The purpose of this lab is to demonstrate the impact of applying a GraphQL profile (available from v16.1) to a WAF policy, securing a vulnerable GraphQL application that is probed by a DAST tool (ZAP). The deployment of the vulnerable application (DVGA), the declarative WAF policy and the execution of DAST session is being controlled by a CI/CD pipeline, simulating a modern development environment.

This lab provides an introduction to the Kubernetes features and capabilities available with VMware Cloud Foundation with Tanzu.

The goal of the VMware Tanzu Service Mesh Fundamentals Lab is to provide the lab user a high-level overview of VMware Tanzu Service Mesh (TSM), along with a deep dive into onboarding Tanzu Kubernetes Grid (TKG) clusters into TSM, application deployment, creation of Global Namespaces and monitoring thru TSM. The Lab User will walk through and perform these tasks in a virtual environment dedicated to their use while also utilizing a shared SaaS instance of TSM.

The purpose of this lab is to demo the OWASP Compliance dashboard within Big-IP and to walk the user through creating a security policy for the Arcadia Finance application that protects against the top 10 application security risks. Bear in mind that your configuration and the level of security protection you implement depend on the specifics of your application.

The purpose of this lab is to demo how NGINX Controller API Management Module and NGINX App Protect can secure the OAuth Authorization Code flow, which is core to Open Banking specifications. The NGINX App Protect will be deployed as an Ingress Controller for Kubernetes and will provide both negative and positive security by ingesting the OpenAPI declaration file. The NGINX API Gateway will be controlled by NGINX Controller, will publish the application API based on the same OpenAPI declaration file, will provide JWT authentication and authorization and enforce rate limiting. The deployment and configuration of these elements will be performed automatically through a CI/CD pipeline. ELK dashboards will be used for visualization purposes and, lastly, a DAST tool will also be run as part of the CI/CD pipeline. BIG-IP APM is deployed as both Authorization Server with OpenID Connect support and as OAuth Client, in separate instances.

This lab shows developers how to deploy their applications to Red Hat OpenShift Container Platform 4 (OpenShift), the premier Enterprise-level container platform based on Kubernetes. Leveraging the Source-to-Image feature, the lab provides hands-on instructions on migrating non-containerized, and various levels of containerized applications to OpenShift.