Forum Discussion

yanthen_182605's avatar
yanthen_182605
Icon for Nimbostratus rankNimbostratus
May 03, 2017

Putting new and updated signature in staging

Hi,

 

I have some questions about the mechanism in ASM (version 12.x) in updating attack signatures to:

 

  1. put newly added attack signature in staging, AND
  2. put updated/modified existing signatures in staging.

I know that to achieve this, I need to check the "Place updated signatures in staging" in Security >> Application Security >> Policy Building >> Learning and Blocking Settings.

 

But do we need to check "Enable Signature Staging" (the option just on top of it)?

 

As reading some past answers to this similar questions, it was suggested to enable signature staging first before updating. Isn't this option will put all signatures in staging instead of just the new/updated ones?

 

Thanks!

 

1 Reply

  • The help says:

     

    Specifies, when checked (enabled), that the staging feature is active,and the system places all newly assigned and newly updated signatures in staging (using the Signatures Update feature).

     

    So to me I would think it is only applicable to newly assigned and newly updated signatures, but not all signatures.