SQL Injection detection with IDS/IPS on cisco ASA?

[Deepak Khemani]

Hi

Is it possible to detect or prevent SQL injection attacks using Cisco IDS/ IPS on ASA or with regular expressions?

Is there any signature available in IDS/IPS for this? And how effective it is in terms of generating correct alarms?

Thanks in advance

[nicksmi · Accepted solution]

Deepak,

We have several signatures that detect generic SQL injection attacks in the 5930-x family of signatures.