What Should Be Done After the Analysis is Completed?
Interface
Post-Analysis Actions
Step > 1
First, open the WAF Management screen for the related vService. Follow the steps "Monitor Mode > Related vService > WAF Management".
Step > 2
For the vService in Learning Mode, follow the steps "Analysis and Learning > Start Analyzing" to initiate the analysis process.
Step > 3
After the analysis is completed, click the "New" button to review the summary information regarding the analysis.
Step > 4
Click the "Edit" button to access the site map and review the path-based rules.
The site map is created as a result of the analysis initiated with specific filtering parameters. This screen lists the paths that were requested during the Learning Mode period for the related service.
Careful review should be done during the analysis process. Paths that are not considered part of the application should be excluded from the analysis. Filtering criteria like minimum request and minimum visitor should be applied. With dynamic glob path support, requests with the same structure should be grouped. This helps to reduce the number of generated rules.
Step > 5
Once all reviews are completed, click the "Apply" button to apply the rules. Then, the related host group should be switched to Monitor Mode.