For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Marko_Coha_2052's avatar
Marko_Coha_2052
Icon for Nimbostratus rankNimbostratus
Aug 19, 2015

ASM SQL injection blocking problem

Hi I am having a problem with SQL injection. I have configured the policy and at first it blocks SQL injection. When i deactivate the policy and activate it again then it blocks everything fine instead of SQl injection which it show like legal request.

 

Also just to note : SQL injection signatures are blocked and are not in stagging. Could you please help with the issue?

 

Br, Marko

 

7 Replies

  • ASM is not seeing a violation on these requests which means the request is not triggering a signature. Filter the attack signature list for this policy to see if any of the SQL inj signatures have been disabled.

     

    • boneyard's avatar
      boneyard
      Icon for MVP rankMVP

      exactly the same? so "You have configured the policy and at first it blocks SQL injection. When you deactivate the policy and activate it again then it blocks everything fine except of SQL injection" and "SQL injection signatures are blocked and are not in stagging"

       

      if so then please go through the earlier questions and provide all the same answers:

       

      • Can you post a screenshot of the violation?
      • Filter the attack signature list for this policy to see if any of the SQL inj signatures have been disabled.
      • Can you post a print screen of your allow url list?

      if not exactly the same then please post a new question with your exact problem and some more information which shows it doesn't work.