Hello, Found this and figured I'd forward it along. Web Application Firewall Criteria http://www.enterpriseefficiency.com/author.asp?section_id=1207&doc_id=204321 Regards, - Robert Auger WASC Co Founder http://www.webappsec.org/ http://www.cgisecurity.com/ http://www.qasec.com/