Welcome to the World Wide Technology / F5 Virtual Environment (vLab) setup and hands-on F5 201 Exam Lab exercises. The purpose of this guide is to provide a sampling of hands-on exercises to better understand the subjects outlined in the 201-TMOS Administration Exam. F5 certification exams are designed to required hands-on experience to pass the test and these exercises will help you deal with exam questions requiring you to interpret configuration and other outputs from the BIG-IP.

Welcome to WWT's F5 Terraform Automation Lab. The intended goal of this lab is to introduce and enable F5 administrators to utilize Terraform to automate, simplify and streamline the deployment of F5 services.

Welcome to the WWT / F5 Virtual Environment (vLab) setup and hands-on F5 301a Exam Lab exercises. These exercises are designed to reinforce the concepts outlined in the LTM Specialist: Architect, Setup and Deploy 301a certification. F5 certification exams are designed to required hands-on experience to pass the test and these exercises will help you deal with exam questions requiring you to interpret configuration and other outputs from the BIG-IP.

In the current AI market, the demand for scalable and secure deployments is increasing. Public cloud providers (AWS, Google, and Microsoft) are competing to provide GenAI infrastructure, driving the need for multi-cloud and hybrid cloud deployments. However, distributed deployments come with challenges, including: Complexity in managing multi-cloud environments. Lack of unified visibility across clouds. Inconsistent security and policy enforcement. F5 Distributed Cloud provides a solution by offering a seamless, secure, and portable environment for GenAI workloads across clouds. This lab will guide you through setting up and securing GenAI applications with F5 Distributed Cloud on AWS EKS and GCP GKE.

This lab provides a hands-on introduction to API security and visibility using F5 Distributed Cloud Web App and API Protection (XC WAAP). As APIs continue to grow in number and complexity, they have become a primary target for cyberattacks. This lab explores how to discover, document, and secure both known and shadow APIs using the platform's API Discovery, Schema Validation, and Security Dashboards. Participants will learn how to: Send traffic through the F5 HTTPS Load Balancer to trigger API Discovery and the API Crawler Automatically generate and maintain an API inventory, including undocumented shadow APIs Apply OpenAPI Schema Validation to enforce API conformity and detect anomalies Gain deep insights through advanced API Security Dashboards, including threat levels, sensitive data exposure, authentication status, and risk scores Understand the importance of integrating DevSecOps practices by leveraging IaC and GitHub Actions for API protection deployment By the end of this lab, users will gain critical visibility into their API ecosystem, identify vulnerabilities, and take actionable steps to secure both documented and undocumented APIs—helping to bring shadow APIs into the light.

This lab discusses the collaboration between F5 technologies and Citrix VDI to enhance security and performance in virtual desktop infrastructure. F5's security-first approach and performance optimization strengthen Citrix VDI environments, meeting the needs of remote workforces and setting new standards for secure and high-performance virtualized experiences. The hardware and software used in the lab include 5 Windows Servers (v2016) and 1 F5 BIG-IP APM (v17.1.0.1).

F5 Distributed Cloud WAF deployed on Regional Edge and App Connect Deployment mode. This deployment model offers an optimal solution for scenarios where backend applications are inaccessible from the internet, lacking a Fully Qualified Domain Name (FQDN) or Public IP. In this case Customer Edge sites can be deployed to connect these "private" customer sites to the XC Global Network via IPSEC tunnels opened from Distributed Cloud Customer Edges to the closes two REs sites. Distributed Cloud WAF is deployed on the Regional Edges, where the services are being advertised to the Internet through anycast IPs. Customer Edges are being deployed on the customer sites and connect to the closest RE and traffic will be inspected by the WAAF security policy. The traffic will then be forwarded across the distributed cloud global network towards an egress Regional Edge and then over an IPSEC tunnel to the Customer edge site where it will be forwarded to the backend applications as pure IP-based traffic.

BIG-IP Next Central Manager (CM) represents the next-generation management suite for the new BIG-IP OS across hardware and software instances. It provides simplified lifecycle and configuration management across F5 BIG-IP Next fleets, a concept not covered in this lab. Two primary methods for managing BIG-IP Next instances via Central Manager software are through a web browser-based portal or via API-based templates. This lab will use the UI.

F5 BIG-IP Next is the next generation of BIG-IP software built to reduce operational complexity, improve performance, strengthen security, and enhance observability, carrying forward the comprehensive suite of advanced BIG-IP TMOS functionality developed over the past 20 years. BIG-IP Next introduces a centralized, API-centric, and automation-friendly framework, making it faster and easier for DevOps, NetOps, and SecOps teams to deploy and manage critical application services. This lab is built with the latest technology in learning platform delivery.

Welcome to the F5 Distributed Cloud (XC) with Customer Edge Deployment mode This lab, presented by WWT and powered by F5 vesctl command line tool, will guide you through aspects of managing configuration within GCP, Kubernetes using F5 Distributed Cloud (XC) in Customer Edge deployment mode. This hands-on experience guides you through deploying a multi-cloud application across GCP, which is accessible via Private IP through an F5 By harnessing the capabilities of the F5 HTTPS Load Balancer, routing traffic within GCP environments privately.

Description F5 BIG-IP Next is the next generation of BIG-IP software built to reduce operational complexity, improve performance, strengthen security, and enhance observability, carrying forward the comprehensive suite of advanced BIG-IP TMOS functionality developed over the past 20 years. BIG-IP Next introduces a centralized, API-centric, and automation-friendly framework, making it faster and easier for DevOps, NetOps, and SecOps teams to deploy and manage critical application services. This lab is built with the latest technology in learning platform delivery.

This WWT Lab will provide a hand on experience of F5 Distributed Cloud WAF deployed on Regional Edge in deployment mode. This deployment mode is better suited when protecting backend applications which are already public accessible from the internet via FQDN or Public IP. F5 Distributed Cloud WAF is deployed on the Regional Edges, where the services are being advertised to the internet through anycast IPs. The end users will connect to their closest Regional Edge and the traffic will be inspected by the WAF security policy. The traffic will then be forwarded across the XC Global Network towards an egress Regional Edge and then towards the customer site as regular internet traffic. The customer will filter the traffic, only allowing traffic forwarded by the XC platform.