For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Johnnyx_304575's avatar
Johnnyx_304575
Icon for Cirrus rankCirrus
Aug 07, 2018

Application Security Policy - Learning and Building

I am new to configuring Application Security Profiles. I have a few that are built and that are currently in learning mode (not blocking). 1. How long should I leave these in learning? 2. The suggest...
ASM Advanced WAF
security
Johnnyx_304575's avatar
Johnnyx_304575
Icon for Cirrus rankCirrus
Aug 08, 2018

I found that the learning mode can be set to manual, automatic, or disabled. The manual mode takes more time to manage and requires the administrator to understand the risks. All suggestions in manual mode must be accepted, deleted or ignored by the administrator.

 

Automatic learning mode will apply the suggestions without the need of the administrator to approve the suggestion. This requires less maintenance from the admin. The downside of automatic learning is a suggestion could be applied that you do not want.