Lab 3 - AFM DDoS Lab

• Lab Overview
• Detecting and Preventing DNS DoS Attacks on a Virtual Server
  • Base BIG-IP Configuration
  • Establishing a DNS server baseline
  • Configuring a DoS Logging Profile
  • Configuring a DoS Profile
  • Attaching a DoS Profile
  • Simulate a DNS DDoS Attack
  • DNS DDoS Mitigations for Continued Service
  • Bad Actor Detection
  • Remote Triggered Black Holing
  • Silverline Mitigation
  • Filtering specific DNS operations
• Advanced Firewall Manager (AFM) Detecting and Preventing System DoS and DDoS Attacks
  • Configure Logging
  • Simulating a Christmas Tree Packet Attack
  • Simulating a TCP SYN DDoS Attack
  • Preventing Global DoS Sweep and Flood Attacks
  • Single Endpoint Sweep
  • Single Endpoint Flood

Written for TMOS 13.1.0.1/BIG-IQ 6.0