Forum Discussion

Mohanad's avatar
Mohanad
Icon for Cirrostratus rankCirrostratus
Nov 26, 2019

How to perform staging on many parameters if they enforced

Hi everyone

 

lets say i got +800 parameters are enforced (not staging), but i still need to modify a lot of them but no learning suggesting because they enforced (not staging) , is there a way to make them staging again using CLI, using GUI i can modify the parameters one by one.

 

Note: ASM security policy is transparent (non blocking)

 

 

 

 

 

Thanks

ASM Advanced WAF
security
TMOS
  • Mohanad's avatar
    Mohanad
    Dec 26, 2019

    Thank you - i manage to do it by exporting the security policy with XML format then i replaced + 4000 lines

    from <in_staging>false</in_staging> to <in_staging>true</in_staging>

     

    this affected URLs, Parameters, Attck Sig etc....

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Nov 26, 2019

    Mohanad,

     

    I assume they are causing a violation, for example illegal parameter length? Once things are enforced you can get visibility of required changes by using the Traffic Learning section of ASM. Check that the violation in the policy settings has the Learn box ticked/checked. You can then browse to Traffic Learning and see the suggestions to amend the parameter.

     

    This may be the best way. Hope this helps,

     

    N

    • Mohanad's avatar
      Mohanad
      Icon for Cirrostratus rankCirrostratus
      Dec 26, 2019

      Thank you - i manage to do it by exporting the security policy with XML format then i replaced + 4000 lines

      from <in_staging>false</in_staging> to <in_staging>true</in_staging>

       

      this affected URLs, Parameters, Attck Sig etc....