ASM on Mode Transparent (Learning) doesnt learn some parameters
Hi guys I have applied ASM on transparent mode and traffic learning. I am protecting a website based on Wordpress. When the user's administrators do click over different menus, the F5 trigger some event logs of type "Abuse of Functionality" especifically Illegal parameters : action=query-attachments&post_id=0&query[orderby]=date&query[order]=DESC&query[posts_per_page]=40&query[paged]=2.
F5 tell me for example that "query[posts_per_page]" is an illegal parameter but this is a false positive because this query executed over POST DATA is legal. The event shows Applied Blockign Setting : "Learn and Alarm". When i go to section TRAFFIC LEARNING in the list of parameters learned dont appear the characters before mentioned- WHY?? I accepted all requests generated but this traffic doesn't learned. why? If i change the policy from Transparent to Block inmediatly the traffic starts to get blocked then i have to revert the change because of this is a false positive. How can i do to allow this traffic without i have that modify manually the parameters ? why the F5 doesn´t learn this parmeters automatically during learning period??