How to Test Credit Card Number Blocking with Data Filtering (Luhn Algorithm)

How to Test Credit Card Number Blocking with Data Filtering (Luhn Algorithm)

23484
Created On 09/25/18 19:45 PM - Last Modified 06/14/23 07:30 AM


Resolution


Symptoms

When testing a Data Filtering profile that's configured to block credit card numbers, administrators can generate a file containing 16-digit numbers to check against the Data Filtering profile. If these numbers are not valid credit card number formats, the Data Filtering condition does not trigger an alert or block.

 

Issue

For security reasons, don't test using valid credit card numbers. Palo Alto Networks firewalls use the Luhn Algorithm to test valid credit card numbers, substantially reducing the likelihood of a false positive, but also making testing more challenging.

 

Solution

The following ten numbers were pseudo-randomly generated using a Luhn algorithm, and were subsequently checked against a ruleset on several firewalls to ensure accuracy. They are of a MasterCard style, but should suffice for the general credit card test.

 

5376-4698-9386-4886

5564-8017-1758-1316

5464-9730-1302-5263

5257-2750-0534-2578

5564-9616-5310-6823

5483-3128-3984-7229

5352-9543-2663-9003

5130-0484-5710-3076

5210-3641-5712-1745

5559-4615-4452-4711

 

owner: gwesson



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcuCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language