topic After Juniper and Fortinet... in General Topics

After Juniper and Fortinet...

santonic — Mon, 18 Jan 2016 07:20:33 GMT

What are the chances PA will be next with backdoor revealed? 🙂

Re: After Juniper and Fortinet...

reaper — Mon, 18 Jan 2016 07:35:23 GMT

my money is on 'no chance' 😉

although this is a good time for a reminder that good security starts at the administrator: make sure management interface is unreachable from unauthorized networks, use strong passwords, change passwords regularly, perform thorough accounting of administrative access, educate users, ... 😉

Tom

Re: After Juniper and Fortinet...

rbista — Mon, 18 Jan 2016 16:21:29 GMT

so there is no hard-coded root account or backdoor in the system?

Re: After Juniper and Fortinet...

santonic — Tue, 19 Jan 2016 07:17:22 GMT

Still waiting for some official response 🙂 Or emergency patch 🙂

Re: After Juniper and Fortinet...

pulukas — Tue, 19 Jan 2016 11:45:06 GMT

If you really do want an official reply your best path is to contact your sales engineer. Palo Alto in general is very careful about their public statements. But are much more open in private conversations with customers, especially if your company has agreed to the NDA.

Re: After Juniper and Fortinet...

bmorris1 — Wed, 10 Feb 2016 10:37:19 GMT

rbista... there are some hidden accounts. If you run a firewall on specific software version (sorry I can't remember which one but you can check the release notes for the fix to determine it) you can run the command 'show admins all' and it will display hidden admins accounts. My understanding is that these are specific accounts designed for certain processes to use though, that is why they are kept hidden.

Ben