TR7 ASP WAF Modes

Learning Mode, Monitor Mode and Blocking Mode tabs are accessed via the TR7 ASP WAF Modes tab.

Learning Mode

As long as the TR7 WAF is in Learning Mode, all requests to the relevant vService are logged in the background. While in Learning Mode, no logs appear in WAF Logs and clients are not blocked by TR7 WAF. The site map of the relevant service is created and then used for Analysis & Learning.

For more details about Learning Mode click here.

Monitor Mode

As long as the TR7 WAF is in Monitor Mode, the rules taught to the system and the logs are followed. In monitor mode, requests are not blocked, but their logs can be viewed in WAF Logs on the TR7 ASP web interface. This mode is "What would happen if we put it in Blocking mode?" It was designed as an answer to the question. It is put into Blocking Mode by waiting in this mode until the level of false-positive decreases to a minimum in the vService.

For more details about Monitor Mode click here.

Blocking Mode

As long as the TR7 WAF is in Blocking Mode, unsolicited requests are blocked by the TR7 WAF according to pre-taught rules or default rules.

For more details about Blocking Mode click here.