ASM Learning with Wildcard (URL, Parameters and File Types)

Question

Hi Experts&nbsp;
I enabled the ASM policy for one web applicaiton with wildcard enteries (tighening plus staging) for File types, URL and Parameters for 7 days.&nbsp;
I accepted and enforce the learning suggestions. After 7 days, If I still want to put again in learning mode for more learning and keep whatever learned before, what I need to do that?&nbsp;
Regards,&nbsp;
GR&nbsp;

nathe · Answer

Ghost-rider,&nbsp;
You can add a wildcard entry and select tightening on all 3 elements above. Then check your block options to see if a violation is set to Learn, e.g. illegal parameter value. You will then get learning suggestions for any blocks you get (presuming the policy is in Blocking mode)&nbsp;
N&nbsp;

ghost-rider_124 · Answer

Also it is best to enable both tightening and staging on wildcard entries? or just tightening is fine?

nathe · Answer

F5 documentation would say not to enable both at the same time.

Forum Discussion

ASM Learning with Wildcard (URL, Parameters and File Types)

3 Replies

Recent Discussions

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

F5 Access Guard Deprecated: ZTA APM

F5 loadbalancer not working

Pricing when used with aws waf

F5 terminal - help to run commands - disk space full

Related Content

Wildcard Parameter signature attack

Community Learning Path: Multi-Cloud Networking

Cisco ACI Endpoint Learning with a BIG-IP HA Failover

Community Learning Path: Web Application and API Protection (WAAP)

WildCard Parameters