How to block attack-oriented traffics even when a policy in learning mode.

Hi,    I am trying to block signature oriented attack even when a policy in learning mode.   It's possible? Yes means share the procedure.   Thanks Kumar