Forum Discussion

Sekhar's avatar
Sekhar
Icon for Nimbostratus rankNimbostratus
Nov 14, 2015

ASM real time policy builder

Hi All,

 

I have configured ASM policy manually and did not enabled ASM real time policy builder. In help it said "Enabled: Specifies that the Policy Builder is configured correctly and is currently processing traffic. Disabled: Specifies that the Policy Builder is not processing traffic. The Policy Builder continues to run in the background."

 

What difference does it actually make in learning the traffic if it is enabled or disabled? Please help me understanding this.

 

Thanks, Sekhar

 

asm policy configuration
BIG-IP
security
  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Nov 14, 2015

    You can certainly build a policy manually but real time policy builder is one other way. When enabled it analyses traffic and based on certain metrics will learn the traffic and then automatically tune and stabilise the policy for you, eg add file types, allow meta-characters etc.

     

    Hope this helps,

     

    N