topic Re: Maximum PAN-OS in Signature Update in General Topics

Maximum PAN-OS in Signature Update

mg_imid — Fri, 20 Dec 2013 11:22:38 GMT

Hi All,

I see in Release Note application update in Dynamic Updates or email like this :

There is a maximum PAN-OS version in Conficker.

Why some threat have limitation in PAN-OS ?

Please advice.

Thanks.

Regards,

Re: Maximum PAN-OS in Signature Update

Hithead — Fri, 20 Dec 2013 14:05:16 GMT

just locked at version 5.0.9... I can find the signature.

I guess it's only a mistake at the table.

Re: Maximum PAN-OS in Signature Update

mg_imid — Mon, 23 Dec 2013 05:03:30 GMT

Hi Hithead,

Hopefully it mistake, because i check in another version 5, it have signature for Conficker too.

But don't know in production mode, are it detected too?

Re: Maximum PAN-OS in Signature Update

Hithead — Mon, 23 Dec 2013 09:45:23 GMT

checked the older "Content Update" emails from paloalto. if you take a look you will see, that new signatures depends on a minimum OS version.

And, some modified signatures are depended from a minimum to maximum OS version. So the signature will be detected as well in newer version, but the modification of the signature is only for the OS version between min and max.