Forum Discussion
Jim_M_172559
Nimbostratus
NimbostratusHow "transparent" is transparent mode in ASM?
When setting up Application Security Manager, it's standard to set a security policy to "transparent" for a virtual server, watch what violations it catches, revise as needed and then change from tra...
Transparent just mean non-blocking. ASM will do everything to learn and track the traffic without blocking it.
prt1969_120570Yes, but even in transparent mode, the F5 is still modifying traffic. See above. Cookie insertion and data guard masking are 2 examples. To me, that is not truly transparent. So really, we are looking at learning, tracking, and modifying without blocking. Modifying the traffic can affect traffic, as noted above.
You are right. It is not truly transparent and thus confusing. The "transparent mode" is only transparent in regards to performing blocking (i.e blocking pages) - however, in transparent mode other things are altered - javascripts can be injected, TS cookie added etc. You can open a support case to get this renamed. Product development will consider it as an enhancement request.
Jim_M_172559At the very least, transparent is a misleading term. It didn't block the response, but it did mangle it.