Forum Discussion

Nik_67256's avatar
Icon for Nimbostratus rankNimbostratus
Mar 01, 2012

ASM - Dynamic SQL Injection Protection

Hello All,



We know that big IP ASM can protect against SQL Ijnection attacks.



But Does it protect against "Dynamic SQL Injection Attacks"? If yes , how does it do it.



Any reply will be greatly appreciated.



1 Reply

  • Hi Nik,



    ASM is positioned between HTTP clients and the front end web server tier. So ASM doesn't validate web app to SQL communication. It does look for suspicious user input using attack signatures, character set validation, size limits, etc. This should be the same whether the web app is using dynamic SQL queries or not.