For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

suthomas1's avatar
suthomas1
Icon for Cirrostratus rankCirrostratus
Sep 06, 2020

Asm policy blocking

Good day all, i have read that new ASM Policy is in learning mode for 7 days. After this period, is there manual action needed to put it in blocking mode after 7 days?    
ASM Advanced WAF
security
LB's avatar
LB
Icon for Cirrus rankCirrus
Sep 08, 2020

Adding to Erik's comment. Check out https://support.f5.com/csp/article/K13050156, and take a look at your policy building settings. Be careful with automatic learning mode, as malicious traffic can change your policy based on your learning settings.

 

It sounds like you would benefit from a quick review of ASM F5 operations guide:

https://support.f5.com/csp/knowledge-center/software/BIG-IP?module=BIG-IP%20ASM