For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jay_41195's avatar
jay_41195
Icon for Nimbostratus rankNimbostratus
Apr 10, 2018

ASM automatic learning policy

Hi   I am building a security policy via Automatic learning and have a few questions as the documentation confuses me.   In traffic learning there is a list of suggestions as per screenshot, f...
application delivery
ASM Advanced WAF
security
jay_41195's avatar
jay_41195
Icon for Nimbostratus rankNimbostratus
Apr 11, 2018

I understand the differences of the modes. The application is not live hence why I have blocking mode and yes I am working with the application owner also I have staging enabled. What I am trying to determine regarding the traffic learning is how to determine whether to accept suggestion or does the ASM automatically select a suggestion based on the score? What happens when the score is 100% for the entity "Failed to convert character" for example , does it take the suggested action? but wont that "set block to enable" but F5 says

 

"A suggestion reaches a score of 100% if that suggestion occurs a lot and if the chances of that traffic being a real violation are low"