For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

chaloempone_147's avatar
chaloempone_147
Icon for Nimbostratus rankNimbostratus
Feb 23, 2015

Sensitive data configuration for JSON parameter

Hi expert I want to mask data to prevent operators see some sensitive data in ASM event logs. When user login to my application, event log will show a record of http request like this. {"req":{"app...
ASM Advanced WAF
management
security
Torti_93733's avatar
Torti_93733
Icon for Nimbostratus rankNimbostratus
Feb 23, 2015

you can mask it with a json profile. There you have to insert the element name and thats it.

 

But it depends on you release. An older one doesn't has the json profile feature.

 

chaloempone_147's avatar
chaloempone_147
Icon for Nimbostratus rankNimbostratus
Feb 23, 2015
Hi Torti, Could you please give me some example if I need to hide "pwd" value for this json request. {"req":{"app":"MyMoABC","srv":"MyMoAuthen","op":"login","header":{"pwd":"111111","user":"2222222222222"}}} PS I use version 11.5.1