Can Learning Mode be Activated for Desired Clients while TR7 WAF is in Blocking Mode?

Step > 1

First, open the WAF Management screen of the relevant vService by following "Monitor Mode > Relevant vService > WAF Management" steps. Click the pencil icon next to "Advanced Settings" under the "OWASP Protection Level" section.

Step > 2

At the bottom of the opened screen, enable "Analysis" and configure the client-specific data such as IP, cookie, or headers according to your preference to activate learning mode.

Step > 3

After ensuring that sufficient time has passed for the learning process, open the analysis screen for the related host group in TR7 and change the option from "Ignore Old Rules" to "Combine with Old Rules" to start the analysis. This way, newly generated rules will be combined with previously created ones.