Which is NOT a function of ASM?

Attack signature enforcement - matching requests against a database of known exploit patterns - is a fundamental and primary ASM function.

HTTP protocol enforcement, which ensures incoming requests conform to RFC-defined HTTP standards, is a built-in ASM capability that blocks malformed requests.

Network security encompasses Layer 3 and Layer 4 controls such as packet filtering, IP routing security, and port-based access control, which are handled by dedicated network firewalls and intrusion prevention systems - not by ASM. ASM is scoped exclusively to HTTP/HTTPS application traffic inspection and enforcement. Claiming ASM provides network security would conflate WAF and firewall roles.

Parameter value enforcement, validating that parameter data types, lengths, and values match defined security policy, is a core ASM protection feature.