F5-CSE study plan
F5-CSE · Give each week a clear focus.
8 weeks · About 6 hours per week
F5 platform architecture, traffic processing, and troubleshooting
Describe the BIG-IP full proxy architecture, including the roles of TMM, the host process, and the switch fabric.
Trace the default packet flow from client to server through a virtual server, pool, and node.
Identify the purpose of the management interface vs. data plane interfaces and typical VLAN assignments.
Use tcpdump and the packet filter to capture traffic on a specific VLAN and interpret the output.
Your checkpoint
A one-page diagram and written explanation of packet flow for a simple HTTP virtual server, including the interfaces and TMM processes involved.
F5 platform architecture, traffic processing, and troubleshooting & LTM virtual servers, pools, nodes, and load balancing methods
Configure a standard virtual server with a pool and two nodes using the GUI and tmsh.
Explain the difference between a virtual server destination and a pool member, and how port matching works.
Compare the round robin, least connections, and observed load balancing methods and select the appropriate one for a given scenario.
Diagnose a virtual server that shows no available pool members by checking monitor status and node health.
Your checkpoint
A working lab configuration with a virtual server and pool, plus a table comparing three load balancing methods with use cases.
LTM virtual servers, pools, nodes, and load balancing methods & Profiles, persistence, monitors, and iRules
Create and apply a TCP profile and an HTTP profile to a virtual server and verify the effect on traffic.
Configure source address affinity persistence and test session stickiness across multiple clients.
Build a custom HTTP monitor with send and receive strings and attach it to pool members.
Write a simple iRule to redirect HTTP to HTTPS and validate it with curl.
Your checkpoint
A lab report showing persistence behavior, monitor status changes, and iRule redirect logs.
Profiles, persistence, monitors, and iRules & SSL/TLS offload and certificate management
Explain the difference between client SSL and server SSL profiles and when each is used.
Generate a certificate signing request, import a certificate and key, and bind them to a client SSL profile.
Configure SSL offload for a virtual server and verify with openssl s_client.
Identify common SSL handshake failures and use the SSL profile logs to troubleshoot.
Your checkpoint
A functioning HTTPS virtual server with a self-signed certificate and a troubleshooting checklist for SSL handshake errors.
SSL/TLS offload and certificate management & Security, access, and application delivery controls
Configure certificate chain completion and explain the role of intermediate certificates.
Set up an access policy using APM to enforce basic authentication for a virtual server.
Describe how network security controls such as SYN cookies and IP intelligence can be applied.
Test and verify that an access policy denies unauthorized users while allowing valid credentials.
Your checkpoint
A lab configuration with APM access policy and a test matrix showing allowed and denied access attempts.
Security, access, and application delivery controls & LTM virtual servers, pools, nodes, and load balancing methods
Configure an iRule to enforce a rate limit or block traffic from a specific IP address.
Explain the role of a security profile (e.g., web application firewall) and apply a basic policy to a virtual server.
Compare oneconnect and NTLM authentication considerations in application delivery.
Troubleshoot a virtual server that intermittently returns 503 errors by checking pool member health and connection limits.
Your checkpoint
A security-focused iRule and WAF policy applied to a test virtual server, with before/after traffic logs.
High availability, synchronization, and operational maintenance
Configure device group synchronization and verify config sync status between two BIG-IP devices.
Explain the difference between active/standby and active/active configurations and their traffic flow.
Perform a forced failover and observe how virtual servers and persistence entries behave.
Use tmsh commands to check sync status and review logs for synchronization errors.
Your checkpoint
A failover test report documenting sync status, failover time, and any persistence loss observed.
F5 platform architecture, traffic processing, and troubleshooting & LTM virtual servers, pools, nodes, and load balancing methods & Profiles, persistence, monitors, and iRules & SSL/TLS offload and certificate management & Security, access, and application delivery controls & High availability, synchronization, and operational maintenance
Review weak areas identified in previous weeks using practice questions and lab re-checks.
Complete a timed 60-question practice exam covering all domains.
Reconfigure one full application delivery scenario (virtual server, pool, SSL, persistence, iRule) from scratch in under 30 minutes.
Document a personal list of five facts or commands to memorize before exam day.
Your checkpoint
Practice exam score of at least 80% and a completed one-page cheat sheet of key commands and concepts.
Milestones
Week 2: Can explain packet flow and configure a basic virtual server with pool and load balancing method without notes.
Week 4: Successfully deployed an HTTPS virtual server with SSL offload and custom monitor, and can troubleshoot a failed handshake.
Week 6: Can write and apply an iRule for security control and explain how APM access policies integrate with virtual servers.
Week 8: Achieved 80% or higher on a timed practice exam and completed a full application delivery configuration from memory.