ASM Data Guard using custom pattern to mask sensitive data in HTTP-request header

Question

I would like to use ASM Data Guard custom pattern to mask sensitive data that captured in http request header. The data that i want to mask is username and password within the http-request post Header.&nbsp;
I want to mask following data
__Requesttokanverification=nmsjfueotueihvbnxikwhjslkqjsdfgjhiertjdfgjkk&amp;Username=joe&amp;Password=test&nbsp;
I've written following Reg pattern it doesn't work
__Requesttokenverification=\w+\w+\w+&amp;Username=\w+\d+&amp;Password=\w+\d+&nbsp;

amine_kadimi · Answer

Data Guard is for masking server responses: https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-5-0/9.html&nbsp;
And since request parameters such as username and password need to be passed to the server, I assume that you want to mask them only in F5 logs. To do that, simply add the relevant parameters to the policy parameters list and make sure you check the case "Sensitive Parameter".&nbsp;

Forum Discussion

ASM Data Guard using custom pattern to mask sensitive data in HTTP-request header

1 Reply

Recent Discussions

rSeries and tenant upgrades

redirect not working

cat and grep command for rst messages

iRule resulting in too many redirects

When F5OS r2800 appliance reboots, interfaces configured at tenant level for VLAN are lost

Related Content

Multi-Cluster, Multi-Cloud Networking for K8S with F5 Distributed Cloud – Architecture Pattern

iRule to take cookie from HTTP Response into HTTP Request via table

Deploy High-Availability and Latency-sensitive workloads with F5 Distributed Cloud

Community at F5 - Evolving Patterns and New Structures

HTTP Request Smuggling, what it is, how to find it and how to stop it