For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JeffRW's avatar
JeffRW
Icon for Altocumulus rankAltocumulus
Aug 03, 2016

Marking false positive for Credit Card number (Data Guard)

Our ASM is flagging a value (d132c*****a6e5) that's actually part of a name of a Java script on various URLs.

 

Is there a way to exclude this value, or mark this value as a false positive regardless of the URL?

 

Thx

 

ASM Advanced WAF
credit card
data guard
false positive
security

2 Replies

  • cjunior's avatar
    cjunior
    Icon for Nacreous rankNacreous
    Aug 04, 2016

    Hello,

     

    Its about Data Guard, isn't?

     

    If so, I try to set an exception pattern or defining an url list exception to bypass it.

     

    Regards

     

  • Jinshu's avatar
    Jinshu
    Icon for Cirrus rankCirrus
    Aug 04, 2016

    Navigate to Security ›› Application Security : Data Guard and change the settings there. Select the policy and disable the options or add the ignore list.

     

    Hope it helps.

     

    -Jinshu