Forum Discussion

EvilRootSa_2832's avatar
EvilRootSa_2832
Icon for Nimbostratus rankNimbostratus
Oct 06, 2009

Setting up learning in the ASM

Just curious. I am working on enabling learning on my ASM 9.4.4. It might sound Newbish, but what would be the benefit to the learn feature? Would this feature be best to begin building out your secu...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 14, 2009
Learning and blocking are configurable per violation type. You can put all checks in transparent mode or just some checks. If one or more checks are in transparent mode, ASM can still provide learning suggestions without blocking a request or response which triggers the violation.

 

 

You can configure this per policy under App Security | Policy | Blocking | Settings. Note the three columns on the right: Learn, Alarm and Block. The online help and the ASM Configuration Guide provide additional detail on these options.

 

 

Aaron