topic Re: ACE for sql injection filtering in Application Networking

ACE for sql injection filtering

arnis — Wed, 01 Aug 2007 08:57:30 GMT

I have an ACE module in a Cat6500, that is load balancing to some HTTP servers.

occasionally there are SQL injection attacks towards the http servers.

I know the ACE can filter based on http strings, but

If you can provide me with some basic templates on what to filter out and how to format the string

to stop SQL injection attacks, that would be of great help.

Cheers.

Re: ACE for sql injection filtering

umedryk — Tue, 07 Aug 2007 16:19:34 GMT

There are various signatures which are availbale for configuration for sql injection attacks. The signatures are some times application specific and it may not fit other application. Following links may help you

http://www.cisco.com/en/US/products/ps7314/products_white_paper0900aecd8068dcdb.shtml

http://www.cisco.com/en/US/products/ps7314/products_white_paper0900aecd80661ca6.shtml

Re: ACE for sql injection filtering

arnis — Mon, 13 Aug 2007 12:41:45 GMT

thank you for your suggestion, IF any one has implemented SQL injection attack filtering it would be great to get some examples.

Cheers

Arni