topic Re: SSL Renegotiation Denial of Service Vulnerability in General Topics

SSL Renegotiation Denial of Service Vulnerability

bhavin_bhatt — Fri, 08 Jul 2011 08:35:33 GMT

Hi All,

I have received an Alert for SSL Renegotiation Denial of Service Vulnerability.

I have visited the website, and for some reason, Palo Alto thinks i am the attacker,

and the website i am visiting is the victim.

I have attached screen shots of this issue, please help me in understanding this issue/threat.

I am not sure how to treat it and why Palo Alto will Alert me.

Cheers

Bhavin

skrall — Fri, 08 Jul 2011 17:37:02 GMT

Bhavin,

You should open a case with support. This may be a false positive. Information support will need:

- Threat logs

- output of "show system info"

- Is there a URL involved that triggers this regularly?

- If possible, a sniffer trace at the client showing the traffic to the site generating the alert.

Steve Krall

bhavin_bhatt — Sat, 09 Jul 2011 11:43:25 GMT

Thanks ...

WIll open a case with support

cheers

Bhav