For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Steve_A_129440's avatar
Steve_A_129440
Icon for Nimbostratus rankNimbostratus
Jul 16, 2013

Frequent SQL-INJ false positives

I am having a frequent issue of the SQL-INJ signatures matching and alarming on content that has no resemblance of a SQL injection attack.   Here is an example:   txtBio=   Julie0x20Brown:0x...
app sec
BIG-IP Access Policy Manager (APM)
security
Steve_A_129440's avatar
Steve_A_129440
Icon for Nimbostratus rankNimbostratus
Jul 16, 2013

Thanks for responding.

 

 

Have you found a way to look into the reg-ex that makes up that rule? I'd love to see the 'source' of some of these rules.