Forum Discussion

zandar_304392's avatar
zandar_304392
Icon for Nimbostratus rankNimbostratus
Jun 05, 2017

Data Guard exeption patterns configured via tmsh.

Hello Everyone,

we have enabled 

Data Guard
in our ASM policy and it works most of the time good ;). From time to time it happen that legit account nr. is validated as credit card nr. and so is blocked. We need than to add this pattern as exception - there is no problem to add this exception via 
GUI
, however I'd like to ask if there is option to add this pattern via 
tmsh
?

Thank you.

Y

application security
ASM Advanced WAF
data guard
exceptions
security
TMSH
  • suttonsc's avatar
    suttonsc
    Icon for Employee rankEmployee
    Jun 23, 2017

    This can be managed via POST to the Rest API (tested v12+):

    /data-guard

    Example, this returns the format for the data-guard endpoint:

     curl -sk -u admin:admin https://$target_ip/mgmt/tm/asm/policies/w7DIlTMBvUjxQLb0p_vbAg/data-guard/example

{
  "creditCardNumbers": false,
  "customPatterns": false,
  "customPatternsList": [],
  "enabled": false,
  "enforcementMode": "ignore-urls-in-list",
  "enforcementModeEnums": [
    "enforce-urls-in-list",
    "ignore-urls-in-list"
  ],
  "enforcementUrls": [],
  "exceptionPatterns": false,
  "exceptionPatternsList": [],
  "fileContentDetection": false,
  "fileContentDetectionFormatReferences": [
    {
      "link": "https://localhost/mgmt/tm/asm/file-content-detection-formats/example?ver=12.1.2"
    }
  ],
  "maskData": false,
  "usSocialSecurityNumbers": false
}