The BIG-IP Application Security Manager Part 8: Data Guard
This is the eighth article in a 10-part series on the BIG-IP Application Security Manager (ASM). The first seven articles in this series are:
What is the BIG-IP ASM? Policy Building The Importa...
Published Dec 06, 2013
Version 1.0
Praveen, thanks for the comments and the great questions! Some organizations want to mask all credit card data because of PCI compliance issues (https://www.pcisecuritystandards.org/). However, as you pointed out, the ASM will block credit card numbers if you have the blocking settings configured to block (versus "learn" or "alarm").
As for the /bin directory issue, I'll take a look at that and see if I can find a good solution. Disabling the signature should work, although that might not be your preference for a final solution.
Thanks again for the comments and questions!
John