Confidentiality policies

The system can obscure or delete private data according to policies that you configure for each of the following traffic elements:

For each element, you must identify keys and specify how the system must handle them. For example, the system can apply MD5 hashing to obscure the value associated with a given key, it can delete the value alone or it can delete the entire name-value pair. You can also instruct the system to leave the data unchanged. Refer to the following table to see how the system handles data:

Options for handling private data

Option

Result

Do nothing

password=sesame

Hash

password=b3fba6554a22fdc16c8e28b173085ccc

Delete

 

Delete value

password=

You can use the asterisk character (*) as a wildcard for matching in any key name. For example, typing ASPsessionid* to create a rule for cookies matches ASPsessionid2293C100, as well as ASPsessionidAF095BFF.

For keys that are not explicitly identified, the system provides "catch-all" rules.

Cookies

Web applications use cookies to save information about the client for later use by the server. Cookies are a convenient way to store user preferences and session-state information (for example, session ID). However, they can store such sensitive data as account numbers and logon credentials.

Note

Cookie key names are case insensitive. Cookie values, however, are case sensitive.

POST command parameters

Forms are a common feature of websites, used as means of getting information from end users to authentication engines, reservation systems, helpdesk and e-commerce applications. Logon credentials, credit card numbers, and so forth, are transmitted to the server by the parameters of the POST command.

Note

POST parameter keys are case sensitive.

URI path and query parameters

Web applications use Unified Resource Identifiers (URIs) to identify Internet resources. Both the path and query segments of a URI can contain private or otherwise sensitive data. Refer to the following table to see URIs with the path and query parameters:

URI examples showing path and query segments

URI type

Example

With path parameters

http://example.com/home;param1=value1/search;param2=value2/page.htm

With query parameters

http://example.com/index.htm?param1=value1&param2=value2\

Related topic

Configuring-confidentiality-policies

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*