topic Can Palo Alto handle (AET) Advanced Evasive Techniques ? in General Topics

Can Palo Alto handle (AET) Advanced Evasive Techniques ?

sunilsadanandan — Thu, 21 Oct 2010 21:27:03 GMT

Hi,

You must have heard of the recent disclosure of exploits using AET. I found this posting.

http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci1522097,00.html?track=NL-34&ad=792591&asrc=EM_NLN_12713380&uid=8455137

Its looks like the IPS device that they are using is a Palo Alto device. Is there any work being done to protect agiasnt these kind of attacks ?

Regards,

Sunil

Re: Can Palo Alto handle (AET) Advanced Evasive Techniques ?

migration — Thu, 21 Oct 2010 23:00:14 GMT

Hi Sunil,

We have protections against known evasions and also a combination of such evasions... which are also known as AETs. In the test referenced in the URL below they seem to be using a big endian evasion, protection for which was added in content release version 212 released on Oct 19th.

Let me know if you have any further questions,

Thanks,

Sandeep