R80.20 IPS Signature For OWASP

[Rahul_Borah]

Dear Experts,

I am looking for an IPS signature for OWASP. Can you please help me to find the IPS signature for OWASP.

Regards,

Rahul Borah

[Wolfgang]

Rahul,

maybee you can explain more detailed what do you want to do.

There are some WAF functionalities  available via IPS (like Crossitescripting, SQL injections etc.) You have to enable webserver on a host object to use these protections.

There is a document available from Check Point about OWASP, these should help a little bit:

Threat Prevention Coverage – OWASP Top 10 

Wolfgang

[Rahul_Borah]

Hi Wolfgang,

Actually I want to block below mention attack VIA IPS. Is there any recommended IPS signature for below mention attack?

Forbidden File Extension (Injection attack)
Cross-Site Scripting In parameter (XSS Injections)
OS Command Injection in parameter (Injection Attack)
Metacharacter In Parameter (Other Attack)
Mismatched IP cookie Replay Attack
SQL injection
LDAP injection
Command Injection
HTTP Command Injection

Regards,

Rahul

[PhoneBoy]

Many of these are covered in the document Wolfgang linked above.

[G_W_Albrecht]

You can search the IPS protections in  Dashboard easily for phrases, so why ask others ?

[Rahul_Borah]

Hi Albrecht,

 Is it wrong if I asking something in this group related to the checkpoint ?

Regards,

RB

[Cyber_Serge]

Hi,

You can search it under the website

https://research.checkpoint.com/

It will show the IPS protection correspond to the attack you are looking for.