Forum Discussion

InfoSec_38553's avatar
InfoSec_38553
Icon for Nimbostratus rankNimbostratus
Sep 10, 2011

Enable Tightening and Staging Together

Hi all,

 

 

Why F5 not recommand to enable Tightening and Staging together in ASM?

 

 

I can't find the answer.

 

APM
app sec
security

2 Replies

Sort By
  • David_Sharpe_88's avatar
    David_Sharpe_88
    Icon for Nimbostratus rankNimbostratus
    Apr 15, 2013

    Good question. I encountered the same advice from http://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/config_guide_asm_10_2_0/asm_wildcard.html1031687

     

  • Mike_Ho's avatar
    Mike_Ho
    Icon for Cirrus rankCirrus
    May 07, 2013
    One can guess. Staging is used to show what would happen given a specific setting. Tightening on the other hand allows you to find more specific settings to refine your policy.

     

     

    Settings in tightening are not to be enforced, but rather are for clarifying your policy elements only. It doesn't make sense to say "I want to see suggestions for more specific settings, and I also want to stage this generalized setting".

     

     

    In general you can use tightening to identify specific policy elements, then you stage your specific changes until you're comfortable with them.