What should the name of the Teacher Header or cookie be (TR7-LEARN); which name is used for Conditional Learning (TR7-ANALYZE)?

Short answer

The names are fixed; only the value is written to the Learning Methods window. The name of the header or cookie is TR7-LEARN for Teacher and TR7-ANALYZE for Conditional Learning. The value written to the Teacher Header field is compared exactly with the full value of the TR7-LEARN header in the request, and the value written to the Teacher Cookie field with the value of the TR7-LEARN cookie in the request; the value is case-sensitive. In Conditional learning, the same comparison is made with the TR7-ANALYZE name. Example: curl -H "TR7-LEARN: gizli-deger" https://www.example.com/ or the TR7-ANALYZE=analist1 cookie in the browser. If a request carries both a Teacher and a Conditional learning identity, Conditional learning takes effect: the request is written to the learning log, no Teacher record is formed. The values must be kept secret. The --smartLearning_header, --smartLearning_cookie, --analyze_header and --analyze_cookie fields in WEB-CLI also take the value, not the name.

Names and Values

Method	Header in the request	Cookie in the request	Written to the window
Teacher	TR7-LEARN: gizli-deger	Cookie: TR7-LEARN=gizli-deger	gizli-deger (Teacher Header · Teacher Cookie)
Conditional learning	TR7-ANALYZE: analist1	Cookie: TR7-ANALYZE=analist1	analist1 (Conditional Learning Header · Conditional Learning Cookie)

Test request examples (the address of the protected site is written instead of www.example.com):

curl -H "TR7-LEARN: gizli-deger" https://www.example.com/
curl -b "TR7-ANALYZE=analist1" https://www.example.com/

• The header value is compared as a whole; characters added to the beginning or the end of the value break the match.
• The header name is case-insensitive as HTTP requires; the cookie name, on the other hand, is sent as written, TR7-LEARN or TR7-ANALYZE.
• The difference between the two methods: What is the difference between Conditional Learning and Teacher; when should I use which?

Common Misconceptions

• "I set the header name myself." The names are fixed; only the value is chosen.
• "The value is case-insensitive." The value is compared exactly.
• "In WEB-CLI, the header or cookie name is written." The WEB-CLI fields also take the value.

How it is done in the documentation

• Learning Methods · Teacher Header
• Learning Methods · Teacher Cookie
• Learning Methods · Conditional Learning Header
• WEB-CLI waf options · The Trusted Sources

Related questions

• Can I still keep learning certain traffic while in Blocking mode (Conditional Learning)?
• What is Teacher; which sources can I define as Teacher (IP, header, cookie)?
• What is the difference between Conditional Learning and Teacher; when should I use which?