topic Re: Update application v 339 in General Topics

Update application v 339

franck.lichnowski — Wed, 21 Nov 2012 13:00:00 GMT

Hello,

Since I have updated my active/passive cluster with latest Application and threat content (version 339, released yesterday), some ssl traffic is now recognized as "tor" application.

This traffic is only ssl, not tor.

Is someone else have this problem ??

I have 2 PA-4020 version 4.1.9.

I open a case for this with my network integrator.

I returned to the version 338, it solve the problem.

Regards,

Franck.

Re: Update application v 339

hsmdsdl — Wed, 21 Nov 2012 13:50:07 GMT

Hi,

we have the same problem..

Hochschule Magdeburg

PA-4050, 4.1.8

Regards,

Manfred

Re: Update application v 339

Nico — Wed, 21 Nov 2012 14:50:32 GMT

Same here, PA-5050 cluster, 4.1.9

Re: Update application v 339

KGC — Wed, 21 Nov 2012 18:02:45 GMT

Same problem here, rolling back to 338. Anyone open a case on this with PA yet?

Re: Update application v 339

hallje — Wed, 21 Nov 2012 18:03:26 GMT

Same issue here.. Rolled back to 338.. just opened a case with PA.

Re: Update application v 339

KGC — Wed, 21 Nov 2012 18:12:25 GMT

Thanks - rolling back to 338 here as well, figured no point us all opening the same so long as you tell them it's not just an isolated case.

Re: Update application v 339

hallje — Wed, 21 Nov 2012 18:15:26 GMT

Yep.. they're aware. Already got an email back from our SE saying it's a false positive and we should be seeing a re-release with a fix shortly.

Re: Update application v 339

KGC — Wed, 21 Nov 2012 18:24:08 GMT

Great - thanks for the update.

Re: Update application v 339

shasnain — Wed, 21 Nov 2012 20:04:26 GMT

Hi Guys,

For what we have learned so far through cases are that the following apps are being mis-classified as Tor:

Cisco vpn

Imap

Roku

Radius

Citrix apps

Please revert back to last content version. We are in the process of pulling the content version from the update server until we fix this problem.

Thanks,

Syed Hasnain

Re: Update application v 339

KGC — Wed, 21 Nov 2012 20:21:43 GMT

Are you missing SSL from that list?

Re: Update application v 339

shasnain — Wed, 21 Nov 2012 20:26:14 GMT

Yes,

SSL should be in the list too.

Thanks,

Syed Hasnain

Re: Update application v 339

mikand — Thu, 22 Nov 2012 09:23:40 GMT

Version 340 was released a few hours ago:

Note: This content release fixes an issue in content version 339 where some SSL traffic was being misidentified as tor.