Enforcement readiness Period

Hi,

short answer: the policy remains in lerning mode.

The learning method is always violation based. As long the "learn" option is enabled (is default with manual policies like Rapid Deployment), every request that violates the policy, will raise a learning suggestion.

note: if you look at "blocking/settings" for the given ASM-Policy you can see and change the behaviour for each violation individually. "learn" - will raise the learning suggestion "alarm" - this request will be logged "block" - this request will be blocked (only if the policy is set to block-mode)

If staging is active for specific policy objects or signatures, then the enforcement readiness period defines how long this object will be observed. Policy objects which are in staging will not ends with blocking the request, but will raise a learning suggestion.

Cheers Stephan