Forum Discussion

mframpton_60606's avatar
mframpton_60606
Icon for Nimbostratus rankNimbostratus
Oct 31, 2008

Encrypted database?

Does anyone know if the backend database that stores the learned information is encrypted? We have sensitive information going through our ASM that needs to either be x'ed out or encrypted to keep wi...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 07, 2008
I think it would be prohibitively expensive in terms of performance to do some kind of wildcard or regex match against all parameter values to mask potentially sensitive data in logs/database. But maybe it would still be a worthwhile enhancement request to make to F5.

 

 

You can run asmqvkiew from the command to dump the MySQL database to a text file (gzip compressed tar archive).

 

 

tar xvfz /var/tmp/asm_snapshot.example.com.tar.gz *asm_mysql.dump

 

 

You could search for credit card numbers or other sensitive data using regexes (Click here)

 

 

Aaron