topic Re: Threat-version: 434-2198 and new signatures - problem in General Topics

Threat-version: 434-2198 and new signatures - problem

_slv_ — Wed, 07 May 2014 06:59:50 GMT

Hello

We can read in email "Palo Alto Networks Content Updated" that version 435 give us:

New Vulnerability Signatures (4)

Severity	ID	Attack Name	CVE ID	Vendor ID	Default Action	Minimum PAN-OS Version
low	36421	Phishing Webpage Detection			alert	4.0.0
critical	36442	Malicious Flash file Detection			alert	4.0.0
critical	36443	Apache Structs ClassLoader Manipulation Security Bypass Vulnerability	CVE-2014-0113		alert	4.0.0
critical	36444	Microsoft Internet Explorer Memory Corruption Vulnerability	CVE-2014-1776	MS14-021	reset-client	4.0.0

I have this update installed:

show system info :

treat-version: 434-2198

threat-release-date: 2014/04/29 12:08:29

I'd like to make execptions for 36421 and give for it action block (or reset) but I'm unable to do it. I can't find such id

What I do wrong?

Regards

SLawek

Re: Threat-version: 434-2198 and new signatures - problem

_slv_ — Wed, 07 May 2014 09:22:31 GMT

I 'm unable to select new aplication too:

New Applications (3)

Risk	Name	Category	Subcategory	Technology	Depends On	Previously Identified As	Minimum PAN-OS Version
4	bittorrent-sync	general-internet	file-sharing	client-server	bittorrent,web-browsing	web-browsing, unknown-udp	3.1.0
4	openmeetings	collaboration	internet-conferencing	client-server	flash,rtmp,rtmpt,web-browsing,websocket	web-browsing,websocket,flash,rtmp,rtmpt	3.1.0
1	yik-yak	collaboration	social-networking	client-server	apple-maps,google-maps,ssl,web-browsing	web-browsing,ssl	3.1.0

Could anyone confirm that this is not only my problem?

Regards

SLawek

Re: Threat-version: 434-2198 and new signatures - problem

licenselu — Wed, 07 May 2014 10:36:40 GMT

Hello,

Running PA500 (5.0.12) with 434-2198.

Same problem here...

Regards,

Re: Threat-version: 434-2198 and new signatures - problem

FJU-ITCS — Wed, 07 May 2014 11:03:49 GMT

Hi,

you have installed 434-2198 but the applications come with 435-2208 Version 435 Content Release Notes

Regards,

Frank

Re: Threat-version: 434-2198 and new signatures - problem

_slv_ — Wed, 07 May 2014 11:57:37 GMT

oops You are right Frank.

But the question is why they sending emails with anounce new version when this version isn't available to download. I checked that is something newer than I had alredy installed bofore I create this topic.

Regards

Slawek

Re: Threat-version: 434-2198 and new signatures - problem

kbe — Thu, 08 May 2014 08:00:55 GMT

The email i recieved was sent at: Date: Tue, 6 May 2014 16:48:15 -0700

Have you checked your update scheduler on the PA for these updates?

Re: Threat-version: 434-2198 and new signatures - problem

_slv_ — Thu, 08 May 2014 08:15:54 GMT

Of course Yes, I did it by clicking Check Now in Dynamic updates section.

Regards

Slawek

Re: Threat-version: 434-2198 and new signatures - problem

kbe — Thu, 08 May 2014 14:10:47 GMT

Maybe the update server you connected to did not hold the update if you checked short after the release of the notification.

In wich timezone are you?

Did you get the update now?

Re: Threat-version: 434-2198 and new signatures - problem

_slv_ — Thu, 08 May 2014 19:03:48 GMT

Hi KBE

it was probably as You wrote

I'm on CET zone, I got update when I sow Frank response.

Regards

Slawek