Forum Discussion
nathe
Feb 21, 2016Cirrocumulus
Wasfi, by enabling the Learn flag it means any violations of an attack signature will generate a log in Manual Traffic Learning. That way you can more easily identify any false positives and make the necessary policy changes.
Without Learning then you only have the violation logs in Requests and you have to unpick the reason for the violation manually.
Hope this helps,
N