For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Hoang_Hung's avatar
Hoang_Hung
Icon for Cirrus rankCirrus
Aug 04, 2020

ASM Not Automatic learning URL, File Type and Paramater.

Hi all We are deploying ASM module for us Customer. We have create one policy Application Security Policy mode: learning Automatic. After we have change setting with URL, File Type and Parameter mo...
ASM Advanced WAF
BIG-IP
security
Lidev's avatar
Lidev
Icon for Nacreous rankNacreous
Aug 04, 2020

Hello  

Is the policy F5-WAF-INTERNET-Policy properly associated with the Virtual Server ?

if you modify the Virtual Server log profile to Log All requests, you see the requests analyzed by ASM (Security ›› Event Logs : Application : Request) ?

 

Regards

Hoang_Hung's avatar
Hoang_Hung
Icon for Cirrus rankCirrus
Aug 04, 2020

Thanks  

Is the policy F5-WAF-INTERNET-Policy properly associated with the Virtual Server ? ==> Yep, we have asssociated with Virtual Server.

if you modify the Virtual Server log profile to Log All requests, you see the requests analyzed by ASM (Security ›› Event Logs : Application : Request) ? ==> We have see many request.

But when show learned URL, File Type and Parameter, we not see any it.

example : picture 5, 6, 7

 

 

  • Lidev's avatar
    Lidev
    Icon for Nacreous rankNacreous
    Aug 05, 2020

    it's weird, no error messages in var/log/asm ? or in var/log/ts/learning_manager.log (only 11x version)

    Have you try to restart the BIG-IP ASM process ?

  • Hoang_Hung's avatar
    Hoang_Hung
    Icon for Cirrus rankCirrus
    Aug 05, 2020

    Yep so weired.

    We will try by your solution.

    Hehe

  • Hoang_Hung's avatar
    Hoang_Hung
    Icon for Cirrus rankCirrus
    Aug 05, 2020

    Hi Lidev

    If you ok. please remote to my computer and fix with me.

    Thanks