WWT’s ATC Palo Alto Cortex XDR Proving Ground Lab exists to provide a consolidated solution built around relevant use cases. This lab seeks to demonstrate the Palo Alto Cortex XDR platform’s cloud-based management console application with the ability to investigate and identify the root cause of an alert, perform immediate response actions, and prevent breaches using defined Indicators of Compromise (IOCs) and Behavioral Indicators of Compromise (BIOCs).

The purpose of this lab is to demonstrate the impact of applying a GraphQL profile (available from v16.1) to a WAF policy, securing a vulnerable GraphQL application that is probed by a DAST tool (ZAP). The deployment of the vulnerable application (DVGA), the declarative WAF policy and the execution of DAST session is being controlled by a CI/CD pipeline, simulating a modern development environment.

This lab provides an introduction to the software-defined networking capabilities of VMware NSX-T that are enabled with every VMware Cloud Foundation deployment. This lab will show the simplicity of creating networks in software, attaching workloads to these networks (segments) in vSphere, securing the workloads using NSX Distributed Firewall and creating a Load Balancer using NSX.

The purpose of this lab is to demo the OWASP Compliance dashboard within Big-IP and to walk the user through creating a security policy for the Arcadia Finance application that protects against the top 10 application security risks. Bear in mind that your configuration and the level of security protection you implement depend on the specifics of your application.

The purpose of this lab is to demo how NGINX Controller API Management Module and NGINX App Protect can secure the OAuth Authorization Code flow, which is core to Open Banking specifications. The NGINX App Protect will be deployed as an Ingress Controller for Kubernetes and will provide both negative and positive security by ingesting the OpenAPI declaration file. The NGINX API Gateway will be controlled by NGINX Controller, will publish the application API based on the same OpenAPI declaration file, will provide JWT authentication and authorization and enforce rate limiting. The deployment and configuration of these elements will be performed automatically through a CI/CD pipeline. ELK dashboards will be used for visualization purposes and, lastly, a DAST tool will also be run as part of the CI/CD pipeline. BIG-IP APM is deployed as both Authorization Server with OpenID Connect support and as OAuth Client, in separate instances.

WWT’s ATC CrowdStrike Proving Ground Lab exists to showcase the CrowdStrike Falcon platform’s web UI and ability to alert on, and prevent, breaches using cloud data and machine learning.

The Fortinet Next Generation Firewall (NGFW) Foundations Lab is a capability of the Advanced Technology Center (ATC) designed to provide an environment to gain hands-on experience with the fundamental features of the Fortinet NGFW solution. The environment that supports the lab is completely virtual, removing any hardware dependencies associated with physical infrastructure.

Established in 2007, Trusted Internet Connections (TIC) was developed to secure the Federal Government’s connections to the Internet. The first iteration of TIC, coined 1.0, focused on reducing external network connections to improve security posture. TIC 2.0 refined the original design by pushing for standardization across federal agencies. In its 3rd revision, TIC 3.0 introduces flexibility, security and visibility to accommodate cloud, mobile and encrypted applications, services and environments.

Introducing security best practices during the early stages of software development and deployment can bring great benefits and helps improve the overall security posture of the application. Adopting agile methodologies can also improve the collaboration between teams and incorporate the DevSecOps practices within an organization, this can help an organization to achieve the GitOps principle and make their transition towards IaC. This lab focuses on the using NGINX Plus controllers and NAP policy lifecycle in an automated CI/CD pipeline. This pipeline uses automation tools such as Terraform and Ansible to manage the state of the devices.