For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

RasGhz_297176's avatar
RasGhz_297176
Icon for Nimbostratus rankNimbostratus
Jul 12, 2017

ASM signature update enforcement

Hi guys,   We have ASM policies in blocking mode and realtime policy building disabled on them. Now my question is when there are new signature as a result of update, would them be enforced at any...
ASM Advanced WAF
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Jul 12, 2017

RasGhz, the new signatures (and optionally updated ones too if you check the box) will be in Staging until the Enforcement Readiness Period (default is 7 days) is over and there have been no violations on them. At this point you will need to remove them from staging by selecting Enforce. If there were any ones that did trigger a violation you need to double check whether it was a true positive - and Enforce - or a false positive - disable the signature.

 

So, to confirm, it is not an automatic process.

 

Hope this helps,

 

N