topic Re: Unknown Virus in General Topics

Unknown Virus

gafrol — Fri, 18 Mar 2011 11:16:32 GMT

Hi all, I came across this "virus" alerts on PAN-OS 4.01. What does that mean ? There is no info available for these ID's....

Re: Unknown Virus

cityofkingsland — Fri, 18 Mar 2011 11:19:17 GMT

I am also seeing this a lot more often since the 4.0.1 upgrade. I think the way PA determines if its a virus or not has changed since 3.x. Not so much based on defenitions, based more on an internet database of file extensions and other virus like characteristcs.

Hope someone knows whats causing them.

Re: Unknown Virus

fredallee — Fri, 18 Mar 2011 16:23:19 GMT

It looks like a bug. Every virus sig should have a name associated with it and not just a threat ID number. Can you open a case with support?

Thanks,

Alfred

Re: Unknown Virus

gafrol — Fri, 18 Mar 2011 17:10:37 GMT

opened support case.

Re: Unknown Virus

cityofkingsland — Tue, 22 Mar 2011 15:27:19 GMT

Any update on this?

Re: Unknown Virus

gafrol — Wed, 23 Mar 2011 08:01:48 GMT

case is open. Need to deliver additional logs, but currently I have no access to the FW. If anyobdy else is having the same problem,pls open a case too. rgds Roland

Re: Unknown Virus

gafrol — Wed, 23 Mar 2011 18:22:41 GMT

Support has confirmed this bug in 4.0.1, it will be fixed in 4.0.2

Re: Unknown Virus

OCDBE — Thu, 14 Apr 2011 09:25:03 GMT

Hello,

i noticed panos 4.0.2 has been released, but i can't find in the release notes this issue has been fixed ?

Anyone can confirm this ?

Thanks !

Re: Unknown Virus

cityofkingsland — Thu, 14 Apr 2011 11:41:30 GMT

This has been fixed in 4.0.2. I just updated and all my threats now have correct IDs and information.