Forum Discussion
ghost-rider_124
Nimbostratus
NimbostratusASM Learning with Wildcard (URL, Parameters and File Types)
Hi Experts
I enabled the ASM policy for one web applicaiton with wildcard enteries (tighening plus staging) for File types, URL and Parameters for 7 days.
I accepted and enforce the learning suggestions. After 7 days, If I still want to put again in learning mode for more learning and keep whatever learned before, what I need to do that?
Regards,
GR
3 Replies
natheCirrocumulus
Ghost-rider,
You can add a wildcard entry and select tightening on all 3 elements above. Then check your block options to see if a violation is set to Learn, e.g. illegal parameter value. You will then get learning suggestions for any blocks you get (presuming the policy is in Blocking mode)
N
ghost-rider_124Also it is best to enable both tightening and staging on wildcard entries? or just tightening is fine?- natheF5 documentation would say not to enable both at the same time.
