Merge pull request #138 from f5devcentral/aw2025_update

AW2025 class6 edits

docs/class6/class6.rst

@@ -11,7 +11,7 @@ SSLO 202: More Use Cases with F5 BIG-IP SSL Orchestrator (AppWorld 2025 | 2 hour
 
 |
 
-SSL Orchestrator was built to protect your organization from encrypted threats. In previous labs, you learned how to deploy an **inbound application mode** (reverse-proxy) and **outbound explicit** (forward proxy) Topologies with security Inspection Services based on simple policies. Now, let's dive into some additional use-cases.
+SSL Orchestrator was built to protect your organization from encrypted threats. In previous labs, you learned how to deploy **inbound application mode** (reverse-proxy) and **outbound explicit** (forward proxy) Topologies with security Inspection Services based on simple policies. Now, let's dive into some additional use-cases.
 
 |
 

docs/class6/module1/lab2.rst

@@ -392,7 +392,7 @@ The **WEBRDP** service leverages an instance of Guacamole running on the Ubuntu-
 
 |
 
-**Juiceshop Vulnerable Application (2 instances)**
+**Juice Shop Vulnerable Application (2 instances)**
 
 .. list-table::
    :header-rows: 0
@@ -401,7 +401,7 @@ The **WEBRDP** service leverages an instance of Guacamole running on the Ubuntu-
    * - **Description**
      - Ubuntu server host -- ens6.80
    * - **Services**
-     - NGINX app
+     - `OWASP Juice Shop <https://owasp.org/www-project-juice-shop/>`_ (running on NGINX): This is a modern insecure web application designed to demonstrate common security vulnerabilities that can easily be exploited.
    * - **Access**
      - $ ``docker exec -it nginx /bin/sh``
 

docs/class6/module2/lab4.rst

@@ -13,7 +13,7 @@ Access the Ubuntu-client Desktop
 
    .. note::
 
-      The **Guacamole** application is hosted on the **Server** machine, but creates an RDP connection to the **Client** machine.
+      The **Guacamole** application is hosted on the **Ubuntu-Server** machine, but creates an RDP connection to the desktop of the **Ubuntu-Client** machine.
 
 
 #. Log in as ``user`` with password ``user``.
@@ -45,7 +45,23 @@ You will now perform a SQL Injection (SQLi) attack to test the inspection servic
 
    .. tip::
 
-      Click the **copy** icon in the URL text box above and paste it into the Ubuntu-Client browser address bar.
+      Hover your mouse pointer over the above text box to reveal the **copy** icon and then click on it. Now, paste it into the Firefox address bar.
+
+      The method used to **paste** will vary based on your local computer's operating system and target.
+
+      .. list-table::
+         :header-rows: 1
+         :widths: auto
+
+         * - Paste Into
+           - Windows
+           - MacOS
+         * - Firefox (WEBRDP)
+           - CTRL-V (or Right-Mouse-Click and then select **Paste**)
+           - CTRL-CMD-SHIFT to bring up Guacamole menu, select **Text Input**, and then CMD-V
+         * - WEB SHELL
+           - CTRL-SHIFT-V
+           - CMD-V
 
 
 #. If you see a TLS security warning, accept it and continue. The lab's private Certificate Authority certificate might not be installed in **Firefox**.

docs/class6/module2/lab5.rst

@@ -20,11 +20,6 @@ In this lab module, you completed the following tasks:
    For more information about **F5 Advanced WAF** policy creation, please check out our comprehensive WAF labs on `Clouddocs <https://clouddocs.f5.com/training/community/waf/html/>`_.
 
 
-.. note::
-
-   This lab features the **OWASP Juice Shop**: a modern insecure web application designed to demonstrate common security vulnerabilities that can easily be exploited. Read more about it here:  `OWASP Juice Shop <https://owasp.org/www-project-juice-shop/>`_.
-
-
 |
 
 This is the end of this lab module.