For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Amit585731's avatar
Amit585731
Icon for Nimbostratus rankNimbostratus
Feb 25, 2017

ASM from transparent to block mode

We are planning to move ASM to blocking mode from transparent mode. Need suggestion on what precautions we need to take so we can avoid outage? will it block all the violations I am seeing or just the one which are defined in signatures?

 

Thanks.

 

ASM Advanced WAF
security

3 Replies

  • Janek_42109's avatar
    Janek_42109
    Icon for Nimbostratus rankNimbostratus
    Feb 27, 2017

    Hello,

     

    When switching to transparent to blocking, in your blocking settings, you can set your violation list only to Alarm and uncheck Block to check if you have any issue. And Then you check again Block action in your violation list when all is ok for you.

     

  • cjunior's avatar
    cjunior
    Icon for Nacreous rankNacreous
    Feb 27, 2017

    In addiction, Don't forget the block will occur when you enforce the objects(url, parameter, cookie, etc). So, when you change to block also remember to review the staging flags.

     

    Regards

     

  • Chris_Grant's avatar
    Chris_Grant
    Icon for Employee rankEmployee
    May 25, 2017

    If you are paying attention to your learning suggestions, you should already know what traffic is being flagged. Turning off blocking in your blocking settings is really not going to get you anything you wouldn't be getting under transparent mode. If you are not seeing legitimate traffic being blocked while in transparent mode, going to blocking should not cause any issues.