cancel
Showing results for 
Search instead for 
Did you mean: 

Not showing learning suggestion for illegal parameter

Shiab
Nimbostratus
Nimbostratus

In our application we had a URL "/bc/login" for which default json profile was applied. In default json profile parse parameter option was not enabled. As a result f5 was not able to see parameters in that URL. Now we have created a new json profile in which parse parameter option is enabled and now we tagged that json profile to "/bc/login" URL. Now I am seeing requests are blocking as "illegal parameter" violation is triggered and in event log I am also seeing those illegal parameters. But in those blocked requests there is no suggestion to accept those illegal parameter though I am using automatic learning. So I have added those parameters manually in that URL. But I want to learn those parameters automatically. So what is the reason for not providing any learning suggestion?

 

1 REPLY 1

samstep
MVP
MVP

There are many reasons why the learning suggestion was not generated. Please read this Chapter in the F5 ASM manual to understand how the Learning process works and in which cases learning suggestions will not be generated:

 

 

https://techdocs.f5.com/en-us/bigip-14-1-0/big-ip-asm-implementations-14-1-0/refining-security-polic...