For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

refra_151287's avatar
refra_151287
Icon for Cirrus rankCirrus
Mar 27, 2015

Data Guard doesn't work correctly!!!!

I'm trying to mask some parameter values at the URL for security reasons, when i configured Data guard as follow: Data Guard Enabled Credit Card Numbers Enabled Custom Patterns [0-9][0-9][0-9][0-9] Mask Data Enabled

I tested it by search for 1234, the output at the page get masked, BUT the URL still not masked, also the page itself appeared with no good look, and when i compared the page source before and after, found that the masking done for the stream itself, and that's NOT required at all, as follow:

Before:

Computers & Software
Electronics & Photography
Gemstones & Jewelry
Home & Garden
Movies & Video
Music

After:

Comics, Cards & Science Fiction
Computers & Software
Electronics & Photography
Gemstones & Jewelry
Home & Garden
Movies & Video
Music

so kindly is there any way to mask the URL away from the iRule, we need to test that option at the ASM, itself so what i'm doing wronng, Note: the portion we need to mask is around 3 to 4 characters

your fast response is really appreciated!

ASM Advanced WAF
management
security

2 Replies

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Mar 27, 2015

    In this case Data Guard is working as expected. Data Guard will mask patterns in the body of a response. It does not mask the same patterns in any other part of the response, for example in response headers. You will likely need to implement an iRule to achieve what you want.