Author Topic: no report of SQL-Injection and XSS in log  (Read 2260 times)

Offline riverdrift

  • Contributor
  • *
  • Posts: 2
  • Karma: 0
no report of SQL-Injection and XSS in log
« on: January 04, 2009, 11:42:56 PM »
Hi all
please help
I've configured and rechecked the configuration of Application Firewall.
we enables the SQL-Injection and XSS to be blocked but when triggered the attck with Vulnerability  analysis tool nothing comes in the LOG.

the Netscaler Box is on POC.
please find attached the log file.
plz suggest.

Offline evildani

  • Administrator
  • Hero Member
  • *****
  • Posts: 373
  • Karma: 22
Re: no report of SQL-Injection and XSS in log
« Reply #1 on: January 05, 2009, 12:39:00 PM »
What checks have you turned on on the NS, and are you sure that the AppFW learned the necesary for it to block (or pass) the traffic.
What version are you running?
Could yo be more specific on what you are trying to do.

Daniel