1, data guard of doing
this stuff is at http response time, if containing credit card, us social security card, some of sensitive information like card number, F5 will do the appropriate protection;
if it is block mode, the response will be directly block
if it is transparent mode, the F5 will overwrite the string of numbers with an asterisk
2, directly on the demo
normal request 
F5 disposed 
repeated login operation, direct block 
View Log
3, the asm into transparent policy 
found a credit card that column to become a star
Local pit father: did not say when the block strategy, covering the credit card with an asterisk.