RE: ISA Server and SQL Injection

["charles freeman" <the.freemans () comcast net>]

Application layer firewalls protect against sql injection and other real
time layer 7 hacking events. ISA server would not. 


-----Original Message-----
From: John Steer [mailto:jsteer () microsoft com] 
Sent: Monday, February 14, 2005 8:48 PM
To: Rafael San Miguel; webappsec () securityfocus com
Subject: RE: ISA Server and SQL Injection

I'm not sure any firewall would stop a SQL Injection attack.  

This is an application issue

-----Original Message-----
From: Rafael San Miguel [mailto:smcsoc () yahoo es] 
Sent: Monday, February 14, 2005 10:06 AM
To: webappsec () securityfocus com
Subject: ISA Server and SQL Injection


Hi all,

¿Has anyone tested ISA Server 2004 against SQL
Injection attacks? I mean, ¿can it protect from this
type of vulnerability?

Thanks in advance. Greetings,

Rafael San Miguel Carrasco