topic Re: URL Filtering malware alert ciscobinary.openh264.org false positive? in Advanced Threat Prevention Discussions

URL Filtering malware alert ciscobinary.openh264.org false positive?

kenanuenal — Thu, 06 Jan 2022 17:56:30 GMT

Hi, everyone,

Today since 4:44 p.m. we have these malware entries in the URL Filtering Monitor.

The strange thing is, when I look for the ZIP file in the Data Filtering Monitor, this ZIP file has been logged there for weeks.

Is that a false positive message?

Re: URL Filtering malware alert ciscobinary.openh264.org false positive?

kenanuenal — Fri, 07 Jan 2022 11:37:11 GMT

It looks like it was a false positive because the reports stopped since 9:32 this morning and the URL on the Palo Alto URL check page is no longer classified as a malware url.