For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

The BIG-IP Application Security Manager Part 8: Data Guard

This is the eighth article in a 10-part series on the BIG-IP Application Security Manager (ASM). The first seven articles in this series are: What is the BIG-IP ASM? Policy Building The Importa...
Published Dec 06, 2013
Version 1.0
application delivery
ASM Advanced WAF
data guard
devops
iRules
security
tech tip
ltwagnon's avatar
ltwagnon
Ret. Employee
Dec 16, 2013
Praveen, thanks for the comments and the great questions! Some organizations want to mask all credit card data because of PCI compliance issues (https://www.pcisecuritystandards.org/). However, as you pointed out, the ASM will block credit card numbers if you have the blocking settings configured to block (versus "learn" or "alarm").

 

 

As for the /bin directory issue, I'll take a look at that and see if I can find a good solution. Disabling the signature should work, although that might not be your preference for a final solution.

 

 

Thanks again for the comments and questions!

 

John