BIG-IP AWAF Exercise 14 - File Type & Parameter Learning & Enforcement with F5 BIG-IP Adv WAF

The purpose of this exercise is to explain file type and parameter learning, the updating of parameter attributes during the staging process, and how parameter enforcement affects malicious requests. In this exercise we will: 1. Create a BIG-IP Advanced WAF security policy and adjust the learning settings for file types and parameters. 2. Access the web application and examine the file types that BIG-IP Advanced WAF has learned. 3. Add the correct file types to the security policy. 4. Use a couple of parameters in the web application and examine the parameters that BIG-IP Advanced WAF has learned. 5. Add the correct parameters to the web application. 6. Submit different data into a parameter and examine how BIG-IP Advanced WAF suggests modifying the attributes of a parameter. 7. Examine how a non-enforced and an enforced parameter treat malicious requests.