Forum Discussion

rezgui_180607's avatar
rezgui_180607
Icon for Nimbostratus rankNimbostratus
Mar 16, 2016

about policy builder

Dear support,

 

i have the policy builder 86%done . idon't know how can i get 100% done?

 

Best Regards

 

3 Replies

  • Policy Builder will not reach 100 percent completion until the thresholds for requests from enough different IP addresses/different user sessions have been reached. Depending on the version of BIG-IP you're running, you can lower the thresholds to speed up the process. If you can generate trusted traffic (that is, send requests from an IP address that is designated as "trusted" ) you can dramatically increase the speed. Which version of BIG-IP are you running? Automatic Policy Builder is greatly improved in v12.
  • this the version of my big ip BIG-IP 11.4.1 Build 608.0 Final how can i increse the speed
  • There are several ways. Got to Application Security: Policy Building: Settings and select the policy you created using the Real Traffic Policy Builder. In the middle of the screen, locate Automatic Policy Building Settings and select Advanced from the drop down menu. Farther down in the Rules section, you will see thresholds for Stabilize (tighten). There are configurable settings for enforcing policy settings once ASM has recorded X total requests and X different user sessions from X different IPs over X days. You can try to use lower values for those settings to speed up the process. If you have a good QA environment and you can generate legitimate traffic from a specific IP address, you can add it to the Trusted IP address list. Note that for trusted traffic, the thresholds of accepting traffic as legitimate is much lower than for untrusted traffic.