Forum Discussion
NimbostratusASM policy not learning anything !!
Hello Experts
I am really struggling with ASM policy creation. I created the ASM policy using automatic (recommended). Now I am browsing application means opens the application in browser, putting username/password and login, click links on the page. I did couple of times in 1 day.
BUT policy builder is showing, it learn 0 URL, 0 file types and 0 parameters !! I am not sure what I am missing here. The questions are:
1- Staging period was set to 7 days by itself. How many times per day, I need to browse the application for ASM to learn. I am sure I did it 4-5 times in one day but no learning. Is there any setting if I browse the application each time, it should learn? 2- Can we change the staging period to less than 7 like 3 days and browse the application many times to learn in 3 days.
Appreciated your input !
Please note that, I am doing SSL offloading on F5 but F5 to server its http
5 Replies
natheCirrocumulus
Ghost-rider,
You might want to add your IP address as a trusted IP address. Not in front of my ASM to confirm where you do this but this will help you populate the policy. The metrics are v high for untrusted IPs.
Hope this helps,
N
I'm sure you did this correctly, but you do have the ASM policy assigned to the correct VIP, right? Here's a quick article I wrote about ASM policy creation...it might help a little with this as well: https://devcentral.f5.com/articles/the-big-ip-application-security-manager-part-2-policy-building
ghost-rider_124Thanks Nathan. But unfortunately I have 11.2.1 version, that is showing only slider for learning speed.
I want to learn fast so I have to make the slider at the last means opposite to Medium?
- natheI think you have to click on Advanced to see the rules, the default is the Basic view.
- ghost-rider_124
Hi Nathan
Thanks. But there is no advanced view. I just got below. I do not have any advance view. The article you refer, is showing applicable to 11.4. I have 11.2.1 I am not sure if I am missing any thing
