Obscuring sensitive data in the gRPC API responses (7.6.0)

For gRPC API traffic, FortiWeb now supports obscuring sensitive data in server's response if it matches the Information Disclosure and Personally Identifiable Information signatures.

Run the following command to enable this function:

config waf grpc-security rule
  edit <rule_name>
    set replace-response enable
  next
end

FortiWeb will detect any sensitive data in the back-end server's response and replace it with "xxx".

Please note that to make this function work, ensure that the Action for Information Disclosure and Personally Identifiable Information has been set to Erase or Erase & Alert in Web Protection > Known Attacks > Signatures.

Related topics:

• gRPC protocol

• waf grpc-security rule