Forum Discussion

Icon for Cirrus rank

Cirrus

Oct 23, 2020

If "Add Valid Host Name" violation is detected, should I accept or delete it. Sufficient sample request and score level is 100.

If "Add Valid Host Name" violation is detected, should I accept or delete it. Sufficient sample request and score level is 100.

ASM Advanced WAF

Erik_Novak
Oct 23, 2020
If there are numerous other violations associated with the request, such as attack signature violations within the host name itself, or HTTP compliance failures within the request, then the suggestions can be deleted and you can wait to see if they occur repeatedly before making the decision. If you know that the host name is valid, then it's safe to manually accept a suggestion even if the learning score has not yet reached 100 percent.

Erik_Novak
Employee
Oct 23, 2020
If there are numerous other violations associated with the request, such as attack signature violations within the host name itself, or HTTP compliance failures within the request, then the suggestions can be deleted and you can wait to see if they occur repeatedly before making the decision. If you know that the host name is valid, then it's safe to manually accept a suggestion even if the learning score has not yet reached 100 percent.
- Rahul_More
  Cirrus
  Oct 23, 2020
  Got it, thanks a lot Erik :-)
Erik_Novak
Employee
Oct 23, 2020
If the sample size is sufficient and the learning engine has reached a 100 percent confidence level then the suggestion is safe to accept.
- Rahul_More
  Cirrus
  Oct 23, 2020
  Hi Erik,
  
  Thank you for your prompt response.
  What are other cases when it shouldn't be accepted, if any?