For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Steve_A_129440's avatar
Steve_A_129440
Icon for Nimbostratus rankNimbostratus
Jul 16, 2013

Frequent SQL-INJ false positives

I am having a frequent issue of the SQL-INJ signatures matching and alarming on content that has no resemblance of a SQL injection attack.   Here is an example:   txtBio=   Julie0x20Brown:0x...
app sec
BIG-IP Access Policy Manager (APM)
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Jul 17, 2013
\\+|\\/\\*)/Psi\";

 

 

Josh did a tech tip on how to dissect attack sigs by creating a custom one which is a useful addition to this.

 

 

Hope this helps,

 

N