For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

chaloempone_147's avatar
chaloempone_147
Icon for Nimbostratus rankNimbostratus
Feb 23, 2015

Sensitive data configuration for JSON parameter

Hi expert I want to mask data to prevent operators see some sensitive data in ASM event logs. When user login to my application, event log will show a record of http request like this. {"req":{"app...
ASM Advanced WAF
management
security
Torti's avatar
Torti
Icon for Cirrus rankCirrus
Feb 23, 2015

you can mask it with a json profile. There you have to insert the element name and thats it.

 

But it depends on you release. An older one doesn't has the json profile feature.

 

Torti's avatar
Torti
Icon for Cirrus rankCirrus
Feb 23, 2015
what happens, if you insert pwd into the sensitive data list? that should be enough.