For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Hoang_Hung's avatar
Hoang_Hung
Icon for Cirrus rankCirrus
6 years ago

ASM Not Automatic learning URL, File Type and Paramater.

Hi all We are deploying ASM module for us Customer. We have create one policy Application Security Policy mode: learning Automatic. After we have change setting with URL, File Type and Parameter mo...
ASM Advanced WAF
BIG-IP
security
Lidev's avatar
Lidev
Icon for Nacreous rankNacreous
6 years ago

Hello  

Is the policy F5-WAF-INTERNET-Policy properly associated with the Virtual Server ?

if you modify the Virtual Server log profile to Log All requests, you see the requests analyzed by ASM (Security ›› Event Logs : Application : Request) ?

 

Regards

  • Hoang_Hung's avatar
    Hoang_Hung
    Icon for Cirrus rankCirrus
    6 years ago

    Thanks  

    Is the policy F5-WAF-INTERNET-Policy properly associated with the Virtual Server ? ==> Yep, we have asssociated with Virtual Server.

    if you modify the Virtual Server log profile to Log All requests, you see the requests analyzed by ASM (Security ›› Event Logs : Application : Request) ? ==> We have see many request.

    But when show learned URL, File Type and Parameter, we not see any it.

    example : picture 5, 6, 7

     

     

    • Lidev's avatar
      Lidev
      Icon for Nacreous rankNacreous
      6 years ago

      it's weird, no error messages in var/log/asm ? or in var/log/ts/learning_manager.log (only 11x version)

      Have you try to restart the BIG-IP ASM process ?

    • Hoang_Hung's avatar
      Hoang_Hung
      Icon for Cirrus rankCirrus
      6 years ago

      Yep so weired.

      We will try by your solution.

      Hehe

    • Hoang_Hung's avatar
      Hoang_Hung
      Icon for Cirrus rankCirrus
      6 years ago

      Hi Lidev

      If you ok. please remote to my computer and fix with me.

      Thanks