For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Narendra_65803's avatar
Narendra_65803
Icon for Nimbostratus rankNimbostratus
Nov 05, 2010

Capturing Credit Card Data using iRule

Hello Everyone,

 

 

I am very one here. My company is providing PCI DSS solution to customer and one of them is protecting credit card data.

 

 

I would like to use iRule for capturing Credit card data from HTTP / HTTPS traffic when it passes through f5 and converting actual credit card data into dymmy card number / token number. I heard that I can do using f5 with iRules but could not get any success.

 

 

Can any one please help me how to achive this goal.

 

 

application delivery
dev
devops
iRules

2 Replies

  • The_Bhattman's avatar
    The_Bhattman
    Icon for Nimbostratus rankNimbostratus
    Nov 05, 2010
    HI Narendra,

     

    Have you taken a look at the code share for Credit Card Scrubbing

     

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/CreditCardScrubberUsingStream.html

     

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/CreditCardScrubber.html

     

     

    Bhattman
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Nov 05, 2010
    The stream based iRule Bhattman linked to should be an efficient way to do this.

     

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/CreditCardScrubberUsingStream.html

     

     

    If you wanted to avoid rechunking responses, you could add logic to the STREAM_MATCHED event to replace the actual credit card number with a dummy string of the same length.

     

     

    Aaron