ACE for sql injection filtering

[arnis]

I have an ACE module in a Cat6500, that is load balancing to some HTTP servers.

occasionally there are SQL injection attacks towards the http servers.

I know the ACE can filter based on http strings, but

If you can provide me with some basic templates on what to filter out and how to format the string

to stop SQL injection attacks, that would be of great help.

Cheers.

[umedryk]

There are various signatures which are availbale for configuration for sql injection attacks. The signatures are some times application specific and it may not fit other application. Following links may help you

http://www.cisco.com/en/US/products/ps7314/products_white_paper0900aecd8068dcdb.shtml

http://www.cisco.com/en/US/products/ps7314/products_white_paper0900aecd80661ca6.shtml

[arnis]

thank you for your suggestion, IF any one has implemented SQL injection attack filtering it would be great to get some examples.

Cheers

Arni