Are ASM Attack Signature Updates Cummulative?

Hi ,

yes they are, see K82512024: Managing BIG-IP ASM Live Updates (14.1.x and later). 

Quote:

"Note the following about BIG-IP ASM Live Update:

...

• Updates are cumulative. When you update the BIG-IP ASM components, the update provides the latest signatures, browser challenges, and all items from the previous updates. Updating the components also provides revisions to existing signatures, server technologies, and browser challenges.

..."

And K8217: Managing BIG-IP ASM attack signatures (11.5.x - 14.0.x).

Quote: "The attack signature updates are cumulative; when you update the system-supplied attack signatures, the update provides the latest signatures and all signatures from the previous updates. Updating the attack signatures also provides any revisions to existing attack signatures."

KR

Daniel