Forum Discussion
ASM - Automatic Policy Building duration
In the process of creating a security policy via automatic policy builder with a learning speed of medium and have a couple of newbie questions.
- The policy builder has now been stablizing for aproximately a month.....is this normal for it to take this long?
- Should I be basically leaving the policy alone until it has stabilized or should I be manually editing the policy during this period?
Thanks!
5 Replies
- nathe
Cirrocumulus
33boston,
Not sure there is a normal with Real Policy Builder I'm afraid. In essence it depends on the traffic levels you have.
I'd check the Policy Builder settings for medium to see if the metrics here suit your environment. You can select Advanced and tweak this to help.
Also, do you have any configured trusted IPs? The metrics are a lot lower here for loosening & stabilizing as it should only be good traffic. I'd recommend this if you can.
Finally, if you're confident on the found entities then you can stop the policy builder and manually tweak the policy. You could then turn it back on. This is certainly an option.
Hope this helps, N
- 33boston_223
Nimbostratus
Thanks Nathan.That's what I was basically trying to figure out. There's no rush, so I can let it do its thing I just wasn't sure if there were manual tasks I should be performing during this build process which was making it take longer than I had expected but doesn't sound like its required.
I selected All for Trusted IP addresses during the policy build wizard (staging environment) so I think I'm good there.
Thanks for all your help!
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com