Forum Discussion
NimbostratusAttack Signatures updates but where to see in staging?
Hello Experts
I updated the attack signatures. As per below snapshot, new attack signatures and existing with major updates are put into staging. But If I go to Application Security ›› Policy Building : Manual : Staging-Tightening Summary no signatures is in staging?
Is it means attack signatures are not in staging or after updating the signatures I have to apply somewhere also?
Please reply
5 Replies
natheCirrocumulus
ghost-rider, what do you see if you view the Attack Sigs per policy (Security - Application Security - Attack Signatures - Attack Signatures List) and filter on Staging - Enabled.
What is your Enforcement Readiness period set as?
Hope this helps,
N
ghost-rider_124Hello Nathan. What I can do? Globally enabling the staging putting all signatures in staging and disabling putting all singatures out of staging. Is n't strange?
- ghost-rider_124I noticed one more thing, for some policies, if I enabled staging globally under security policy then only updated/new signatures are in staging and showing the date once I updated the signatures. For some security policies, all signatures are in staging (may be the reason is previous attack signatures were tool old and all updated). But strange part is if I disable staging then it put all the signatures out of staging? Is this the normal behaviour?
- nathe"f I enabled staging globally under security policy then only updated/new signatures are in staging and showing the date once I updated the signatures" is definitely normal. I'm not too sure about the second part to be honest.
- ghost-rider_124Nathan. As per this article https://devcentral.f5.com/s/articles/the-big-ip-application-security-manager-part-4-attack-signatures. If staging in global is unchecked then all attack signatures are out of staging.
