For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Abdulmajeed's avatar
Abdulmajeed
Icon for Nimbostratus rankNimbostratus
Sep 02, 2020

I create Attack signature and still in staging although I change it to blocking

Hi   I have create attack signature which block the request if it is containing some words.   the status of my signature is :   Staging: No Learn: Yes Alarm: Yes Block: Yes Enabled: Yes ...
ASM Advanced WAF
attack
blocking settings
security
signature
Staged
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Sep 03, 2020

Hello Abdulmajeed,

 

This is possible because of 2 reasons:

1) "Signature Staging: is enabled for all signatures globally - you can check it on "Security ›› Application Security : Policy Building : Learning and Blocking Settings" page under "Attack signatures" or in the list of attack signatures per policy

2) Staging is enabled for appropriate entity. In your case this is URL, on which this signature was detected.

 

Thanks, Ivan