Forum Discussion
ramann_75062
Nimbostratus
NimbostratusCheck only for Attack Signature
Hi@all,
I try to build a base configuration that only checks for Attack Signature.
To do this, i created a new HTTP class and in this, I select customer configuration and...
Hey Bjoern,
The HTTP Class filters are not the security checks which are applied - they are strictly the filtering criteria that determine which traffic is processed by which security policy.
The change what violations a specific policy is looking for try looking in the Blocking Policy - found here: "Application Security -> Web Applications -> *pick your application* -> Policy -> Blocking -> Settings".
This is the list of how the ASM will treat each violation type it sees. Simply remove the checks for Learn, Alarm, and Block for all of the violations you don't want the policy to check. =]
