On-prem Big-IP Attack Signature Deployments Automation (not XC managed)
With the increase use of AI to exploit vulnerabilities, can I request the following be considered for implementing enforcement of New & Amended Attack Signatures within Big-IP ASM which are not managed by XC. At the moment it is an all or nothing approach whether the Attack Signature is placed in staging or automatically enforced without manual intervention to enforce the Attack Signatures that are in Staging.
Ability to configure the automatic enforcement of Attack Signatures depending on Attack Signature Accuracy (High/Medium/Low) thus not entering any staging period. Thus giving protection from day 1 the signature becomes available/updated.
Ability to configure the automatic enforcement of Attack Signatures depending on CVE Severity (High/Medium/Low) thus not entering any staging period. Thus giving the ability to protect from day 1 the signature becomes available/updated.