ASM Signatures Update

Best practices are a matter of opinion. I think getting the signatures into your policy as quickly as possible is a good practice so automatic would be best for that. BUT, you have to be aware of new or updated signatures causing false positives and leave yourself a long enough staging period to review the learning suggestions in order to not create an issue with the protected resources by enforcing potential false positives and denying regular traffic.