SRA 4600 Web Application Firewall blocks access to the Portal login page.

We have a 8.0.0.1 - 16 4600 running and run the Web Application Firewall.  We had a few reports of users home that our portal page was not available, only tried IE, but everything went well here.  Today we had an internal machine with the same question and noticed that it was blocking WAF access: "threat of avoided WAF: Injection SQL 1 attack" you can see nothing wrong with this machine that may be cause the WAF to block the Portal login page.  Here are the event log:

"Jun 10 09:34 sslvpn1 SSLVPN: id = sslvpn sn = C0EAE4745184 time =" 2015-06-10 09:34 ' vp_time = '2015-06-10 14:34 UTC' pri fw = xx.xx.xx.xx = 2 m = 34 c = 402 src = dst = xx.xx.xx.xx xx.xx.xx.xx user = 'Unknown' usr = 'Unknown' msg = "prevented WAF threat: SQL Injection attack 1 ' URI=remote.ncmic.com:443/ rule-match =" _ga = ga1.2.1366358136.1433946841; " _dc_gtm_ua-21325736-1 = 1 "AttackCat = 'SQL Injection attack 1' somm ="SQL Injection is a technique of attack used to exploit websites that construct SQL statements from user-supplied input,"hamid = category '9005' = 'command execution - SQL Injection' agent =" Mozilla/4.0 (compatible; " MSIE 7.0; Windows NT 6.1; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729 .NET CLR 3.0.30729; Media Center PC 6.0; NET4.0C;. NET4.0E; Tablet PC 2.0)' geoCountryID = '0' geoCountryName = 'LAN' geoRegionName = 'unknown' geoCityName = 'unknown '.

Other machines can access the page without problem... thoughts?

Can not reproduce this problem at the moment...

Tags: Dell Tech

Similar Questions

  • We get an error "NETWORK CONNECTION ERROR, make sure a firewall is not blocking access to the printer.

    * Original title: printer error...

    I was printing with a printer wireless for months and now all of a sudden I'm getting an error, NETWORK CONNECTION ERROR and then readings make sure that a firewall is not blocking access to the printer.   I checked and it is not blocked...  I did a session of disorder and it reads no problems found.   Can someone please...

    Hello

    1. what version of Windows is installed on the computer?

    2. What is the brand and model of the printer?

    3. you have any non-Microsoft firewall installed on the computer?

    4. what security software is installed on the computer?

    5 have have there been recent changes made on the computer before the show?

    Please follow the steps below and check if that helps.

    Method 1: Run troubleshooting network printer and check.

    http://Windows.Microsoft.com/en-us/Windows-Vista/troubleshoot-network-printer-problems

    Method 2: Select the file and printer sharing

    http://Windows.Microsoft.com/en-us/Windows-Vista/enable-file-and-printer-sharing

    Method 3: I suggest to change firewall security settings, or disable the security software on the system and try to access the printer.

    Note: make sure that you enable the antivirus software, other security and firewall after the test programs.

    For more information, see the articles and check out them.

    Understanding Windows Firewall settings

    http://Windows.Microsoft.com/en-us/Windows-Vista/Understanding-Windows-Firewall-settings

    Enable or disable Windows Firewall

    http://Windows.Microsoft.com/en-us/Windows-Vista/turn-Windows-Firewall-on-or-off

    Allow a program to communicate through Windows Firewall

    http://Windows.Microsoft.com/en-us/Windows-Vista/allow-a-program-to-communicate-through-Windows-Firewall

    Let us know if it helps!

  • Firewall blocks access to AOL Error 0 x 84008504.

    OT: firewall.

    Firewall blocks access to AOL. Error 0 x 84008504. Help!

    To help your computer safer rest, Windows will sometimes block the programs to communicate through the firewall. To create an exception to this rule, see this link on the means.

    See you soon!

  • Adobe flash player 11.0 blocks access to the Web site home pages

    Why is Adobe flash player 11.0, allowed to block access to the Web site home pages, until their trash is installed?  They should be prosecuted for punishment of the loss of time by Internet users, who spend countless hours trying to fix their garbage, which takes control of the web and blocks PCs access to their program settings, unless it is done according to their specific updates. N ' ILS OWN INTERNET and everything on it, or what?

    Are you sure he blocked it, or the web page requires Flash Player to see this?

    Most web pages require an element of Adobe Flash Player.

    First of all, try to enable Active Scripting in the areas of Sites Internet Options, security settings, trust.

    You should also add a corrupted on.

    Click Start, type: Internet Options

    Press enter

    Select the "Advanced" tab

    Under reset Internet Explorer settings, click "reset".

    This should restore the Internet Explorer default settings.

    Then reinstall Flash Player

    http://get.Adobe.com/flashplayer/

    ----------

    Flash Player

    Troubleshoot installation of Flash Player for Windows

    http://kb2.Adobe.com/CPS/191/tn_19166.html

    Troubleshooting player stability and performance

    http://blogs.Adobe.com/JD/2010/02/troubleshooting_player_stabili.html

    Uninstaller

    http://kb2.Adobe.com/CPS/141/tn_14157.html

    Flash Player Support Forum

    http://forums.Adobe.com/community/webplayers/flash_player

  • Malware bytes blocks access to the 78.41.203.120

    a program on my computer tries to access the IP 78.41.203.120

    Malware bytes blocks access to the site saying it's dangerous.

    I can't find information on the web.

    Any help?

    Hello

    78.41.203.120
    http://dawhois.com/IP/78.41.203.120.html

    You should check with the support of Malwarebytes and their forums.

    Malwarebytes - Support
    http://www.Malwarebytes.org/support/

    Malwarebytes - Forums
    http://forums.Malwarebytes.org/

    I hope this helps.

    Rob Brown - Microsoft MVP<- profile="" -="" windows="" expert="" -="" consumer="" :="" bicycle=""><- mark="" twain="" said="" it="">

  • [MOVED] Update McAfee blocks access to the AOL software and software window Internet Explorer

    UPDATED July 2,2012
    Update antivirus software McAfee (McAfee software provided when I bought this Dell computer)
    It's so I can't connect to Internet after reboot
    with cable broadband from AOL or Windows Internet Explorer software on
    Windows 7. Programs are not blocked the McAfee software programs
    complete access... It seems that just programs cannot "find" the modem broadband
    in Windows 7 professional OS after your update... The other weird thing is
    The accuweather by Dell can access the Internet and produce of the time, date and
    weather on my monitor. I disabled the wireless connection that
    is integrated into the motherboard of Dell. I also tried to reinstall the modem
    (AT & T - Motorola 2210 Modem) software from the original CD but I get the message there is no 64
    driver bits. I had to use a restore five times point to eliminate the five
    try to update your software... What makes the limited Mcafee anti-virus software
    utility, since it can be is more updated. Virtual Technician of McAfee said that he is
    nothing wrong. Of course when the McAfee service is updated I can't chat on the
    NET with McAfee technicians ' sr since I can't access the Internet.
    McAfee technicians have no idea what is the problem.
     
    Windows says I have the latest driver upfdste for the Broadcom Gigbtye Ehternet, who manages the modem.
     
     

    I worked hard on this for so long and McAfee still blocking access to the Internet if I update definitions so to restart so I removed a second time. I installed the program software Antivirus malware from Windows and the Windows Firewall, which turns on automatically when you remove McAfee.  Intel took a horrible investment decision buy McAfee.

  • my windows Live ID has been blocked access to the vlsc site. What can I do?

    I tried to access the vlsc site, and I got a page saying that my account was blocked access to the site.

    WHA t I can do

    Your login status is invited or blocked because you are currently signed in with a Windows Live ID that is not associated with the Microsoft Partner Network.
     
    While you are connected as a guest, you will be able to access content available for public view. Links that display locked icons are contained premium for members of partner network, and you will not be able to view that content until you either you sign in with a Windows Live ID associated with the network of partners or register in the network of partners and then sign in with your newly associated Windows Live ID.

    You will need to check with the Volume Licensing Service Center:
    https://partner.Microsoft.com/us/40046574


    For more information about how to contact the VLSC, click below:
     
     
     
    Sincerely,

    Marilyn

  • Cannot use applications that need access to the internet

    I have problems with a number of applications on my Vista system.  All worked well until a few days ago (I ran the Symantec Conficker and Msft Malware tools so am sure it isn't the Conficker virus).  I am connected to the internet and can go to websites via IE.  However, applications that require access to the Internet are faulty.  It started with Windows Live Messenger, which would not start (error message has been that there was a problem).  After much effort I uninstalled but impossible to reinstall as the installer does not due to "not connected to the internet.  Another application shows an error 80072efd - lack of connection.  I can't configure Norton due to the lack of ability to connect to services.  Any ideas?  Thanks in advance...

    Hi DebAlex,

    Is the name of the application Python ring a Bell to you? It is a programming language and PyWin32 is an extension for it.  Please do a search on your computer (include files and hidden folders) for the file name pythonw.exe and pywin32.
     

    Depend on whether you use on your computer or not Python, you might want to try find it in Control Panel--> programs and features and remove it from the list if you use the program.

    If you do not use the program, rename the folder these files are locate in (if you can find using the search).  Other people with the same error were able to fix this way.

    Let us know if this helps, Kevin
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Remote clients are denied access to the portal...

    We're having sporadic problems with remote clients are denied access to our portal, they do not even have a login prompt.  We use a SRA 4600 with SonicOS SSL - VPN 8.0.0.3 - 23sv but have see on 8.0.0.1 as well.

    Journal entry:

    Threat of prevented WAF: Injection SQL 1 attack
    More details

    Entry matching: _ga = ga1.2.676072112.1440205737; _dc_gtm_ua-21325736-1 = 1
    Threat: SQL Injection attack 1
    Threat ID: 9005
    Description: SQL Injection is a technique of attack used to exploit websites that construct SQL statements from user-supplied input
    URI: remote.ncmic.com:443/
    Agent: Mozilla/5.0 (Windows NT 10.0;) WOW64; Trident/7.0; RV:11.0) as the Gecko

    The field 'entry matched' is not indicative of the entry that is triggering the signature. There would be something else, we need to study. Can you please make a ticket and we provide access to the portal so we can try to reproduce it?

  • I want to prevent access to the ' topic: support ' page. How to accomplish this task?

    I want to prevent access to the ' topic: support ' page. How to accomplish this task?

    You must create the userContent.css file and possibly the record chrome as well if they do not yet exist.
    Note that the names are case-sensitive.

    • Create the folder chrome (lowercase) in the .default < xxxxxxxx > profile folder if the folder does not exist
    • Use a text editor like Notepad to create a file userContent.css (new) in the folder chrome (file name is case sensitive)
    • Paste the code into the userContent.css file in the Editor window
    • Make sure that you select "All files" and not "text files" when you save the file via "save file as" in the text editor as userContent.css.
      Otherwise, Windows can add a hidden .txt file extension and you end up with one does not not userContent.css.txt file
  • Add user access to the portal

    Hello

    I have the role of Managing Director on the portal how can I add colleagues more access to the portal, also how to give access to users customers

    Hi Marc,

    Here are the steps to grant access based on roles on the portal of the NMP, please go through this document.

    https://supportforums.Cisco.com/document/12583596/adding-new-users-smart-net-total-care-portal

    Thank you

    Anusha.

  • block access to the local asa firewall vpn accounts

    I'm looking for the local accounts on the firewall and would like to make sure that users who have local accounts for vpn do not have for the firewall itself through asdm, telnet, ssh to the management.

    Is the only aaa on the firewall command

    the ssh LOCAL console AAA authentication

    With this command, if I change the local account setting to 'NO ASDM, SSH, Telnet or access Console' (see attached screenshot) will that still allow users to vpn in and access the network because they have to take off but any what potential access to the firewall?

    Thank you

    Hello

    Yes, if you select the option "No., ASDM, SSH, TELNET or Console access" allows to block only the admin access to the firewall. Here's the equivalent CLI for this option:

    myASA(config-username) # type of service?

    the user mode options/controls:
    Admin user is authorized to access the configuration prompt.
    NAS-prompt user is allowed access to the exec prompt.
    remote user has access to the network.

    If you use this option you will be on the third option in the above list that is remote access. Users will have the option of VPN in but no admin (asdm, ssh, telnet or console)

    Thank you

    Waris Hussain.

  • MacAfee blocked access to the web in Firefox?

    I use Firefox as my default browser and McAfee Security. Today, a popup asking if I would allow Firefox to access the internet and I accidentally pressed on 'no '. I had to use Chrome to reach this site because Firefox does not connect what anyone on the internet. How to solve this problem? My email is [email protected]

    My e-mail is [email protected]
    See updated McAfee Security Center and firewall settings to allow access to the Internet, Firefox

    Email or reply to this message if you need help

  • block access to the port 7778

    Hi all


    I use Linux and Oracle 10gAs 4 application server.


    Our Application of Test is access by users using the port 7778, I want just a few users to access my test application (just the admin user) and all other users should not have access to the application, even if they specify the right URL and the port number.

    I mean blocking port 7778 to a range of IP address for an IP range
    using oracle 10gAs.

    Some access using oracle 10gas server application control policy.


    Thanks and greetings
    Jean Louis

    Published by: Yvon March 18, 2013 04:11

    Oracle HTTP Server is based on Apache. It comes with mod_access. Like mod_access allows you to restrict some IP address ranges, you would be able to do what you need.

    Note that it may be difficult to restrict access to a specific port (you want to use a proxy/firewall to do this), but you can restrict access to some URI. Assume that you use the/foo URI to access your application, something like the below directive would do the trick:

    
       Order allow,deny
       Allow from 192.168.1.0/24
       Allow from 127
    
    

    See https://httpd.apache.org/docs/2.0/mod/mod_access.html for more information or [url https://www.google.nl/search?q=apache+restrict+access+ip+range&aq=1&oq=apache+ip+range+access] Google it.

    Thank you
    EJ

  • Block access to the DAQ hardware

    Hello everyone

    I develop a labview application using USB cDAQ 9174 and I want to block access to my material, so the only way to use the material is through my labview application. Is there a tool or a way to protect the material?

    I am concerned about someone installing a new application in my system and can then use my DAQ for new application installed.
    In my view, which can be prevented by setting permissions in windows.

Maybe you are looking for

  • Why the imported bookmarks are not displayed?

    I installed Firefox and wanted to import the settings from my old laptop. To do this, I installed MozBackup on my old Win2k laptop, used to back up my full profile on my flash drive, then installs the flash drive for the new PC Toshiba laptop with Wi

  • Siri is too sensitive

    Hello! Almost everytime I try to unlock my iPhone 6 Siri active. It is very annoying. I'm not holding the button, I'm pushing just a little time and Siri continues. If I have a Apple Watch and use Siri, I would totally turn off Siri because of this.

  • BLUETOOTH on my laptop will not allow a device to connect.

    How can I activate my BLUETOOTH on my laptop? He cannot receive a file becauce he can not allow a device to connect... My bluetooth mobile device is detected but is not active and cannot be discovered?

  • Halo 2 PC playback under vista I can't find no server even if I have a few days ago. What is happening with it!

    I recently bought Halo 2 to play on my new pc with Windows 7 and I downloaded all the updates and everything worked fine and I finished the campaign and has played 2 games online before I did. and now all of a sudden a few days later I can't seem to

  • driver power state failure win8

    had the BSOD and says that there is a failure of State driver. not a tecchy and watch some other threads flew over my head, need help please.