topic Re: FLV Filetype not covers SWF Files in General Topics

FLV Filetype not covers SWF Files

mhuels — Thu, 14 Apr 2011 15:08:17 GMT

Because of the occassionally recurring vulnerability of flash players it would be a good idea to block all Flash files. Unfortunately the file type FLV do not cover all flash files, especially SWF will not be blocked by a so specified file blocking profile.

How can i make a service request to Palo Alto to build such a SWF file type? Does anybody made a custom thread signature, which covers this file type?

greetings

Manfred

Re: FLV Filetype not covers SWF Files

kbrazil — Thu, 14 Apr 2011 15:41:47 GMT

Hi Manfred,

Have you tried blocking the "flash" application in the Security Policy?

Cheers,

Kelly

Re: FLV Filetype not covers SWF Files

mhuels — Thu, 14 Apr 2011 15:48:32 GMT

kbrazil schrieb:

Hi Manfred,

Have you tried blocking the "flash" application in the Security Policy?

Cheers,

Kelly

To block the (web-)application flash is not sufficiently. I guess, this would not avoid swapping files with emailprograms or others.