Forum Discussion

Cirrostratus

Nov 26, 2019

How to perform staging on many parameters if they enforced

Hi everyone

lets say i got +800 parameters are enforced (not staging), but i still need to modify a lot of them but no learning suggesting because they enforced (not staging) , is there a way to make them staging again using CLI, using GUI i can modify the parameters one by one.

Note: ASM security policy is transparent (non blocking)

Thanks

ASM Advanced WAF

security

TMOS

Mohanad
Dec 26, 2019
Thank you - i manage to do it by exporting the security policy with XML format then i replaced + 4000 lines
from <in_staging>false</in_staging> to <in_staging>true</in_staging>

this affected URLs, Parameters, Attck Sig etc....

nathe
Cirrocumulus
Nov 26, 2019
Mohanad,

I assume they are causing a violation, for example illegal parameter length? Once things are enforced you can get visibility of required changes by using the Traffic Learning section of ASM. Check that the violation in the policy settings has the Learn box ticked/checked. You can then browse to Traffic Learning and see the suggestions to amend the parameter.

This may be the best way. Hope this helps,

N
- Mohanad
  Cirrostratus
  Dec 26, 2019
  Thank you - i manage to do it by exporting the security policy with XML format then i replaced + 4000 lines
  from <in_staging>false</in_staging> to <in_staging>true</in_staging>
  
  this affected URLs, Parameters, Attck Sig etc....