Forum Discussion
Wasfi_182818
Altostratus
Feb 20, 2016Learning option for attack signatures
Hi;
Under Application Security> Blocking > settings, why is there a learning flag option for Attack Signatures. I mean what is there to be learnt since attack signatures are knows through the At...
refra_151287
Cirrus
Feb 21, 2016If you got blocked at the blocking mode regarding specific attack signature, this option will put this attack signature at the manual traffic learning page, and see if it's a false positive attack you can learn it, so ASM will not block it again.
Wasfi_182818
Altostratus
Feb 21, 2016Thank you Refra. Although you don't event need to be in blocking mode for the signature to show under manual traffic learning. You could be in transparent mode and it will show under manual traffic learning. You need to be outside the enforcement readiness period.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects