For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nik_67256's avatar
Nik_67256
Icon for Nimbostratus rankNimbostratus
Mar 01, 2012

Traffic Learning - Elementary Query

Hello All,

 

 

Im a newbie here. This is a elementary query but would appreciate any inputs than can clarify my doubts.

 

 

 

I notice that the traffic learning screen changes with time without any action being performed by the user. Like last week it mentioned "Modified domain cookies=345" and today it says "Modified domain cookies=2". Does that mean the Automatic policy builder(which is running) has updated the security policy without any user action (like clicking accept) or does that mean it simply cleared the learning screen and the policy did not learn anything from the traffic(as not action was being taken of accepting or clearing).

 

 

Note -The Real time traffic policy builder is running.

 

 

Nik
management
monitoring

1 Reply

  • santosh_81454's avatar
    santosh_81454
    Icon for Nimbostratus rankNimbostratus
    May 17, 2012
    Hi Nik,

     

     

    This depends on the log retention period of the ASM appliance you are using. When the "Modified domain cookies=345" was displayed there were 345 instances and the logs are available to view. When the "Modified domain cookies=2" shows that earlier logs were deleted and only 2 entries that match the Modified domain cookies parameter are available in the current the logs for review.

     

     

    - Santosh.