topic Diabled Application in VSYS1 in Next-Generation Firewall Discussions

Diabled Application in VSYS1

Nasser-Bank — Thu, 18 Apr 2024 08:24:12 GMT

I have received an high risk alert on PA3250 IOS 9.1.16 "Disabled applications in vsys1: 104apci-unnumbered-startdt-act 104apci-unnumbered-startdt-con 104apci-unnumbered-stopdt-act 104apci-unnumbered-stopdt-con 104apci-unnumbered-test-act 104apci-unnumbered-test-con 104asdu-file-transfer-type120 104asdu-file-transfer-type121 104asdu-file-transfer-type122 104asdu-file-transfer-type123 104asdu-file-transfer-type124 104asdu-file-transfer-type125 104asdu-file-transfer-type126 104asdu-file-transfer-type127 104asdu-param-control-type110 104asdu-param-control-type111 1"

Why did I receive such alert and i didn't disabled any application and what type of file transfer has been done ?

Re: Diabled Application in VSYS1

kiwi — Thu, 18 Apr 2024 09:04:21 GMT

Hi @Nasser-Bank ,

Are you installing new content updates ?

These can contain new applications and you might have set up your dynamic updates in such a way that it disables new applications:

Tips & Tricks: How to Use 'Disable New Apps' in Content Update

Tips & Tricks: How to Use 'Disable New Apps' in PAN-OS 10.x and 11.x

Kind regards,

-Kim.