The BIG-IP Application Security Manager Part 8: Data Guard

Hello John,

 

 

Another short and sweet article. I too enabled Dataguard with block mode first and realized its blocking all credit card transactions. We were testing application with dummy purchase and found Dataguard blocking the purchase request, so i disabled blocking for Dataguard and started wondering why this feature is provided if it blocks even legitimate credit card transaction?

 

 

One more question, i found a false positive where in URL there is bin directory /bin/ it is part of application, ASM blocks this url as it detects by a signature bin execution URI. I completly does not want to disable this signature so i created a allowed URL giving it a name and mentioning URL however still it blocked. for now i have disabled the signature.