topic Re: False-positive and White-listing submission (Perimeter81 by SaferSocial LTD) in VirusTotal

False-positive and White-listing submission (Perimeter81 by SaferSocial LTD)

Jonathan11 — Thu, 18 Oct 2018 12:40:11 GMT

Hello,

We got our users reporting that Palo Alto show a false-positive warning of Perimeter81.

Here is a link to TotalVirus report:

https://www.virustotal.com/en/file/86117014500b7e1cda6ed16d112148f3543a4ec457bcaf84271687bc2a6be39f/analysis/

The file can be downloaded here (via Google Drive):

https://drive.google.com/file/d/1JvizelvuMu8W8byYWVln2r4Z0QSmrGLk/view?usp=sharing

(The file has a digital signature of Safer Social LTD)

Please check the false-positive block alert and whitelist Safer Social signed products.

Perimeter81 by Safer Social LTD provides cloud VPN in order to allow businesses to maintain and protect their private cloud resources and is used by more then 150 compancies worldwide.

Thanks,

Jonathan

Re: False-positive and White-listing submission (Perimeter81 by SaferSocial LTD)

mivaldi — Wed, 24 Oct 2018 22:01:07 GMT

Jonathan,

If there are false positive alerts that means that there is a Palo Alto Networks customer experiencing this issue.

If you see the VirusTotal report, you will see that the verdict for this sample by Palo Alto Networks is benign.

The issue can be caused by a signature collision. In that case, please have the Palo Alto Networks customer open a case with our Support team, so we can work on investigating the signature collision, and see if we can find any way to have it resolved.

Re: False-positive and White-listing submission (Perimeter81 by SaferSocial LTD)

Jonathan11 — Sun, 28 Oct 2018 11:06:32 GMT

Thank you for your reply.

I just want to make sure I understand correctly:

On our end there is nothing we can do in order to prevent the error and the client himself should report this issue?

Re: False-positive and White-listing submission (Perimeter81 by SaferSocial LTD)

mivaldi — Mon, 29 Oct 2018 16:50:05 GMT

Yes, this forum is for non-customers who observe WildFire verdict determination issues causing false positives in VirusTotal.

Signature Collisions is an antivirus issue, and support is offered to paying customers.