For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ppp2016_241036's avatar
Ppp2016_241036
Icon for Nimbostratus rankNimbostratus
Dec 28, 2015

ASM policy building with automatic versus manual suggestions

I am ASM newbie. I am testing out the ASM policy building between creating a policy automatically versus manually. I read https://devcentral.f5.com/articles/the-big-ip-application-security-manager-pa...
ASM Advanced WAF
security
waf
Ppp2016_241036's avatar
Ppp2016_241036
Icon for Nimbostratus rankNimbostratus
Dec 30, 2015

Thank you so much Erik. It make sense. I am reading the events and learning events (accept or ignore), is there a good way to test if it is legitimate or attack to avoid false positives and false negatives? I am thinking the response code is a good indicator, but the response code is all 200? Any advices? thanks!!