Forum Discussion
ee
Cirrus
CirrusF5 AWAF Data Guard
According to the online resources, the data guard features will mask response containing sensitive data or block the response. However, if the application itself displays the sensitive information wh...
Amine_Kadimi
MVP
MVPIt is not clear from your question where the sensitive information is generated and if it passes through f5 or not. As long as the data is passing through F5 and visible by the WAF module then it can be masked/blocked.
eeCirrus
CirrusSupposedly if we enable data guard for the policy by navigating through “Security” -> “Application Security” -> “Data Guard”, and also enable the "Learn, Alarm and Block" in "Security” -> “Application Security” -> “Policy Building” -> “Learning and Blocking Settings”, then it can be considered passing through f5 right?
- Amine_Kadimi
By passing through F5, I meant the sensitive data is going through a published virtual server which has WAF enabled.
If you enable dataguard learn, alarm, block for a policy in blocking mode, and enable dataguard itself, then sensitive data will cause a blocking page