cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Nickel

R80.20 IPS Signature For OWASP

Dear Experts,

I am looking for an IPS signature for OWASP. Can you please help me to find the IPS signature for OWASP.

Regards,

Rahul Borah

 

6 Replies
Highlighted
Gold

Re: R80.20 IPS Signature For OWASP

Rahul,

maybee you can explain more detailed what do you want to do.

There are some WAF functionalities  available via IPS (like Crossitescripting, SQL injections etc.) You have to enable webserver on a host object to use these protections.

There is a document available from Check Point about OWASP, these should help a little bit:

Threat Prevention Coverage – OWASP Top 10 

Wolfgang

0 Kudos
Highlighted
Nickel

Re: R80.20 IPS Signature For OWASP

Hi Wolfgang,

Actually I want to block below mention attack VIA IPS. Is there any recommended IPS signature for below mention attack?

Forbidden File Extension (Injection attack)
Cross-Site Scripting In parameter (XSS Injections)
OS Command Injection in parameter (Injection Attack)
Metacharacter In Parameter (Other Attack)
Mismatched IP cookie Replay Attack
SQL injection
LDAP injection
Command Injection
HTTP Command Injection

 

Regards,

Rahul

Highlighted
Admin
Admin

Re: R80.20 IPS Signature For OWASP

Many of these are covered in the document Wolfgang linked above.
0 Kudos
Highlighted

Re: R80.20 IPS Signature For OWASP

You can search the IPS protections in  Dashboard easily for phrases, so why ask others ?

0 Kudos
Highlighted
Nickel

Re: R80.20 IPS Signature For OWASP

Hi Albrecht,

 

 Is it wrong if I asking something in this group related to the checkpoint ?

Regards,

RB

0 Kudos
Highlighted
Nickel

Re: R80.20 IPS Signature For OWASP

Hi,

 

You can search it under the website

https://research.checkpoint.com/

 

It will show the IPS protection correspond to the attack you are looking for.