Forum Discussion
ASM automatic learning policy
Your policy is in blocking mode, try to navigate to your policy and go to >>Security>Application Security>Policy Building. In "Current edited security policy" select drop-down menu and look for your policy. After choosing your policy, go to "Learning and Blocking Settings", look for Enforcement and again use the drop-down menu to select transparent. ASM had a learning mode and this mode have multiple "Entity Type" such as File TYpe, Parameters and so on. Each Entity have categories like "Learn new Entities, Not Enforced, Not Enforced and Have Suggestions and Ready to be Enforced.
ASM automatically select suggestion based on the learning score. It needs action, that is why you have to enforced and if you have violation but false positive you have to allow it in order the application to work. Some application needs longer string and this string is set 10 by default and the request string is 600 or the Header have POST request it will trigger a violation or block by ASM policy.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com