Re: ISA Server and SQL Injection

[Matthieu Estrade <mestrade () apache org>]

John Steer wrote:

> I'm not sure any firewall would stop a SQL Injection attack.  
>
>  

Web application firewall can do this. They filter http content.
  

> This is an application issue
>
> -----Original Message-----
> From: Rafael San Miguel [mailto:smcsoc () yahoo es] 
> Sent: Monday, February 14, 2005 10:06 AM
> To: webappsec () securityfocus com
> Subject: ISA Server and SQL Injection
>
>
> Hi all,
>
> ¿Has anyone tested ISA Server 2004 against SQL
> Injection attacks? I mean, ¿can it protect from this
> type of vulnerability?
>
> Thanks in advance. Greetings,
>
> Rafael San Miguel Carrasco
>
>