Enforcement Readiness Summary and HTTP Protocol Compliance

I've often wondered about this for HTTP protocol compliance and evasion techniques. I came across these release notes:

https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/related/relnote-supplement-bigip-14-1-0-6.html

Notably:

761553-2 : Text for analyzed requests improved for suggestions that were created as result of absence of violations in traffic

Symptoms:

Text for analyzed requests might be misleading for suggestions that are created as result of an absence of violations in traffic:

X requests triggered this suggestion from date:time until date:time.

Actually:

-- 'X requests' did not trigger a violation, and no sampled are requests provided.

-- The format of the time in 'from date:time until date:time' is difficult to parse.

Conditions:

There are suggestions that were created as result of an absence of violations in traffic in the policy.

Impact:

Text might be misleading.

Fix:

Improved text for analyzed requests for suggestions that were created as result of absence of violations in traffic

I hope this helps for anyone else that stumbles across this thread.

Ethan