For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

gwl_34698's avatar
gwl_34698
Icon for Nimbostratus rankNimbostratus
Aug 04, 2014

asm data guard mask data

suppose there is a html entity (script src http:abc.com/abc.js ) in the response head, and asm configuration as following:   data guard :enabled, custome patterns: abc.com/abc.js mask data :en...
ASM Advanced WAF
management
security
gsharri's avatar
gsharri
Icon for Altostratus rankAltostratus
Aug 06, 2014

After reading your original question again I see that I missed that the content you wish to mask is in an http response header (if I understand correctly). It may be that Data Guard does not mask patterns in headers, only response body content.

 

Click here: iRule Response Scrubbing for example code. Techniques like this would need to be applied to the response header.

 

Also here: iRule HTTP commands and events for iRule http options.