Re: ISA Server and SQL Injection

[Tim Hoolihan <tim.hoolihan () gmail com>]

> Not over SSL
Here's an idea for a way around that.  ISA server can handle the SSL
certificate, so traffic is SSL right up to ISA server, then on the
internal path to the server, trafffic could be unencrypted and pass
through an application filter that handled checking for sql injection.

Just a theory though...
-Tim


On Mon, 14 Feb 2005 19:05:34 +0100 (CET), Rafael San Miguel
<smcsoc () yahoo es> wrote:
> Hi all,
>
> ¿Has anyone tested ISA Server 2004 against SQL
> Injection attacks? I mean, ¿can it protect from this
> type of vulnerability?
>
> Thanks in advance. Greetings,
>
> Rafael San Miguel Carrasco