F5-401 Security Expert case studies
F5-401 Security Expert · Put your knowledge to work in context.
The F5 Certified Professionals program is F5's professional certification track, described by F5 as progressive, with higher level certifications building on the skills and knowledge demonstrated in previous certifications. It offers options emphasizing Administration, Sales, Product Specializations, and Solutions including Cloud and Security. The F5-401 Security Expert case studies are 5 cases and about 4,633 words.
1Gateway-Only Identity and the Header Trust Boundary
A retailer is splitting a 12-year-old JSP monolith into 40 microservices behind a Kubernetes ingress and a centralized API gateway. Customer JWTs are issued by an external identity provider with a 15-minute lifetime and a scope claim; the monolith currently calls downstream services with a shared service account.
990 words, about 5 min2On-Sale Under Fire: Volumetric, Bot, and Checkout Friction
An online ticketing platform expects 180,000 concurrent users for a concert on-sale in 72 hours. Last year a 400 Gbps UDP flood and a 1.2M-request-per-minute credential-stuffing wave disrupted checkout for 40 minutes.
885 words, about 4 min3VPN Exit in 90 Days with Kerberos, Contractors, and OT
A global manufacturer acquires a 600-person distributor with 12 legacy Windows apps that authenticate via Kerberos and cannot be changed before the ERP migration in 14 months. The combined workforce is 2,400 employees and 400 contractors; the existing IdP supports SAML, OIDC, and SCIM but has no device-posture signal.
907 words, about 5 min4420 Certificates, 90-Day Lifetimes, and a PQC Mandate
After a certificate expired on a customer portal and caused 38 minutes of downtime, a financial services firm inventories 420 public TLS certificates across 14 business units, 60 BIG-IP devices, and three clouds. Only 180 certificates are issued through ACME; the rest are manually purchased from four CAs, with lifetimes dropping to 90 days next quarter.
945 words, about 5 min5AI Gateway: Prompt Injection, PII, and Provider Failover
A financial services firm has approved three external LLM providers and built an AI gateway in front of them. Twelve internal applications and 3,000 employees use the gateway; 40% of traffic is employee chat, 60% is application API calls that include customer account summaries.
906 words, about 5 min