F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

chiznitz_15400's avatar
chiznitz_15400
Icon for Nimbostratus rankNimbostratus
Jul 01, 2013

Mask Request Body ASM Reporting

Hi,   Recently support told me that there is no way to turn off Request Body logging in the ASM. The requests that come in to our ASM have sensitive information that needs to be masked. We were ...
application delivery
dev
devops
iRules
chiznitz_15400's avatar
chiznitz_15400
Icon for Nimbostratus rankNimbostratus
Jul 01, 2013
Thanks for the reply.

 

 

I looked for the setting you mentioned and it does not exist, I did notice the documentation you linked is for 11.4 and we are currently on 11.2.1. I'll research some more and see if this setting was just added in one of the recent releases and will try and get one of our ASMs upgraded to try this.

 

 

The information in the request is a RAW string that does not have any XML or special parameters that the WAF would recognize, thus the need to drop it. A couple of our sites have certain XML tags that we mask using the entities as you mention.