when I add the classes through the GUI, it doesn't seem to like
the strings I'm typing in.. because when I go back to look at the
badStrings class, the half the strings I've entered are missing.
I've tried the below with the quotes and I've also tried without the quotes.
I have to leave out the ; too and then when I go back in all of them are present.
Anyway.. I tried to test to see if it drops the connection, by hitting our site
with
http://www.mysite333.net/file4.cfm;declare
I get a page instead of a dropped connection. Do you where the logging is done for big-IP? I checked all the logs on Big-IP but don't see anything being logged for dropped connections.
strings
";declare"
";select"
";insert"
";update"
";delete"
";exec"
";sp"
" " " "