For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ziad_K_49340's avatar
Ziad_K_49340
Icon for Nimbostratus rankNimbostratus
Jan 13, 2014

Masking credit card numbers based on username

Dears, i am trying to use the credit card masking in a web application using the ASM but the customer wants to mask credit card for specific user and for other users he wants to leave the credit card...
application delivery
devops
iRules
M_4's avatar
M_4
Icon for Nimbostratus rankNimbostratus
Mar 05, 2014

If the app is APM protected, this is really easy. 🙂

Use the CCN scrubber code (https://devcentral.f5.com/articles/irule-ccn-scrubber) and just add a user check around the masking portion.

 

if { [ACCESS::session data get "session.logon.last.username"] ne "username to allow cc access" } {  mask CCN }