Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 
Custom Alert Banner

How long does it take for the automatic policy builder to build an AWAF or ASM policy? busy site

Wasfi_Bounni
Cirrocumulus
Cirrocumulus

Hi;

How long "as an estimate" does it take for the automatic policy builder to build an AWAF or ASM policy? I mean to a point where it tightens entities and signatures. The site is public and busy and I want to use comprehensive/slow policy building.

 

Kindly

Wasfi

1 ACCEPTED SOLUTION

There is not one fit all answer. Sometimes you can have a policy built in one day and sometimes you can wait for several months. In automatic mode, it heavily depends on how much traffic seen in a predefined period.

One important question to answer is how long does it take to see all the traffic patterns? and is there any traffic that is only seen on specific dates or events?

Beware that comprehensive mode is a pain even on busy sites, as a rule of thumb if you are not an ASM expert I would then recommend to start with a relaxed policy and as you get more traffic, you can tighten the policy up to an acceptable level.

 

View solution in original post

3 REPLIES 3

Samir
MVP
MVP

Its depend on type of ASM policy choosen(i.e Rapid Deployment security policy or own defiend poicy, etc.) during policy building and Learning period selected. By default learning period is 7 days.

 

Thanks 

There is not one fit all answer. Sometimes you can have a policy built in one day and sometimes you can wait for several months. In automatic mode, it heavily depends on how much traffic seen in a predefined period.

One important question to answer is how long does it take to see all the traffic patterns? and is there any traffic that is only seen on specific dates or events?

Beware that comprehensive mode is a pain even on busy sites, as a rule of thumb if you are not an ASM expert I would then recommend to start with a relaxed policy and as you get more traffic, you can tighten the policy up to an acceptable level.

 

Thank you Amine.