suthomas1
Sep 06, 2020Cirrostratus
Asm policy blocking
Good day all, i have read that new ASM Policy is in learning mode for 7 days. After this period, is there manual action needed to put it in blocking mode after 7 days?
Adding to Erik's comment. Check out https://support.f5.com/csp/article/K13050156, and take a look at your policy building settings. Be careful with automatic learning mode, as malicious traffic can change your policy based on your learning settings.
It sounds like you would benefit from a quick review of ASM F5 operations guide:
https://support.f5.com/csp/knowledge-center/software/BIG-IP?module=BIG-IP%20ASM