Solved

block url requests coming into our website

Posted on 2014-02-12
1
490 Views
Last Modified: 2014-02-16
i have an asa 5510 firewall.  inside i have our web server.  I continuously get intrusion attacks for a url that i do not host.  the domain is right but the last part of the url is a file i do not host.  symantec ids blocks it but i get so many that i would like to cut these requests off at the router.... how do i do this.  I know how to block website requests originating from the inside of the router to the outside.  can the asa also block url requests originating from the outside to the web server?  the ip addresses change so i cant block it by ip.
0
Comment
Question by:jamesmetcalf74
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 15

Accepted Solution

by:
Giovanni Heward earned 500 total points
ID: 39853458
Are you able to block by source IP or net range?

If not, I'd look into a layer 7 web application firewall (WAF), such as ModSecurity with the OWASP ModSecurity Core Rules as a starting point, or Sucuri WAF if you'd prefer a managed (cloud) solution.

You could also create your own IPS script, hosted at the offending URI.  Whenever the offending location is requested, the script would automatically update your ASA rules to block the source IP.
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Internal to DMZ IIS Authentication. 3 58
Cisco WRVS4400N 11 59
VoIP Polycom Phones not working 30 47
Cisco RV320 Gateway to Gateway connected but not passing traffic 6 25
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

735 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question