The BIG-IP Application Security Manager Part 8: Data Guard
This is the eighth article in a 10-part series on the BIG-IP Application Security Manager (ASM). The first seven articles in this series are:
What is the BIG-IP ASM? Policy Building The Importa...
Published Dec 06, 2013
Version 1.0
Praveen_Kumar_K
Nimbostratus
NimbostratusHello John,
Another short and sweet article. I too enabled Dataguard with block mode first and realized its blocking all credit card transactions. We were testing application with dummy purchase and found Dataguard blocking the purchase request, so i disabled blocking for Dataguard and started wondering why this feature is provided if it blocks even legitimate credit card transaction?
One more question, i found a false positive where in URL there is bin directory /bin/ it is part of application, ASM blocks this url as it detects by a signature bin execution URI. I completly does not want to disable this signature so i created a allowed URL giving it a name and mentioning URL however still it blocked. for now i have disabled the signature.