topic Re: Why is there a Maximum PAN-OS Version for signatures? in General Topics

Why is there a Maximum PAN-OS Version for signatures?

ddaniels — Wed, 15 Jan 2014 18:04:24 GMT

Hi,

Why is there a Maximum PAN-OS Version for some signatures? How can I tell if newer versions of PAN-OS can detect the same thing?

E.g. I saw this:

Modified Anti-spyware Signatures (1)

Severity	ID	Attack Name	Default Action	Minimum PAN-OS Version	Maximum PAN-OS Version
high	20000	Conficker DNS Request	alert	3.0.0	4.1.0.0

Thanks,

Drew Daniels

Re: Why is there a Maximum PAN-OS Version for signatures?

sraghunandan — Wed, 15 Jan 2014 20:19:33 GMT

I could find the same signature on 5.0.9 as well. So i guess for now we need to consider and go by only the minimum version.let me look further into it.

Re: Why is there a Maximum PAN-OS Version for signatures?

sraghunandan — Wed, 15 Jan 2014 23:14:11 GMT

One more thing that i Observed from the release notes was the maximum versions are stated only for modified signatures .

Re: Why is there a Maximum PAN-OS Version for signatures?

mikand — Tue, 21 Jan 2014 08:55:26 GMT

There was a similar thread recently.

From what I understand it means that the modification only applies for PANOS 3.0.0 - 4.1.0.0.

That is if you run 4.1.1 or 5.0.x etc then there was no modification.

Could be good to know if you suddently starts to get alarms after the update is applied.

Re: Why is there a Maximum PAN-OS Version for signatures?

Retired Member — Fri, 24 Jan 2014 19:40:06 GMT

Yes I agree with you.That is about modification.