NetScaler Console service

Configure the learning profile

January 8, 2024

Contributed by:

You must configure a learning profile in NetScaler Console and select the NetScaler profiles to generate the relaxation rules list. Depending upon the traffic, you can configure profiles on NetScaler instances and configure a learning profile in NetScaler Console.

Note

Currently you can configure only 25 profiles.

You can configure learning profiles to generate the relaxation rules list for the selected:

Web applications – Enables you to select the application for which you want to create the relaxation rules.
Profile names – Enables you to select the WAF profile for which you want to create the relaxation rules.

After you create the learning profile, if NetScaler receives no incoming traffic for the configured security checks, you can also configure to remove the relaxation rules from NetScaler Console.

To configure a learning profile:

Navigate to Security > WAF Learning > Learn Profiles
Click Add.
In the Add Profile Configuration page, specify the following parameters:
1. Learn Profile Name – Specify a name of your choice.
  
  Select the Enable option. By default, this option is selected. If you disable this option, the profile will not be active.
2. Learn Behavior – Select the learn behavior to generate rule, remove rule, or both
  1. Learn Rules – Generates the exception rule and enables the administrator to either deploy or skip.
  2. Remove Idle Rules – Removes the exception rule, when the configured idle time exceeds the threshold.
  3. Learn Rules & Remove Idle Rules – Generates the exception rules and also removes when there is no incoming traffic
    Note
    - Remove rule option is only supported for Start URL, Deny URL, HTML Cross-Site Scripting, and HTML SQL Injection security checks.
    - When you select Remove Rule option, the supported security checks options are displayed.
3. Learning Group – Select either Profile Based or Application Based.
4. Select WAF Profile – This option is displayed when you select Profile Based. Select the required WAF profiles based on applications or profile names.
5. Select Applications - This option is displayed when you select Application Based. Select and add the applications from the list.
6. Under Security Check, select the security checks options that you want to take action for the violations reported in NetScaler Console. When you select an option, you must provide the following information:
  1. Minimum number of sessions – Specify the sessions. NetScaler Console monitors for the specified sessions to be occurred on the NetScaler instance to report it in the relaxation list.
  2. Auto Deploy - This option enables the administrators to take an action (deploy or skip). You must specify the grace period (days, hour, and minute format), for which NetScaler Console will hold these violations in the Relaxation Rules list.
    
    The maximum grace period that you can specify is 30 days.
  3. If you have selected Remove Rule option, specify the Idle Time (Day) in days and hours. After this time period, if NetScaler receives no incoming traffic for this security check, the rule is automatically removed.
    
    By default, the idle time is 7 days, but you can configure this time as no lesser than 23 hours.
7. On the Notification Settings, select the notification options that you want to get the violations notified. The available notification options are email, SMS, Slack, and ServiceNow.
  
  After you select the notification options, you can either select from the existing distributed profile or create a profile.
8. Click Create.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Configure the learning profile

January 8, 2024

Contributed by:

January 8, 2024

Contributed by:

Configure the learning profile

In this article