WAF protection for MS-SQL server

Question

Can we protect SQL server with ASM module?

on port 1433.

Actually I have faced an issue while doing the same.

After applying http profile unable to access SQL server.

and then can't apply ASM profile.

erik_novak · Answer

ASM secures HTTP traffic. The HTTP profile is needed for ASM...but is your virtual server an HTTP server?

erik_novak · Answer

In other words, does your VS use HTTP?

rahul_yadav · Answer

No, it use port 1433. connect via agent or app server.

ivan_chernenkii · Answer

What kind of requests does you server accept?

Could you provide an example of simple request from tcpdump?

If it accepts HTTP request, then YES, you can use ASM for its protection. If NO, then most probably you can not use ASM.

Forum Discussion