Forum Discussion

Arjun's avatar
Arjun
Icon for Nimbostratus rankNimbostratus
Jun 17, 2019

F5 ASM logs : Passwords appear in clear text

We have syslog servers configured. We recently observed that on ASM requests logs that are being forwarded to syslog servers, the password parameter value is given in clear text on the /owa/auth requ...
ASM Advanced WAF
security
Arjun's avatar
Arjun
Icon for Nimbostratus rankNimbostratus
Jun 18, 2019

Hi Dario, Thank you for the reference links. I am currently running the version 13.1.1 and the option mentioned in the F5 Article is not available yet. Moreover already we have sensitive data enabled and the URL with the parameter is having "Request Body Handling" to Form DATA.

 

Is there anything else we need to check.

Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Jun 18, 2019

Try to open a support case.