topic Re: Seek to assist to check IPS signature database and update in Palo Alto in Next-Generation Firewall Discussions

Seek to assist to check IPS signature database and update in Palo Alto

sam_phas — Mon, 17 Jul 2023 08:10:20 GMT

Dear All,

I am writing this to seek your assist help to check IPS signature database and update in Palo Alto Next-Generation firewall.

Best Regards,

Re: Seek to assist to check IPS signature database and update in Palo Alto

PavelK — Mon, 17 Jul 2023 23:29:39 GMT

Hello @sam_phas

thanks for posting.

Would it be possible to provide more details what issue you are facing? Could you also check this KB? This article includes content update best practices.

Kind Regards

Pavel

Re: Seek to assist to check IPS signature database and update in Palo Alto

sam_phas — Tue, 18 Jul 2023 02:17:24 GMT

Hello Pavel,

I want to check IPS signature (CVE) database and new released in my Next Generation Firewall. Could you please help me guide how to check it.

Best Regards,

Samphas

Re: Seek to assist to check IPS signature database and update in Palo Alto

PavelK — Tue, 18 Jul 2023 04:18:12 GMT

Hello @sam_phas

thank you for reply.

To check what is included in the content update directly from the Firewall you can navigate to: Device > Dynamic Updates, then click on "Release Notes" located on the right hand side. Alternatively, you can get the same from Customer Support Portal: Updates > Dynamic Updates > Release Notes.

Regarding search for specific CVE, you can find it in Threat Vault. Here is KB for reference.

Kind Regards

Pavel

Re: Seek to assist to check IPS signature database and update in Palo Alto

sam_phas — Thu, 20 Jul 2023 01:24:09 GMT

Hello Pavel,

--> Firewall you can navigate to: Device > Dynamic Updates, then click on "Release Notes" located on the right hand side.

I did not find above path as you guide. Could you please share as screenshot here.

Re: Seek to assist to check IPS signature database and update in Palo Alto

PavelK — Thu, 20 Jul 2023 05:25:29 GMT

Hello @sam_phas

here is screen shot:

Kind Regards

Pavel

Re: Seek to assist to check IPS signature database and update in Palo Alto

sam_phas — Thu, 20 Jul 2023 06:36:39 GMT

Hi Pavel,

Yes thank, But I want to ask you is the IPS signature update release in my Firewall.

Thanks,

Samphas

Re: Seek to assist to check IPS signature database and update in Palo Alto

ozheng — Fri, 21 Jul 2023 15:17:52 GMT

Please open a case to TAC (Your device needs to have a valid support plan).

Please specify the CVE you want to know the coverage, and the relevant team will confirm or not its coverage.

Olivier

Re: Seek to assist to check IPS signature database and update in Palo Alto

sam_phas — Tue, 25 Jul 2023 03:31:03 GMT

Hi Ozheng,

I just want to know where we can check all the CVE that release in my firewall not only the specify CVE.

Thanks,

Samphas

Re: Seek to assist to check IPS signature database and update in Palo Alto

ozheng — Tue, 25 Jul 2023 07:22:10 GMT

Hello Samphas,

Maybe you should approach your PaloAlto account team to get the list of CVEs.
(As Pavel asked earlier, we have no clue of the final use of such request. It can be for information as it can eventually be for performing a cyber attack?)

Olivier

Re: Seek to assist to check IPS signature database and update in Palo Alto

sam_phas — Tue, 25 Jul 2023 07:38:23 GMT

Hello Ozheng,

May I know the process of Palo Alto firewall on-premise get new CVE update? and where the CVE is stored in Palo Alto firewall?

Thanks,

Samphas