For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

chaloempone_147's avatar
chaloempone_147
Icon for Nimbostratus rankNimbostratus
Feb 23, 2015

Sensitive data configuration for JSON parameter

Hi expert I want to mask data to prevent operators see some sensitive data in ASM event logs. When user login to my application, event log will show a record of http request like this. {"req":{"app...
ASM Advanced WAF
management
security
Torti_93733's avatar
Torti_93733
Icon for Nimbostratus rankNimbostratus
Feb 23, 2015

you can mask it with a json profile. There you have to insert the element name and thats it.

 

But it depends on you release. An older one doesn't has the json profile feature.

 

chaloempone_147's avatar
chaloempone_147
Icon for Nimbostratus rankNimbostratus
Feb 23, 2015
Nothing happen after I add pwd in the sensitive data list > update > apply policy then try to login my application again. Event log still show plain text without masking data.