topic Can Palo Alto firewall prevent/intercept this JS in Github DDoS event? in General Topics

Can Palo Alto firewall prevent/intercept this JS in Github DDoS event?

paloalto.netfos — Fri, 08 May 2015 06:32:32 GMT

Dear Sirs,

On March 26 the Github has been attacked by a five-days DDoS. Many people pointed out that an javascript infected from China was very suspicious because it would connect to Github per 2 seconds. University of Toronto’s Canada Centre and Citizen Lab call this weapon of China as “The Great Cannon”.

The problem is, can Palo Alto firewall prevent/intercept this JS? If TP is enable.

Regards,

Bill Chen

Re: Can Palo Alto firewall prevent/intercept this JS in Github DDoS event?

pulukas — Sun, 10 May 2015 16:58:33 GMT

Yes, Palo Alto can mitigate this type of attack. You can see the general deployment recommendations in these documents.

Understanding DoS Protection

Application DDoS Mitigation

Re: Can Palo Alto firewall prevent/intercept this JS in Github DDoS event?

paloalto.netfos — Mon, 11 May 2015 02:54:01 GMT

Thank you, Steven.

I thank it's a misunderstanding.

Any traffic pass through "the great wall" of China, could be replaced an JS about 1.75% chance. My question is can the visitor prevent/intercept the fake javascript?

Re: Can Palo Alto firewall prevent/intercept this JS in Github DDoS event?

paloalto.netfos — Mon, 11 May 2015 02:57:31 GMT

here is the Fake JS

[JavaScript] Malicious Baidu JavaScript - Pastebin.com