Application firewall for HTTP / SQL

[Cooky]

We're detecting some SQL injection attacks against our web servers in the DMZ.
Is there any way we can enable application level protection for the server?

Even though we have "inspect http" enabled under the default global_policy policy-map, it's not able to stop the attacks.

Any advise?
We already have the GigE module in the expansion slot, so we can't deploy the IPS module.

 

[nightowl]

You can try limiting the URL string length using the ASA if that is how the attack is coming in. Now, if it is coming in from a form on the page it is not going to work. Your best protection will be from a Web Application FW (WAF) which in the Cisco family would be the ACE XML Gateway/WAF.