topic Re: Nat/Firewall Bypass Attack how palo alto protect from in Advanced Threat Prevention Discussions

Nat/Firewall Bypass Attack how palo alto protect from

Naweed — Mon, 02 Nov 2020 19:03:30 GMT

A new research has demonstrated a technique that allow an attacker to bypass firewall protection and remotely access any TCP/UDP service on victim machine.

https://thehackernews.com/2020/11/new-natfirewall-bypass-attack-lets.html

Re: Nat/Firewall Bypass Attack how palo alto protect from

dnevigato-Coursera — Wed, 02 Dec 2020 19:00:09 GMT

It would be great to hear from someone at PAN on this exploit.

Re: Nat/Firewall Bypass Attack how palo alto protect from

JohnCena — Thu, 10 Dec 2020 04:52:12 GMT

The attack Kill-Chain. Palo Alto Networks Firewall Deployment decryption to avoid inspection bypass for encrypted content and applications For internal clients not behind a NAT device, a source-ip classification profile may be a good

Re: Nat/Firewall Bypass Attack how palo alto protect from

mivaldi — Thu, 24 Dec 2020 22:41:43 GMT

We produced the following IPS signatures to cover this threat:

NAT Slipstreaming Detection (59667)
NAT Slipstreaming Detection (59668)
NAT Slipstreaming Detection (59669)
NAT Slipstreaming Detection (59671)
NAT Slipstreaming Detection (59672)