account controls and advertising settings. For a question or request concerning a comment or message sent to this blog, use the Contact page and provide only the minimum information needed to identify it. Requests concerning Google's own account/service records should also use Google's available controls.

Retention and access

Public comments can remain visible until removed. Messages and administrative records may be retained as needed to address the request and operate the site; Google may retain service data under its own policies. Please do not submit material requiring confidential handling through this public training site.

External links

Lessons link to vendor documentation and other relevant resources. Those sites apply their own privacy practices. We do not control them.

Provider information

This notice will be updated when site features or data practices change. Contact the editor through the Contact page with questions.

Comments

Post a Comment

Popular posts from this blog

PHP2Shell Explained: Impact, Patches and Mitigation for CVE-2026-109618 and CVE-2026-109619

By Harpreet Singh Virdi, CISSP, CCSP · Cybersecurity Updates Published and evidence checked: November 3, 2026. If you run PHP, start with an inventory and a patch decision today. If a security appliance uses PHP internally, check its vendor advisory too. Updating your website code alone does not update the runtime inside a firewall. PHP2Shell is the name used for CVE-2026-109618 and CVE-2026-109619. They can allow remote code execution without authentication. PHP released security updates on October 21. The PHP team identifies web-serving installations as at risk and highlights Apache mod_php as the highest-risk configuration. PHP security announcements .
Read more

Start Here: F5 ASM Classroom — From Beginner to Advanced

WELCOME TO YOUR ONLINE CLASSROOM Learn F5 ASM, one clear lesson at a time. A practical English-language course for beginners, progressing to advanced policy operations. Instructor: Harpreet Singh Virdi, CISSP, CCSP Start here — you do not need prior ASM experience If the words “security policy,” “staging,” and “learning suggestion” feel unfamiliar, you are in the right place. We will explain them carefully, follow a web request through BIG-IP, and build a policy around a fictional online bookshop. F5 ASM means BIG-IP Application Security Manager. It inspects application traffic against configured security checks. The course explains how to use those checks, investigate their results, and protect legitimate user journeys. Advanced WAF terminology also appears; feature availability depends on your release and license. How to take this course Read the lessons in numerical order. Each is a separate blog post. Learn the terms, then work through the example before changing settings. Use an ...
Read more

Lesson 01: What Is F5 ASM? Your First Web Application Firewall Class

F5 ASM CLASSROOM • LESSON 01 Level: Beginner  |  Suggested study and lab time: 30 minutes Instructor: Harpreet Singh Virdi, CISSP, CCSP Start Here / Course Guide · All lessons Welcome to class Imagine running an online bookshop. Your website must accept searches, logins, and orders from people you have never met. The same public entrance also receives malformed requests and attempts to exploit software weaknesses. How do you distinguish a normal search from a suspicious request? A web application firewall (WAF) examines web traffic using rules about the application and patterns associated with attacks. F5 BIG-IP Application Security Manager, usually called ASM , is a WAF capability on the BIG-IP platform. Our task is to understand the traffic, define appropriate checks, investigate the results, and enforce protection without unnecessarily disrupting legitimate users. What you will learn Explain the purpose of a WAF in your own words. Identify where ASM fits in a web reque...
Read more