Forum Discussion
NimbostratusEnforcement Readiness for F5 ASM
Nimbostratus"When does it become enforcement ready? After the enforcement period we have mentioned under policy building?"
Voila. It depends on enforcement readiness period as set in your policy settings. By default it is 7 days.
"And when does the entities state move from staging to having suggestions? Does it depend on the tighten policy setting under learning and blocking settings?"
Learning suggestions are raised only if you have enabled Learning Mode in policy settings. When enabled, and a request comes in which gets blocked, then a suggestion may be raised. This is basically self-intelligence of BigIP whereby it tries to guess what's best action for you to take. Personally I do not trust this feature. You can see a better description here if you Ctrl + F for encounters of "learning suggestion" and "learning mode": ASM Ops Guide
NimbostratusThanks Hannes . I have one more question :-
I was testing something .So i was testing XSS . I have the PHP auction site deployed in my lab. Have done via F5 virtual lab as well. In one of the form entry area, for eg " sell an item" in the site, i entered the basic alert script eg :- It doesn't seem to be blocking it .Policy applied on the VS , logging is enabled, attack signature is moved from staging as well, so all are enforced. But yet, it isn't logged nor getting blocked. Is there anything else i need to do ?
Thanks and Regards
Divya S
