Enforcement readiness Period

Hi,

yes and no...

During the enforcement readiness period all changes to an object (signature match, request size change, ...) will be learned (learning suggestion) and you can keep or discard them (policy building - manual traffic learning). If the period is over, all objects will be marked as "ready to be enforced" and you can enforce them. But, if the policy is in transparent mode, then it remains in transparent mode, regardless of the enforcement readiness period.

Further, the learning method is always violation based. That means as long the "learn" option (blocking/settings) is active and you have not ignored this violation, the policy will learn every request that violate the policy. It depends on the policy mode (block or transparent), if this request will be blocked or not (except during the enforcement readiness period).

Cheers Stephan