Block SQL injections

Unanswered Question
Mar 11th, 2010

I have two ASA 5520 I have some web servers which the public can access, I would like to know if my ASA 5520 can block SQL injections.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Panos Kampanakis Thu, 03/11/2010 - 09:44

The ASA itself no.

HTTP inspection will do some check but not full sql injections.

Also sqlnet inspection does sql inspection and ensures sql protocol conformance, but it doesn't go as deep as sql injections.

You would need a proxy in the middle that could fully do that.

I hope it helps.



This Discussion