Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 
Custom Alert Banner

asm policy learning

MAbbas
Cirrus
Cirrus

Hi ,

I have a ASM policy - it has been in transparent mode for a while and has learnt signatures

Status

" src http: (Header) 200101559 Staging

 

how do a delete all the learning and start over again - meaning delete all the signature suggestions and start over

Thanks

 

5 REPLIES 5

Samir
MVP
MVP

Create the fresh WAF/ASM policy and attach to VIP. Quick & easy way to solve it

MAbbas
Cirrus
Cirrus

meaning there is no way of resetting the suggested signatures ?

Erwin_de_Brouwer
Nimbostratus
Nimbostratus

Hi MAbbas,

 

While in manual learning mode, you should be able to select all learning suggestions and click "Delete Suggestions". This will delete the learning suggestions and enalbe the learning proces to start over again. Don't choose "Ignore Suggestions", because the suggestions will not learn again.

 

When in Automatic learning mode, you should indeed create a new policy to start over...

 

This link is really stong documentation in my opinion:

https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-12-1-0/23.html

 

Hope this helps!

thanks for the response - i am attaching an image - how do a delete these signatures that are in staging

Erwin_de_Brouwer
Nimbostratus
Nimbostratus

Hi MAbbas,

Well, I'm not sure you are able to delete these signatures, because they are part of the Generic Detection Signatures Set. However you should be free to disable these signatures by checking the box and take them from Staging status into Enforced or choose "No" at the "Enabled" box.

Or maybe I don't understand the question well.😀 Trying to help though!