wierd behaviour after applying transparent ASM policy

An ASM security policy in transparent mode will still affect traffic by inserting cookies and possibly modifying traffic payload. Transparent mode only stops ASM from blocking if there are violations.

 

Using rapid deployment template enables Data Guard by default to mask credit card numbers and US social security numbers so if there is any code in the page that looks like a CC data guard is most likely masking it with ***** characters.

 

Other features may also alter the payload of the response even in transparent mode: CSRF protection, bot detection, DDoS protection