topic Re: Blank Threat Description in General Topics

Blank Threat Description

apackard — Wed, 06 Jun 2012 11:30:11 GMT

I'm running Panorama 4.1.6 and am getting threat entries in the logs with no name/description (the attack id is simply repeated in the name field).

This is mainly for custom threats (they do include real names and descriptions in the custom objects), but I also have some 'factory' signatures - viruses - doing the same.

My Threat/App packages are all up to date, and the custom signatures were created on Panorama and shared to the PA devices.

Anyone know of any known causes of this?

Cheers

Re: Blank Threat Description

jdelio — Thu, 19 Jul 2012 20:13:27 GMT

2 quick questions for you..

1. Has this ever worked that you can remember? Does it show anything different if you pull up the info on the Firewall itself?

2. Has this Panorama been involved in an upgrade recently?

Regards.

Re: Blank Threat Description

apackard — Fri, 20 Jul 2012 08:58:45 GMT

Hi,

1) I'm 99% sure that the custom signatures have worked - can't be 100% as it's been a while, but I'm as sure as can be. I can't guarantee the specific viruses that are displaying properly have displayed previosuly, but can say that most viruses are showing.

2) Yes, we've had a few upgrades in the past 12 months, but I can't remember what version we were running when the custom sig's were made.

Rgds

Re: Blank Threat Description

jdelio — Tue, 24 Jul 2012 12:33:25 GMT

If you have upgraded, then you might have to re-create the custom threats, as something might have been "lost" in the upgrade. Re-creating them on the newer version should update everything as needed. I would start with 1 that you know is showing up more often.

Re: Blank Threat Description

apackard — Mon, 30 Jul 2012 15:04:25 GMT

I've re-created and it's slightly better - we get correct display on the firewalls themselves but not within Panorama (despite the fact that everything was created in Panorama!).

Re: Blank Threat Description

jdelio — Tue, 31 Jul 2012 16:15:05 GMT

Then if you have not already, please open a case with support to address this issue.

Kind Regards