NimbostratusHello everyone
When I applied an ASM policy to my virtual servers, ASM policy blocks some requests but there is no logs about the given support ids. There is no data in security->event logs->application -> requests menu . So I cannot find a solution for the false positive requests. How can I solve this problem. My F5 version is 12.1.1build 2.0.204.
Thanks for your help
CirrocumulusGo to virtual server properties/security/Policies, in the virtual server that is using the ASM policy. Make sure in the log profile, you select one of the options available. You should have "log all requests" or "log illegal requests" there.
Cirrushave you checked under manual traffic learning, for your policy? after the upgrade to 12.1, i noticed that several blocked requests end up there, without a support id. also, make sure that the asm policy is able to alert and learn the type of requests that are blocked
NimbostratusYes I have checked but there is no suggestion, There is no problem about blocking and alarm settings.