Forum Discussion
rezgui_180607
Nimbostratus
Mar 16, 2016about policy builder
Dear support,
i have the policy builder 86%done . idon't know how can i get 100% done?
Best Regards
3 Replies
- Erik_Novak
Employee
Policy Builder will not reach 100 percent completion until the thresholds for requests from enough different IP addresses/different user sessions have been reached. Depending on the version of BIG-IP you're running, you can lower the thresholds to speed up the process. If you can generate trusted traffic (that is, send requests from an IP address that is designated as "trusted" ) you can dramatically increase the speed. Which version of BIG-IP are you running? Automatic Policy Builder is greatly improved in v12. - rezgui_180607
Nimbostratus
this the version of my big ip BIG-IP 11.4.1 Build 608.0 Final how can i increse the speed - Erik_Novak
Employee
There are several ways. Got to Application Security: Policy Building: Settings and select the policy you created using the Real Traffic Policy Builder. In the middle of the screen, locate Automatic Policy Building Settings and select Advanced from the drop down menu. Farther down in the Rules section, you will see thresholds for Stabilize (tighten). There are configurable settings for enforcing policy settings once ASM has recorded X total requests and X different user sessions from X different IPs over X days. You can try to use lower values for those settings to speed up the process. If you have a good QA environment and you can generate legitimate traffic from a specific IP address, you can add it to the Trusted IP address list. Note that for trusted traffic, the thresholds of accepting traffic as legitimate is much lower than for untrusted traffic.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects