topic Re: Active CVE's on 10.1.6 -h6 in Next-Generation Firewall Discussions

Active CVE's on 10.1.6 -h6

Sujanya — Mon, 12 Dec 2022 14:22:51 GMT

Can anybody help me with the details of Active CVE's on 10.1.6-h6 version.

Re: Active CVE's on 10.1.6 -h6

Raido_Rattameister — Mon, 12 Dec 2022 15:45:24 GMT

You can check CVEs at https://security.paloaltonetworks.com

Also Known Issues https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes/pan-os-10-1-6-known-and-addressed-issues/pan-os-10-1-6-known-issues

Re: Active CVE's on 10.1.6 -h6

Sujanya — Tue, 13 Dec 2022 06:41:48 GMT

Hi Raido,

Thanks for the URL's. I will check on the same .

Also, can you please let us know ss per IIRC, is there any license requirement to be on 10.2 (adv-threat).

Re: Active CVE's on 10.1.6 -h6

Raido_Rattameister — Tue, 13 Dec 2022 13:18:19 GMT

Yes you do have license requirement to apply threat detection/prevention profiles.

Threat and antivirus updates are under same subscription.

Re: Active CVE's on 10.1.6 -h6

Sujanya — Wed, 14 Dec 2022 09:27:45 GMT

Hi @Raido_Rattameister ,

Yes we have purchased ATP license and the it is applied in our PA firewall with PAN-OS 10.2.

There is a need to downgrade the firewall to 10.1 version , is there any requirement that the ATP functionalities ( ex: inline cloud analysis) will works only with 10.2 Version.

Re: Active CVE's on 10.1.6 -h6

Raido_Rattameister — Wed, 14 Dec 2022 14:04:31 GMT

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/upgrade-pan-os/downgrade-pan-os/downgrade-a-firewall-to-a-previous-feature-release