Forum Discussion
AltostratusPercentage figure in Traffic Learning
Hi;
I just wanted to ask about the significance of the percentage in the attached photo. I mean I know it indicates the strength of the learning suggestion so if the learning is automatic, the suggestion is accepted or enforced automatically by the ASM.
My question is, what is the strength of the suggestion based on. Is it related to loosening where the http request that triggered the suggestion was originated from a trusted IP address, thus a higher percentage?
Kindly Wasfi
1 Reply
Arnaud_LemaireEmployee
from the online help:
If the Policy Builder is in Automatic learning mode, it automatically takes the suggested action when the score (also known as the Learning Score) reaches 100 percent. (The score percentage is indicated on the screen.) A suggestion reaches a score of 100% if that suggestion occurs a lot and if the chances of that traffic being a real violation are low, and/or if traffic that triggered the suggestion comes from a trusted IP address.
from ask :
Next to each suggestion, ASM assigns a learning score that measures the strength of the suggestion by showing a percentage that indicates how close the system is to recommending that you accept the suggestion. The learning score is also influenced by the violation rating: the lower the rating of the violations, the higher the score.
Suggestions have higher learning scores if that traffic has met the conditions in the policy, if it originates from many sources, if it is unlikely to be a violation, or if the traffic comes from a trusted IP address.
so i would say : number of occurrence, number of source ip and violation rating, trusted ip should set the score to 100 directly i would guess.
