ASM Signature update procedure

the only other field that lists days, the staging-tightening period.

Thanks boneyard. Again the same question, one 7 days over, ASM automatically puts the signature out of staging? sorry for my ignorance

Afraid not. You need to Enforce them manually in he staging-tightening part of the GUI.

See https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-config-11-2-0/asm_learning.html

Hi Nathan Thanks. Now I got the idea how to manually enforce all signatures that does not have violations after 7 days and the signatures that have violations then I have to check for false positive and enable or disable. I have just last few questions. Currently under attack signatures for the policy, 'learn' is 'unchecked' and under logging profile of policy 'log illegal request' is there. First Question - So to get the learning suggestion of new attack signatures, should I have to do below: i- Enable 'learn' for the attack signatures ii- logging profile for policy select "Log All Request" Second Question - What about the existing signature that just updated but not in staging, I will still get the learning suggestion or not?

Hello Could you please reply on above question. Appreciated your time

i yes ii not necessarily, that is separate to learning, more about seeing violations or all requests iii once you enable learn for attack signatures you will see manual traffic learning populated.

Thanks a lot!

no probs