Forum Discussion
CirrusF5 AWAF Data Guard
MVPAlso for more granular stuff a DLP agent systems could be used like Best Data Loss Prevention Reviews 2024 | Gartner Peer Insights as F5 BIG-IP WAF is like a Swiss army knife but for granular control there are dedicated DLP systems. F5 can also integrate with network based DLP using ICAP F5 ICAP over SSL/TLS (Secure ICAP) with F5 ASM/AWAF Antivirus Protection feature | DevCentral
eeMay I know how granular control does the DLP system could provide? I am thinking to utilize the existing Data Guard feature in f5 AWAF since it's already been there. However, it would be great to have other options in mind. If possible, could you provide a comparison between these two, as it would provide me with more insights to determine which one to use?
- Nikoolayy1
ee I don't think providing comparison is something for the F5 Devcentral community channel. F5 is great network based system and layer 7 proxy (especially for web traffic with the ASM/AWAF module) but you need to be aware what you want and what you are trying to achieve as you mentioned " which might be not from the response" if the sensitive information is autogenerated by a javascript on the customer devices (or in a mobile app) and not from a web response then endpoint DLP may do the job and you better review it with a DLP vendor of your choice.
Edit:
I forgot to add that for binary files that could be in the response you will need an external DLP to scan them as F5 AWAF/ASM is Web based solution and you then can use ICAP for this.
