WAF Learning speed

Question

After how many clicks the WAF will learn the clicked url / parameter and so on ?

Is it depend to Learning Speed ( fast , medium and low ) in policy settings ?

and how to increase the learning to allow WAF to learn from first click ?

Does Enforcement Readiness Period will help to increase the learning?

lidev · Answer

double post , already answer : https://devcentral.f5.com/s/question/0D51T00008T7HhKSAV/waf-learning-speed.

nikoolayy1 · Answer

Also check the option "Trusted IP" as you can make the ASM learn new things with just 1 access to an object in the website from a tusted IP maybe from the DEV or Devops team:

https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-13-1-0/9.html

the_blue · Answer

Dear Nikoolayy1 Many thanks.

Forum Discussion

WAF Learning speed

Recent Discussions

SAML agent failed to process signed assertion error memory allocation

SMS Gateway and BIGip

Need help to understand the flow logic of the irule

Unable to create F5 in AWS via CFT - no internet access

License Activation BIGIP_NEXT - when CM is not connected to internet

Related Content

WAF Learning speed

Community Learning Path: Multi-Cloud Networking

Introduction of IDS and WAF

ASM/WAF Management Automation - TMOS

WAF evasion techniques for Command Injection