Forum Discussion
Narendren_S
Nimbostratus
Nov 03, 2018Client Side Sensitive Parameter Encryption
Hi All,
We have set some of the parameters as sensitive for the login pages and confirmed all those sensitive parameters values are masked in the ASM Logs.
Query: Whether the ASM Sensitive Param...
samstep
Cirrocumulus
Nov 03, 2018ASM only protects the server side (requests which made it from user's browser to F5). If a user types a password/credit card in their browsers and doesn't click Submit button there is no way ASM can protect it as this password has not reached ASM yet.
If you want to protect the client side from man-in-the-browser malware you need WebSafe and Advanced WAF
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects