Reference Guide

Monitor Security Blacklist
Zend Server Best Practices
When capturing event context, Zend Monitor will save the values of all PHP super-globals (POST, GET,
SESSION etc.) in the event database, and will present these values in event reports. Sometimes, it is
unwise to store and present some values - for example, passwords or credit card numbers and other
private information.
Zend Monitor allows you to filter out some super-global values by black-listing their keys in the Zend
Monitor Security Blacklist. Filtered values will not be stored in the events database and will not be
included in event reports (details) - instead, the string "" will be presented.
Why Configure Security Settings?
The primary reason for securing information is to prevent the storage, handling and distribution of
sensitive information such as user names, passwords and credit card numbers. This information is
collected as part of the Zend Server diagnostic process. However, in most cases the context, and not the
value, is important to understanding why the Event occurred. Therefore, sensitive information omitted
from the Event Detail collection process.
An additional reason for using the Security Blacklist is to prevent inadvertently sending sensitive
information by e-mail when using the Event Action option that automatically sends Event Details via
email.
Black-listing sensitive information may be required in order to confirm with some security standards such
as PCI Certification.
409