Forum Discussion
Nik_67256
Nimbostratus
NimbostratusASM - Dynamic SQL Injection Protection
Hello All,
We know that big IP ASM can protect against SQL Ijnection attacks.
But Does it protect against "Dynamic SQL Injection Attacks"? If yes , how does it do it.
A...
hooleylist
Cirrostratus
CirrostratusHi Nik,
ASM is positioned between HTTP clients and the front end web server tier. So ASM doesn't validate web app to SQL communication. It does look for suspicious user input using attack signatures, character set validation, size limits, etc. This should be the same whether the web app is using dynamic SQL queries or not.
Aaron