For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David_M's avatar
David_M
Icon for Cirrostratus rankCirrostratus
Aug 05, 2019

ASM is not giving learning suggestions in v13.1

Hi I am testing this out for a scenario where learning is not happening.   I am using the lab auction site now :   The description parameter is not added to the parameters list and wildcar...
ASM Advanced WAF
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Aug 05, 2019

I don't think you will. It'll only get added as part of the Selective configuration on the wildcard in order to allow a greater URL length. Learning is only for violations and there is no illegal parameter violation, only a length violation.

 

HTH

  • David_M's avatar
    David_M
    Icon for Cirrostratus rankCirrostratus
    Aug 06, 2019

    Yes I was not getting even that.

     

    Now i checked the length on the wildcard and it was any, so i made it 10 and now it works fine.

     

    It needs the description parameter to be diff from the WC, so its alright now i guess.

     

    This was just a test though.

     

    The real case I have is where the learning is not showing up for XSS signature attack, it shows up in events logs but not in learning.

     

  • David_M's avatar
    David_M
    Icon for Cirrostratus rankCirrostratus
    Aug 18, 2019

    So even for a illegal length violation to show up as learning I should have the wildcard set to staging right. And then anything which breaks the "boundaries" of wildcard will show up as learning suggestions..?