For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Riddlerman_1208's avatar
Riddlerman_1208
Icon for Nimbostratus rankNimbostratus
Dec 27, 2012

Automatic Policy Building (APB)

Hi All     Trying to determine the best approach forward with APB.   Using the Automatic policy building to learn the site.   Two questions:   1) How can I undo (un-learn) a recomm...
app sec
BIG-IP Access Policy Manager (APM)
security
Riddlerman_1208's avatar
Riddlerman_1208
Icon for Nimbostratus rankNimbostratus
Dec 28, 2012

OK, I got it to work by re-creating the parameters I deleted from parameter names in the list mentioned earlier.

 

BUT if that was the wrong approach then what is the correct approach to undo the "learning" ?

 

I've also rolled back the policy to a working state before I started the testing.

 

I've now "learnt" the attack on the paramaters again which has now disabled the SQL-INJ Signature on the two paramaters but how do I undo it now to ensure the signature will block the attack on the two parameters currently overridden?