about sql injection attak

dear all, my asm detect the sql injection but dosent block it. i need to to disable the signature staging mode?what can i do for Illegal Meta Character in Value ? because for example i inject an sql code in the loginid parameter indeed asm detecat the sql inection attacks but dosen't block it. also the same of xss attacks

Best regards